Certificated Enforcement Agents · England & Wales · Est. 2012 0330 789 0849 · admin@crblimited.co.uk · Mon-Fri, 9am-5pm

Your information · UK GDPR · Updated 17 September 2026

Privacy and Cookie Policy

How we collect, use and look after personal information, whether you are a client, an enquirer, or someone an enforcement matter concerns.

Draft for review. This policy has been prepared for Commercial Rent Bailiffs Limited and is awaiting approval by the company and its advisers before publication.

1. Who we are

CRB Limited, trading as Commercial Rent Bailiffs Limited, is registered in England & Wales under company number 07900765. Our registered office is Alexandra Gate Business Centre, 2 Alexandra Gate, Ffordd Pengam, Cardiff CF24 2SA. For anything relating to this policy or your personal information, contact us at admin@crblimited.co.uk.

2. The information we collect

When you contact us or instruct us, we collect the information you give us: your name, company, email address, phone number and the details of your case, including information about the tenancy, the premises and the sums owed. If you correspond with us by email, phone or post, we keep a record of that correspondence.

This website is a simple informational site. It does not require an account and it does not collect personal information in the background.

3. How we use your information

We use the information you provide to respond to your enquiry, to provide our enforcement, recovery and security services, to keep proper records of the work we carry out, to invoice and account to you, and to meet our legal and regulatory obligations.

4. Our lawful bases

We process personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018) on the following bases: performance of a contract where you instruct us, our legitimate interests in running and promoting our business, and compliance with the legal obligations that apply to enforcement work.

5. Information about tenants, debtors and occupiers

Enforcement work necessarily involves processing information about the people and businesses the enforcement concerns, such as tenants in arrears, judgment debtors and unauthorised occupiers. We process that information on the instruction of our clients and in connection with statutory enforcement procedures, we handle it confidentially, and we retain it only as long as the matter and our legal obligations require.

6. Who we share information with

We share information only where the work requires it: with the courts and HM Courts & Tribunals Service, with authorised High Court Enforcement Officers, with your instructing solicitors or agents, with contractors engaged on an attendance such as locksmiths, with the police where liaison is appropriate and lawful, and with our professional advisers and insurers. We do not sell personal information to anyone.

7. How long we keep it

We keep case records for as long as they are needed for the matter and afterwards for the periods required by law, regulation and our insurers, after which they are securely deleted or destroyed.

8. Your rights

Under UK data protection law you have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to ask for data to be deleted where there is no good reason for us to keep it, to object to or ask us to restrict certain processing, and to data portability where it applies. To exercise any of these rights, email admin@crblimited.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

9. Cookies

This website sets no cookies at all. Nothing is written to your device by this site, so there is no cookie banner and nothing for you to accept or decline.

We do count page visits, using our own software on our own server rather than a third party such as Google Analytics. For each page loaded we record the address of the page and the website you arrived from, and nothing else. We do not record your IP address, your browser, or any identifier, and nothing links one page you view to another or to a later visit, so the counts cannot be traced back to any person. If your browser sends a Do Not Track or Global Privacy Control signal, we do not count the visit at all. We use this only to see which pages are worth keeping.

10. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page with the date it took effect.