Security
What we do with what you tell us.
This site collects the answers you give in the Get started and broker forms and nothing else. Here is how that information is protected, how long it is kept and how to tell us if you find a weakness.
Last updated 11-Nov-2026.
Encryption in transit
Every connection to this site is encrypted using current transport-layer security. Connections from the site to the systems that store and send your information (the database, the email service and the analytics service) are encrypted in the same way.
Access control
Administrative access to the systems behind this site is protected by multi-factor authentication and limited to the people who need it to respond to you. Access is reviewed and withdrawn when a person no longer needs it. Passwords and keys are kept in a secrets vault, not in the code.
No document uploads
This site does not accept uploaded files. If you reach the stage of sending us accounts, customer lists or sample invoices, we ask for them by email after a first call and they are handled under the group's client-file procedures, not through this site. Anyone asking you to upload documents to a Convertibill web page is not us.
What is stored, and for how long
The forms store your answers as you give them, the page you arrived from and any campaign tags on the link you followed. Enquiry data is kept for 24 months from your last contact with us and then deleted, unless the enquiry becomes a client file. Client files are kept for 10 years after the relationship ends, as our record-keeping obligations require. You can ask us to delete enquiry data sooner at any time; the privacy policy explains how.
Analytics
We use product analytics and a Google Ads tag that records which adverts lead to an enquiry. In the United States these are on unless you switch them off under Your privacy choices; everywhere else they load only if you accept. We do not record or replay visits. Opting out or declining stops all of it.
Responsible disclosure
If you find a security weakness in this site or in anything connected to it, please tell us at homer.reynolds@credebt.com before telling anyone else. Describe what you found and how to reproduce it. We will acknowledge your report promptly, keep you informed as we fix it, and we will not take action against anyone who reports in good faith, does not access or alter other people's data and gives us reasonable time to respond.