Privacy Notice for Debtors, Counterparties and Other Third Parties
Last Updated: 19 September 2026
This Privacy Notice explains how GRANDLIGA INTERNATIONAL LAW FIRM LLC (“Grandliga”, “we”, “us”, or “our”) processes personal data relating to debtors, counterparties and other third parties whose information may be obtained from our clients, public records, professional sources or other lawful sources in connection with legal, debt recovery, litigation, arbitration, enforcement, asset tracing and related professional services.
This notice supplements our Privacy & Data Protection Notice, which contains more detailed information about our global privacy practices, international transfers, security, retention and individual rights.
1. Who We Are
The controller responsible for the processing described in this notice is:
GRANDLIGA INTERNATIONAL LAW FIRM LLC
8 The Green, Ste A
Dover, Delaware 19901
United States of America
Privacy contact:
[email protected]
Grandliga provides international legal, debt recovery, dispute resolution, litigation, arbitration, enforcement, asset tracing and related professional services.
2. Who This Notice Applies To
This notice may apply to personal data relating to persons who are not necessarily clients of Grandliga, including:
- debtors;
- alleged debtors;
- guarantors;
- counterparties to contracts or disputes;
- directors and officers of companies;
- shareholders, members and beneficial owners;
- authorised representatives;
- employees or contact persons of relevant organisations;
- witnesses;
- experts;
- parties to litigation, arbitration, insolvency or enforcement proceedings;
- persons connected with relevant assets or transactions;
- other individuals whose information is relevant to a legal, debt recovery, enforcement or professional matter.
The fact that Grandliga processes information about a person does not necessarily mean that Grandliga represents that person or has entered into any contractual relationship with them.
3. Why We May Process Your Personal Data
Grandliga may receive instructions from a client concerning a debt, contractual relationship, dispute, judgment, arbitration award, enforcement matter, asset tracing assignment or other legal matter.
In order to assess, manage or pursue such a matter, it may be necessary to process personal data relating to persons other than our client.
For example, we may need personal data in order to:
- identify a debtor or counterparty;
- verify a claim or relevant factual circumstances;
- establish contact details;
- communicate regarding a debt, claim or dispute;
- negotiate payment, settlement or resolution;
- identify or locate assets;
- prepare or conduct court or arbitration proceedings;
- enforce judgments, awards or settlements;
- participate in insolvency or similar proceedings;
- establish, exercise or defend legal rights;
- comply with legal or professional obligations.
4. Categories of Personal Data We May Process
Depending on the circumstances, we may process information such as:
- name and surname;
- business or professional name;
- postal address;
- telephone number;
- email address;
- date of birth where relevant and lawful;
- professional position or role;
- company directorships or ownership interests;
- information concerning beneficial ownership or control;
- information concerning contractual relationships;
- invoices, debts, claims and payment history;
- correspondence and communications;
- court, arbitration, enforcement or insolvency information;
- information concerning judgments or awards;
- information concerning relevant assets, property or transactions;
- publicly available professional or corporate information;
- information necessary to verify identity;
- other information reasonably relevant to the professional matter.
Where necessary and permitted by law, a legal matter may also involve sensitive or specially protected information, including information relating to health, criminal proceedings or other protected categories.
Grandliga does not seek to collect such information unless it is relevant and reasonably necessary for the matter concerned.
5. Sources of Personal Data
We may obtain personal data from:
- our clients;
- creditors;
- counterparties;
- authorised representatives;
- lawyers and other professional advisers;
- documents and evidence provided to us;
- correspondence and communications;
- courts and arbitration tribunals;
- enforcement, insolvency and public authorities;
- public corporate registers;
- public court records;
- property or other official registers;
- publicly available sources;
- professional databases used lawfully;
- local legal professionals;
- debt recovery and enforcement professionals;
- investigators or asset tracing specialists acting lawfully;
- experts, consultants and translators;
- the individual concerned;
- other lawful sources relevant to the matter.
We may therefore process personal data even where it has not been obtained directly from the individual concerned.
6. Why and On What Basis We Process Personal Data
The precise legal basis depends on the applicable law and the circumstances of the matter.
Where the EU GDPR, UK GDPR or comparable legislation applies, processing may be based on one or more of the following:
- the legitimate interests of Grandliga, our client or another person;
- compliance with a legal obligation;
- performance of a contract where applicable;
- the establishment, exercise or defence of legal claims;
- another basis permitted by applicable law;
- consent, where consent is an appropriate and legally required basis.
Relevant legitimate interests may include:
- recovery of lawful debts and claims;
- protection of a client’s legal rights;
- resolution of disputes;
- verification of claims and relevant facts;
- locating counterparties or assets;
- conducting litigation, arbitration or enforcement;
- preventing fraud or abuse;
- maintaining appropriate professional records;
- establishing, exercising or defending legal rights.
Where specially protected data is involved, Grandliga processes such data only where an additional condition required by applicable law is satisfied.
7. Who We May Share Personal Data With
Where reasonably necessary and lawful, personal data may be disclosed to categories of recipients including:
- lawyers and law firms;
- local professional representatives;
- debt recovery professionals;
- enforcement professionals and court officers;
- insolvency professionals;
- investigators and asset tracing specialists acting lawfully;
- experts and consultants;
- translators and interpreters;
- courts and arbitration tribunals;
- arbitration institutions;
- public authorities and regulators;
- banks and payment service providers;
- accountants, auditors and professional advisers;
- technology, cloud, email and communications service providers;
- cybersecurity and website security providers;
- other service providers reasonably necessary for the relevant matter.
