Legal

Privacy Policy

How UDRA collects, uses, stores and protects information in the course of debt recovery and receivables management.

Last updated: August 2026

Information we collect

We collect information provided by clients when placing a recovery matter, including contact details, contractual documentation and account records. In the course of recovery we also process information relating to debtors, including contact details, correspondence and payment history.

How information is used

Information is used solely to assess, progress and report on recovery matters, to meet legal and regulatory obligations, and to communicate with clients about their files. We do not sell client or debtor data, and we do not use it for unrelated marketing.

Lawful basis and confidentiality

Processing is carried out on the basis of contractual necessity, legitimate interest in recovering lawfully owed sums, and compliance with legal obligations. All personal information is treated as confidential and disclosed only where necessary to progress a matter or where required by law.

Data security

Client data is transferred through encrypted channels and access is restricted to personnel assigned to the relevant mandate. Systems are access-controlled, and call recordings and case records are stored under the retention terms agreed with each client.

Retention

Records are retained for the period agreed in the client contract, or for such longer period as legal, regulatory or audit obligations require. Records are securely destroyed at the end of the applicable retention period.

Disclosure to third parties

Information may be shared with local recovery partners, legal counsel or courts where necessary to progress a matter, and with service providers acting on our instructions under confidentiality obligations. International transfers are made with appropriate protections in place.

Individual rights

Individuals may request access to the personal information we hold about them, request correction of inaccurate information, or object to processing in certain circumstances. Requests are assessed against our legal obligations and our client's instructions.

Complaints and contact

Questions and complaints regarding privacy should be directed to info@udra.com.pk. We acknowledge privacy enquiries promptly and respond substantively within the timeframes required by applicable law.