• Current or potential customers of the Company or its clients
• Officers or beneficiaries of legal entities
• Persons recorded in the Bankruptcy Registry
• Subjects of a debt collection procedure initiated by us on behalf of any of our clients

Credit Risk Solutions

Credit risk management is the practice of determining creditworthiness — assessing new and existing customers for their financial health, which can indicate their ability to pay on time. In this scope our clients request information on the financial standing of companies and assessment of the risk associated in trading with the said companies. During the course of this assessment we collect information on the physical entities associated as directors, secretary and shareholders of companies.

The data we collect will include:

• Registration details (Registered Name, Registered Address, Registration Number etc.)
• Director, Secretary and Shareholder information
• Capital (Issued, No. of Shares, Nominal, Value etc.)
• Payment records and Charges (Current and Historic)
• Negative information and bankruptcies
• Financial Statements (when available)
• Credit scoring assessment
• Company operational histories, subsidiaries, affiliates, and lines of business
• Business compliance information from public sources
• Newspaper and media reports
• Bankruptcies information as retrieved from the Official Receiver

Our data originates from:

• Public sector information (e.g. Company Registrars and Official Receiver)
• Governmental and administrative public records
• Organisations providing information directly to us
• Straight from the Data Subject
• Regulatory bodies and law enforcement agencies
• Media sources

Infocredit does not seek to collect any information in relation to a European resident’s race or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation, genetic or biometric data.

Debt Recovery & Receivables Management

We offer debt collection services and receivables management to our clients where they assign the process of debt collection or receivables management to us. This entails the processing of personal data of the debtors. These personal data are provided by our clients and the processing is limited to the sole purpose of collecting the debt. Additionally, data may be collected straight from the data subject during our contact with them.

Training

To register as a delegate for an event or training you must complete a registration form. During registration you are required to give your contact information. This information enables us to process and fulfil your enrolment online so that we can contact you about the events and trainings for which you have expressed interest.

• Name
• Address
• Phone number
• Email address
• Company name and position (optional)

Should the training or seminar be HRDA subsidized you will be required to provide more information to HRDA according to their requirements. Infocredit does not seek to collect any sensitive personal data as defined under GDPR.

In each transmission to third parties every measure shall be taken beforehand so that only the necessary data shall be transmitted for the implementation of the contract, along with the effective requirements for their legitimate and lawful processing. Exempt are those cases in which the communication of the data is affected due to some legal or statutory obligation.

In cases where it is necessary to communicate your personal data to countries outside the European Union, which do not offer adequate guarantees for the protection of your personal data, our company shall be obliged and hereby undertakes the responsibility to conclude contractual clauses in the form of a Data Transfer Agreement between our Company and the Company to which the data are communicated, in order to safeguard the information transmitted.

Infocredit applies throughout the data processing procedure the appropriate technical, physical, and administrative security measures for the protection and security of the personal data from loss, misuse, damage or modification, unauthorised access and disclosure, in compliance with article 32 of the GDPR 679/2016, in order to ensure the appropriate security level against those risks.

• ISO 27001/2013 Certification
• Dedicated information security team
• Ongoing infrastructure checks for weaknesses and intrusions
• HTTPS protocols for secure and encrypted client communication
• Firewalls
• Information Security Management System (ISMS)
• Confidentiality clauses in agreements with suppliers and employees
• Adequate training for all employees that handle personal data

When you view one of our websites, following consent, we may store information on your computer. This information will be in the form of a “Cookie” or similar file and can help us in many ways. For example, cookies allow us to tailor our website to better match your interest and preferences. With most Internet browsers, you can erase cookies from your computer hard drive, block all cookies or receive a warning before a cookie is stored. Please refer to your browser instructions or help screen to learn more about these functions.

For the purposes of this Privacy Notice we act as “data controllers” when we determine the purposes for which and the manner in which any personal data are, or are to be processed. Furthermore, we act as “data processors” when we obtain, record or hold the information or data or carry out any operation or set of operations on the information or data.

Infocredit Group Ltd is committed to creating long-term value for all stakeholders by delivering services in a sustainable, transparent, and ethical manner.

As part of our forward-looking strategy, in 2025 Infocredit Group Ltd established a wholly owned subsidiary The Corpro Ltd which will eventually take over all Customer Contact Centre operations and transferred the operations of customer debt collections under Decol Services Ltd where it holds a 50% stake. This structure ensures dedicated focus, fosters innovation and service excellence, offers operational flexibility, and allows the Group to concentrate on strategic growth and development.

Our Commitments

• Achieving excellence in customer and stakeholder satisfaction through continuous improvement
• Embedding Environmental, Social, and Governance (ESG) principles in all aspects of our business
• Protecting the environment and contributing to sustainable development
• Ensuring a safe and healthy workplace that embraces diversity and inclusion
• Maintaining responsible and transparent communication with all stakeholders
• Complying with applicable national and international laws, regulations, and standards
• Providing ongoing training and engagement opportunities to our people
• Safeguarding the confidentiality, integrity, and availability of information and services at all times

How We Deliver

• Understanding and meeting the requirements of all stakeholders
• Diligent risk management
• Setting and monitoring high operational and ethical standards
• Achieving excellence in Information Security through planning, resources, and evaluation
• Ensuring business continuity and service excellence through our specialized operations
• Maintaining effective systems for addressing deviations and implementing corrective measures
• Leveraging new technologies and best practices to improve operations
• Leading and participating in industry related Research and Development projects

We set measurable targets (KPIs) to track our performance, reviewed at least annually, and embedded within our Integrated Management System, aligned with ISO 9001:2015 (Quality Management), ISO 22301:2019 (Business Continuity), ISO 27001:2022 (Information Security), ISO 18295-1:2017 (Customer Contact Centres), and all relevant laws, regulations, and accepted CSR practices.

Top Management is responsible for the design, implementation, and continual improvement of our systems, supported by all employees. Every staff member and external provider has a duty to protect Quality, Occupational Health & Safety, Environment, and Information Security & Business Continuity through their actions. This Policy, approved by the Managing Director, is available to all interested parties and communicated to stakeholders as appropriate, and reviewed regularly to remain relevant as requirements, organizational structures, and business methods evolve.