Recipients may act, depending on the circumstances, as processors acting on our instructions, independent controllers, joint controllers, or professional recipients subject to their own legal and confidentiality obligations.
Grandliga does not publish a list of every individual professional, contractor or member of its international professional network.
8. International Processing
Grandliga operates internationally.
Personal data may therefore be processed in the United States, the European Union, the United Kingdom and other jurisdictions relevant to the client, debtor, counterparty, proceedings, enforcement activity or professional service concerned.
Where applicable law restricts international transfers of personal data, Grandliga uses an appropriate lawful transfer mechanism where required.
More information about international processing and transfer safeguards is available in our Privacy & Data Protection Notice.
9. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the relevant professional purpose, taking into account legal, professional, evidential, accounting and regulatory requirements, limitation periods and the need to establish, exercise or defend legal rights.
Information may be retained while a matter remains active.
After a matter is closed, working materials that are no longer required may be deleted or securely destroyed, subject to applicable legal, professional, evidential, accounting and claims-related requirements.
Grandliga may retain a limited archival record of a completed matter for a longer period, subject to periodic review. This may include information such as:
- identity of the client;
- identity of the debtor or counterparty;
- general nature of the matter;
- amount or value involved;
- status or outcome;
- relevant dates;
- responsible or referring professional.
Such limited records may be retained for conflict checks, professional history, relationship management, identification of prior dealings and protection of legal rights.
Certain supporting documents or evidence may also be retained where reasonably necessary for enforcement, legal claims, professional obligations or another lawful purpose.
More detailed information about retention is available in our Privacy & Data Protection Notice.
10. Your Rights
Depending on your location and applicable law, you may have rights including the right to:
- request confirmation as to whether we process your personal data;
- request access to personal data;
- request correction of inaccurate data;
- request deletion in applicable circumstances;
- request restriction of processing;
- object to certain processing;
- request portability of certain data;
- withdraw consent where processing is based on consent;
- exercise other rights provided by applicable privacy law;
- lodge a complaint with a competent data protection or privacy authority.
These rights are not absolute.
In particular, applicable law may restrict or exclude certain rights where information is subject to:
- legal professional privilege;
- professional secrecy or confidentiality;
- litigation or legal claims;
- rights and freedoms of other persons;
- mandatory retention requirements;
- applicable statutory exemptions.
We may take reasonable steps to verify identity and authority before responding to a request.
Privacy requests may be sent to:
11. Confidentiality, Privilege and Legal Claims
Information processed in connection with legal, debt recovery, litigation, arbitration or enforcement matters may be subject to professional confidentiality, legal professional privilege, litigation privilege, contractual confidentiality or other legal protections.
Nothing in this notice is intended to waive any privilege, professional secrecy or confidentiality protection available to Grandliga, its clients or professionals involved in a matter.
Where permitted by law, Grandliga may restrict disclosure of information if disclosure could:
- prejudice legal proceedings;
- reveal privileged or confidential information;
- adversely affect the rights of another person;
- interfere with the establishment, exercise or defence of legal claims;
- conflict with a legal or professional obligation.
12. When We Provide Privacy Information
Where applicable law requires privacy information to be provided to a person whose data was obtained indirectly, Grandliga provides such information within the period and in the manner required by applicable law.
However, applicable laws may provide exceptions or limitations, including where:
- the person already has the relevant information;
- providing the information would be impossible or involve disproportionate effort in circumstances recognised by law;
- obtaining or disclosure of the information is expressly permitted or required by law;
- the information is subject to professional secrecy or another legally recognised confidentiality obligation;
- another statutory exception applies.
The timing or content of a privacy notice may also be affected by legal proceedings, professional confidentiality, privilege, enforcement considerations or the protection of legal claims.
13. Relationship With Our Main Privacy Notice
This notice is a supplementary notice intended specifically for debtors, counterparties and other relevant third parties.
It should be read together with Grandliga’s Privacy & Data Protection Notice.
The main Privacy & Data Protection Notice contains further information about:
- Grandliga and its international operations;
- categories of personal data;
- purposes and legal bases;
- international transfers;
- data security;
- website and technical processing;
- retention;
- privacy rights;
- jurisdiction-specific information;
- complaints and contact details.
Where this supplementary notice provides more specific information about the processing of data relating to debtors, counterparties or other third parties, this supplementary notice applies to that processing together with the main Privacy & Data Protection Notice.
14. Contact
For questions, privacy requests or concerns regarding the processing of personal data:
GRANDLIGA INTERNATIONAL LAW FIRM LLC
8 The Green, Ste A
Dover, Delaware 19901
United States of America
Email: [email protected]
European Union Office
GRANDLIGA INTERNATIONAL LAW FIRM LLC
Via Umbria 8A
51016 Montecatini Terme (PT)
Italy
United Kingdom Office
GRANDLIGA INTERNATIONAL LAW FIRM LLC
132 Lewisham High Street, 1st Floor
London SE13 6EE
United Kingdom
15. Changes to This Notice
We may update this notice where our processing activities, services, legal requirements or professional operations change.
The latest version will be published on our website with the date of the most recent update.
Where applicable law requires specific notification of a material change, Grandliga will provide such notification as required.

