Privacy Policy

Introduction

We are committed to protecting your privacy and processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and legal-sector good practice. We aim to ensure that all personal information is handled lawfully, fairly, securely and transparently.

1. Who We Are

MAH Law Chambers is the data controller for the personal data we collect and process in connection with our services and website.

• MAH Law Chambers
• Unit 104 1st Floor, 119 New Road, London, E1 1HJ
• Phone: 020 8058 2009
• Mobile: 07958 486881
• Email: admin@mahlawchambers.com
• Website: mahlawchambers.com
• IAA Authorisation number: F202537021
• Company registration number: 16404635

For the purposes of data protection law, we decide how and why your personal data is processed.

2. The Personal Data We Collect

Depending on the nature of your enquiry or matter, we may collect and process the following categories of personal data:

Identity and contact details

• Name, title, address, email address, phone number, date of birth, nationality and other contact information.

Case and immigration-related data

• Passport and travel document details, immigration history, visa details, Home Office correspondence, travel records, family information, employment details, educational records and supporting evidence relevant to your matter.

Financial and billing data

• Payment records, billing address, transaction information and other account-related details.

Communication records

• Emails, call notes, consultation notes, enquiry forms, appointment records and correspondence.

Technical and website usage data

• IP address, browser type, device information, website interactions, cookies and similar technical data where used.

Special category data

• Where necessary for immigration advice or representation, we may process more sensitive data such as health information, religion, racial or ethnic origin or other special category data relevant to your matter.

Children’s data

• Where your matter involves a child, we may process personal data relating to that child as required for legal services or immigration representation.

3. How We Collect Personal Data

We may collect personal data in the following ways:

• Directly from you when you contact us, complete a form, book a consultation or instruct us.
• From documents, evidence and information you provide to us.
• From family members, sponsors, referees, employers, representatives or other relevant persons where appropriate.
• From the Home Office, tribunals, courts, educational institutions, employers or other third parties involved in your matter.
• Automatically through our website or digital systems, including where cookies or analytics tools are used.

4. How We Use Personal Data

We may use your personal data for the following purposes:

• To respond to your enquiry and arrange appointments or consultations.
• To assess whether we can act for you and whether your matter falls within our services.
• To provide immigration advice, representation and case management.
• To prepare, review, submit and monitor applications, appeals, representations and supporting documents.
• To communicate with you regarding your case, billing or appointments.
• To verify identity and carry out compliance or due diligence checks.
• To process invoices, payments and financial records.
• To maintain internal records and improve our services.
• To comply with regulatory, professional and legal obligations.
• To establish, exercise or defend legal claims.

5. Our Lawful Bases for Processing

Under UK GDPR, we must have a lawful basis for processing personal data. Depending on the circumstances, we may rely on one or more of the following:

Contract

Where processing is necessary to take steps at your request before entering into a contract, or to perform our contract with you for legal and immigration services.

Legal obligation

Where processing is necessary to comply with a legal, regulatory or professional obligation.

Legitimate interests

Where processing is necessary for our legitimate interests, such as running our practice, keeping records, improving service delivery, managing risk and protecting our legal position, provided those interests do not override your rights.

Consent

In limited circumstances, we may rely on consent. Where we do so, you may withdraw consent at any time, although this will not affect processing already carried out lawfully before withdrawal.

6. Special Category Data

Some immigration matters require us to process special category data. Where this happens, we will only do so where an appropriate lawful basis and an additional condition under applicable data protection law applies.

• We will only request special category data where it is relevant and necessary.
• We aim to keep such data secure and restrict access appropriately.
• We may process special category data where necessary for legal claims, substantial public interest grounds, or with explicit consent where appropriate.

7. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, including for legal, regulatory, professional, accounting and record-keeping requirements.

• Enquiry data may be retained for a limited period where no formal instruction follows.
• Client and case files may be retained for a reasonable period after the matter concludes.
• Financial and accounting records may be retained for the periods required by tax and accounting obligations.
• Technical and website-related information may be retained for security, maintenance and performance purposes.

Retention periods may vary depending on the type of matter, legal obligations and potential complaint or claim periods.

8. Who We May Share Personal Data With

Where necessary and appropriate, we may share personal data with:

• The Home Office, UK Visas and Immigration, tribunals, courts and other public authorities.
• Barristers, interpreters, translators, experts and consultants engaged in connection with your matter.
• IT, hosting, cloud storage, email, software and website service providers.
• Payment providers, accountants, auditors and insurers.
• Regulators, law enforcement or other authorities where disclosure is required by law.
• Third parties where you have instructed us to do so or where it is necessary to progress your matter.

Where service providers process data on our behalf, we expect them to do so lawfully, securely and only for authorised purposes.

9. International Transfers

Some of our technology or service providers may store or process personal data outside the UK. Where personal data is transferred internationally, we will take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable data protection law.

10. Data Security and Confidentiality

We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.

• Access controls and restricted file access.
• Secure systems, password protection and device safeguards.
• Confidential handling of legal and immigration documents.
• Reasonable steps to protect communications and client information.

While we take data security seriously, no transmission method or storage system can be guaranteed to be completely secure.

11. Your Rights

Subject to legal and regulatory limitations, you may have rights under UK data protection law, including:

• The right to be informed.
• The right of access to your personal data.
• The right to request correction of inaccurate data.
• The right to request erasure in certain circumstances.
• The right to restrict processing in certain circumstances.
• The right to object to certain types of processing.
• The right to data portability where applicable.
• Rights relating to automated decision-making where relevant.

Some rights may be limited where legal professional duties, confidentiality obligations, legal privilege or applicable exemptions apply.

12. Cookies and Website Data

Our website may use cookies or similar technologies for core functionality, security, analytics and performance. Where non-essential cookies are used, an appropriate cookie notice or consent mechanism should be applied.

Third-party links

Our website may contain links to other websites. If you follow a link to another site, that site will have its own privacy practices and policies. We are not responsible for third-party websites.

Changes to this policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, operational or website changes. The latest version will always be published on our website.