Privacy Policy

Last Updated: 2 January 2026

1. Introduction

LawAble ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our immigration law services.

As an IAA-licensed immigration law firm, we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

We are the data controller responsible for your personal data. Our contact details are provided in Section 12 of this policy.

2. Information We Collect

We collect and process various types of personal information necessary to provide our immigration law services:

2.1 Personal Identification Information

  • Full name, date of birth, and nationality
  • Passport and national identity document details
  • Photographs and biometric information (where required)
  • Contact details (address, phone number, email)
  • National Insurance number or equivalent

2.2 Immigration and Legal Information

  • Immigration history and status
  • Visa applications and supporting documents
  • Criminal records certificates (where applicable)
  • Travel history and immigration stamps

2.3 Financial Information

  • Bank statements and financial records
  • Employment and salary information
  • Tax documents and payment records
  • Payment details for our services

2.4 Family and Relationship Information

  • Marriage certificates and divorce decrees
  • Birth certificates and family relationships
  • Information about dependants and sponsors

2.5 Special Category Data

In some cases, we may need to process special category (sensitive) personal data, including:

  • Health information (for certain visa categories)
  • Racial or ethnic origin
  • Religious beliefs (where relevant to asylum claims)
  • Criminal convictions and offences

3. How We Collect Information

We collect personal information through:

  • Direct interactions with you (consultations, emails, phone calls)
  • Documents and forms you submit to us
  • Our website contact forms and inquiry systems
  • Third parties (e.g., employers, sponsors, family members) with your consent
  • Publicly available sources (where necessary for your case)

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract Performance

Processing necessary to provide our immigration law services under our contract with you

Legal Obligation

Compliance with legal and regulatory requirements, including IAA regulations and anti-money laundering laws

Legitimate Interests

Managing our business operations, maintaining records, and pursuing legal claims where necessary

Consent

For special category data and marketing communications (where applicable), we rely on your explicit consent

5. How We Use Your Information

We use your personal data to:

  • Provide immigration law advice and representation
  • Prepare and submit visa applications and supporting documents
  • Communicate with you about your case
  • Communicate with the Home Office, UK Visas and Immigration, and other authorities
  • Maintain accurate case files and records
  • Comply with legal and regulatory obligations
  • Process payments and manage accounts
  • Improve our services and client experience
  • Respond to legal proceedings or regulatory inquiries
  • Send service updates and important notices

6. Who We Share Your Information With

We may share your personal data with:

Government Authorities

UK Home Office, UK Visas and Immigration, Border Force, and other relevant government departments

Professional Advisors

Barristers, expert witnesses, translators, and other professionals necessary for your case

Service Providers

IT service providers, document management systems, secure cloud storage, and payment processors

Regulatory Bodies

Immigration Advice Authority (IAA) and other regulatory or professional bodies

Third Parties

Employers, sponsors, educational institutions, or family members (only with your consent or where necessary)

Legal Authorities

Courts, tribunals, law enforcement, or other authorities where required by law

We ensure all third parties respect the security of your data and treat it in accordance with applicable data protection laws.

7. International Transfers

In some cases, we may need to transfer your personal data outside the UK, for example:

  • When submitting applications to overseas visa processing centers
  • When communicating with overseas sponsors or family members
  • When using cloud storage services with international servers

Where we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses, adequacy decisions, or other approved transfer mechanisms under UK data protection law.

8. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organizational measures, including:

  • Secure, encrypted storage systems for electronic files
  • Password-protected and restricted access to client data
  • Secure physical storage for paper documents
  • Regular staff training on data protection and confidentiality
  • Secure communication channels (encrypted email where appropriate)
  • Regular security audits and updates
  • Incident response procedures for data breaches

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.

Standard Retention Period

We typically retain client files for 7 years after the conclusion of your matter, in accordance with professional and regulatory requirements.

Retention periods may be longer if:

  • Required by law or regulation
  • Necessary for ongoing legal proceedings
  • You have requested we retain your information
  • Required to establish, exercise, or defend legal claims

10. Your Rights

Under UK data protection law, you have the following rights:

Right of Access

Request a copy of your personal data we hold

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure

Request deletion of your data in certain circumstances

Right to Restrict Processing

Request limitation on how we use your data

Right to Data Portability

Receive your data in a structured, commonly used format

Right to Object

Object to processing based on legitimate interests or direct marketing

Right to Withdraw Consent

Withdraw consent for processing based on consent (where applicable)

Please note: Some rights may be limited due to our legal and professional obligations. For example, we may be required to retain certain information for regulatory compliance even if you request deletion.

To exercise any of these rights, please contact us using the details in Section 12.

11. Cookies and Website Technology

Our website uses cookies and similar technologies to improve user experience and analyze website traffic. Cookies are small text files stored on your device.

Types of Cookies We Use:

Essential Cookies

Required for website functionality and security

Analytics Cookies

Help us understand how visitors use our website

Functional Cookies

Remember your preferences and choices

You can control cookie settings through your browser. However, disabling certain cookies may affect website functionality.

12. Contact Information

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

LawAble

Address: United Kingdom

Email: darl.wayer@lawable.uk

Phone: +447428588410

IAA Registration Number: F202537730

13. Right to Complain

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the supervisory authority:

However, we encourage you to contact us first so we can try to resolve any concerns directly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make significant changes, we will notify active clients directly via email or through our website. We encourage you to review this policy periodically.

The "Last Updated" date at the top of this policy indicates when it was last revised.

15. Children's Privacy

Our services are not directed at children under 18. However, we may process personal data of minors when they are dependants in immigration applications. In such cases, we obtain consent from parents or legal guardians and handle children's data with extra care and in accordance with applicable laws protecting children's privacy.