Skip to main content
Stonebridge Legal Solutions

Privacy Policy

How we collect, use and protect your personal information, and the rights you have over it.

Privacy Policy

Last updated: 27 September 2026

PRIVACY POLICY

Stonebridge Legal Solutions Limited

Last Updated: 27 September 2026

1. Introduction

Stonebridge Legal Solutions Limited ("we", "our", "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are an immigration advice organisation authorised and regulated by the Immigration Advice Authority (IAA), Registration No: F202208988, to provide immigration advice and services at Level 3 (Immigration, Asylum and Protection).

2. Who We Are

Data Controller: Stonebridge Legal Solutions Limited

Registered Office: Office 12, Boardman House, 64 Broadway, Stratford, London, E15 1NT

Additional Office: Sylhet Business Center, 537a Coventry Road, Birmingham, B10 0LL

Email: info@stonebridgelegal.co.uk

Phone: +44 7988 138221

Website: www.stonebridgelegal.co.uk

3. Information We Collect

We may collect the following types of personal data from you:

a) Information You Provide Directly:

  • Full name
  • Email address
  • Telephone number
  • Postal address
  • Immigration history and status
  • Case details and supporting documents
  • Passport and identity document information (where relevant to immigration services)
  • Employment information
  • Payment information (processed securely via third-party payment providers — we do not store full credit card details)
  • Feedback, testimonials, or complaints
  • Details you give when you book a consultation online (name, email, phone number, the service you need, your chosen date and time, a short description of your matter and your payment receipt)
  • Messages you send through our website contact form or chat assistant

b) Information We Collect Automatically:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited on our website
  • Date and time of visits
  • Referral source
  • Device information

c) Information from Third Parties:

  • Information from the Home Office or UK Visas and Immigration (UKVI)
  • Information from employers, sponsors, or educational institutions (with your consent)
  • Information from government databases where lawfully permitted
  • Credit reference and anti-fraud checks (where applicable)

4. How We Use Your Information

We process your personal data for the following purposes:

  • Providing immigration advice and legal services in accordance with your instructions
  • Assessing your immigration case and preparing applications, appeals, or representations
  • Communicating with you about your case, including updates, requests for information, and decisions
  • Complying with our regulatory obligations under the IAA Code of Standards
  • Processing payments for our services
  • Sending appointment reminders and administrative communications
  • Responding to your enquiries submitted via our website contact form
  • Maintaining records as required by law and professional bodies
  • Keeping our website secure and working properly, including preventing misuse of our forms (we do not use analytics or advertising cookies)
  • Preventing fraud, money laundering, and financial crime
  • Insurance and risk management purposes

5. Legal Basis for Processing

We process your personal data under the following legal bases under the UK GDPR:

  • Contract: Processing is necessary to perform a contract with you (e.g., providing agreed immigration services)
  • Legal Obligation: Processing is required to comply with legal and regulatory obligations (e.g., IAA, Home Office, anti-money laundering requirements)
  • Legitimate Interests: Processing is necessary for our legitimate interests in operating and improving our business, provided these do not override your rights
  • Consent: Where you have given explicit consent for specific processing (e.g., testimonials, marketing communications)

6. How We Share Your Data

We may share your personal data with:

  • UK Visas and Immigration (UKVI) / Home Office — as part of your immigration applications
  • IAA (Immigration Advice Authority) — for regulatory and audit purposes
  • Third-party service providers — such as payment processors, IT hosting providers, and email services
  • Google (Gemini AI) — if you use the chat assistant on our website, your messages are sent to Google to generate replies. Please do not share case documents or sensitive details in the chat
  • Google (Maps and YouTube) — only if you choose to load a map or video on our website; see our Cookie Policy
  • Professional advisors — such as barristers, accountants, or interpreters (with your consent)
  • Employers or sponsors — where relevant to your case (with your consent)
  • Law enforcement or government authorities — where required by law
  • Insurance providers — for professional indemnity purposes

We will never sell your personal data to third parties for marketing purposes.

7. International Data Transfers

As part of providing immigration services, it may be necessary to transfer your data to countries outside the UK, particularly where your case involves applications to return to or visit another country. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

8. Data Retention

We retain your personal data for as long as is necessary for the purposes outlined in this policy. Specifically:

  • Client files are retained for a minimum of 6 years from the conclusion of your matter, in line with professional indemnity insurance and regulatory requirements
  • Website enquiry data is retained for up to 2 years unless you become a client
  • Marketing data is retained until you unsubscribe or request deletion
  • Financial records are retained for 6 years as required by HMRC

After the retention period expires, your data will be securely deleted or anonymised, unless we are required by law to retain it for longer.

9. Your Data Protection Rights

Under the UK GDPR, you have the following rights:

  • Right of Access — You can request a copy of the personal data we hold about you
  • Right to Rectification — You can request correction of inaccurate or incomplete data
  • Right to Erasure — You can request deletion of your data in certain circumstances
  • Right to Restrict Processing — You can request we limit how we use your data
  • Right to Data Portability — You can request your data in a structured, machine-readable format
  • Right to Object — You can object to certain types of processing
  • Right to Withdraw Consent — Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at info@stonebridgelegal.co.uk. We will respond within 30 days of receiving your request.

10. Your Right to Complain

If you are not satisfied with how we handle your personal data, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator:

  • Website: www.ico.org.uk
  • Helpline: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We take all complaints seriously and will work to resolve them promptly.

11. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:

  • Secure servers and encrypted connections (SSL/TLS)
  • Access controls and staff training on data protection
  • Secure document management and storage systems
  • Regular security reviews and updates
  • Professional indemnity insurance covering data protection matters

While we take all reasonable steps to protect your data, no internet-based transmission is 100% secure. We cannot guarantee absolute security but will act promptly if we become aware of any data breach affecting you.

12. Cookies

We only use the cookies and browser storage our website needs to work (for example, remembering your cookie choice), and a light/dark display preference if you set one. We do not use analytics, advertising or social media tracking cookies.

Embedded Google Maps and YouTube content can set Google's own cookies, so it only loads if you accept cookies or choose to load it. You can accept, reject or change your choice at any time using “Cookie settings” at the foot of every page.

Our Cookie Policy lists each cookie, what it does and how long it lasts.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our practices, or regulatory requirements. The updated version will be posted on this page with the last updated date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

  • Email: info@stonebridgelegal.co.uk
  • Phone: +44 7988 138221
  • Post: Office 12, Boardman House, 64 Broadway, Stratford, London, E15 1NT

Stonebridge Legal Solutions Limited is authorised and regulated by the Immigration Advice Authority (IAA), Registration No: F202208988. Registered in England and Wales, Company No: 14359957.