Data protection statement

The Data Protection Act 2018 controls how your personal information is used by organisations, businesses or the government. The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR).

This statement sets out what personal information I may collect from people who contact me and to whom I provide immigration advice.

I may collect the following personal information about you:

  • Contact and identity information such as your name, date of birth, sex, gender identity, postal address, email address, telephone number, social media address, job title, employer’s details.
  • Financial information including bank details, statements, payment card details, billing address and payment information.
  • Information provided for the purposes of attending meetings with you, or information collected when you access my website.
  • Marketing and communication preferences, identification and background information collected as part of my business engagement process.
  • Personal information or any other information given by you to me or on your behalf or by third parties.
  • Information created in the course of the legal work that I do for you.

I am required to collect personal information in order to identify you before I begin to advise you. I may ask you for other information so that I can advise and represent you in your immigration matter.

I may use your personal information in the following ways:

  • Comply with my own legal & regulatory obligations
  • To perform my obligations to you under my terms of business/ contract with you.
  • In line with the following legitimate interests:
    • To communicate with you, verify your identity, source of funds and other background checks.
    • For legitimate business purposes including providing client services, exchanging information on immigration matters, litigating on your behalf, preparing documents, keeping financial records, instructing third parties on your behalf, and working on your matter.
    • To manage and respond to complaints.
    • In line with any consent about data processing that you may give me.

I do not normally copy your information to anyone outside the European Economic Area except when the particular circumstances of your matter require it.

All third parties to whom I may provide your personal information are required to maintain confidentiality in relation to your files.

Your personal information is stored in the following ways:

  • Hard-copy documents are held in a paper file during the currency of your case. Paper files are held in a locked office and important documents are kept in a locked filing cabinet.
  • Electronic copies of documents are held in cloud-based case management software known as LEAP which carries ISO27001 certification equivalent to ISO/IEC 27001:2013 and using Microsoft software which carries ISO27001 certification equivalent to ISO/IEC 27001:2013 and ISO 27018.

At the conclusion of your matter, I will return any hard-copy documents to you. It is my policy to archive my files for a period of 10 years following completion of your matter, in line with best practice for immigration files. Archived files are held electronically using cloud-based case management software. Accordingly, I may keep your personal information for up to 10 years. 

You have the following rights under the GDPR and Data Protection Act 2018:

  • The right to access your personal information by making a request to me.
  • The right to rectification of personal information that I hold about you.
  • The right to erasure of your personal information in line with the GDPR and Data Protection Act 2018.
  • The right to restrict the uses I can make of personal information I hold about you.
  • The right to move or copy your personal information to another data processor.
  • The right to object to my use of your personal information for marketing purposes. In other cases I may continue to use your personal information if there is a compelling reason for me to do so.

If you make a request to my in relation to your rights listed above I will respond to you within 1 month from the date on which I receive your request.

You have the right to complain to the Information Commissioner’s Office

My identity and contact details:

Kitty Falls, Solicitor

S3 Hamble House, Meadrow, Godalming GU7 3HJ

Tel: 07752722292