This Privacy Policy explains how Zayn Law Ltd collects, uses, stores and shares personal information when you use our website, contact us, book an appointment, purchase an immigration service through our WooCommerce checkout, or instruct us in relation to a UK immigration matter.
We are committed to handling personal information lawfully, fairly, transparently and securely in accordance with applicable UK data protection law, including the UK GDPR, the Data Protection Act 2018 and relevant amendments introduced by the Data (Use and Access) Act 2025.
| Organisation | Zayn Law Ltd |
| Address | Unit B, 55 Mile End Road, London, England, E1 4TT |
| Telephone | 07551249569 |
| info@zaynlaw.com | |
| Alternative email | wh@zaynlaw.com |
1. Who is responsible for your information?
Zayn Law Ltd is the data controller for personal information we decide how and why to process, unless we tell you otherwise in a particular matter.
2. Personal information we may collect
Identity information, such as your name, date of birth, nationality, passport or travel-document details and immigration status.
Contact information, including postal address, email address and telephone number.
Immigration and case information, including visa history, Home Office correspondence, sponsorship information, travel history, family circumstances and supporting evidence relevant to your matter.
Employment, education, financial and business information where relevant to an immigration application or sponsorship matter.
Special category information where relevant to your instructions, which may include health information, racial or ethnic origin, religious beliefs, biometric information or other sensitive information.
Criminal offence information where it is relevant and lawful for us to process it in connection with immigration advice or an application.
Payment and transaction information relating to professional fees paid through our website. Payment-card details are normally processed by the payment provider rather than stored directly by us.
Technical and website information, such as IP address, browser type, device information, pages visited, cookies and similar technologies.
Communications, appointment details, complaints, feedback and records of correspondence with you.
3. How we collect information
Directly from you when you make an enquiry, complete a form, book an appointment, create an order, make payment or provide documents.
From an authorised representative, family member, employer, sponsor, education provider or other person involved in your matter.
From public authorities and third parties where lawful and relevant, including the Home Office, Companies House, employers, educational institutions, professional advisers and regulators.
Automatically through our website and cookie technologies.
4. Why we use your information and our lawful bases
| Purpose | Typical lawful basis |
| Responding to enquiries and arranging consultations | Legitimate interests and/or steps taken at your request before entering a contract. |
| Providing immigration advisory services and managing your matter | Performance of a contract; legal obligation; and, where relevant, substantial public interest or other lawful conditions for sensitive information. |
| Processing orders and professional-fee payments | Performance of a contract and legal obligations relating to accounting, fraud prevention and record keeping. |
| Regulatory, compliance and complaints handling | Legal obligation and legitimate interests in maintaining professional standards and responding to regulators. |
| Website security, analytics and service improvement | Legitimate interests; consent where required for non-essential cookies or similar technologies. |
| Marketing communications | Consent where required, or legitimate interests where the law permits. You may opt out at any time. |
The precise lawful basis may vary according to the nature of the information and the purpose for which it is used. We will not use personal information for an incompatible purpose without considering the applicable legal requirements.
5. Sensitive and criminal offence information
Immigration matters may require information that UK data protection law treats as particularly sensitive. We will only process such information where it is relevant, necessary and permitted by law. Access is limited to people who need the information for the relevant purpose.
6. Who we may share information with
The Home Office, UK Visas and Immigration and other public authorities where required for your matter.
The Immigration Advice Authority (IAA) or another regulator where required for regulatory, audit or complaints purposes.
Employers, sponsors, educational institutions, translators, interpreters, experts and other third parties involved in your matter where appropriate.
Professional advisers, accountants, insurers and legal or compliance advisers.
IT, hosting, email, document-management, appointment, website, WooCommerce and payment-service providers acting on our behalf or providing services to us.
Law-enforcement bodies, courts or public authorities where disclosure is required or permitted by law.
A purchaser, investor or successor organisation in connection with a genuine business reorganisation, subject to appropriate confidentiality and data protection safeguards.
We do not sell personal information to advertisers.
7. International transfers
Some service providers may process information outside the United Kingdom. Where personal information is transferred internationally, we will use an appropriate legal mechanism and safeguards required by UK data protection law, such as an adequacy regulation or approved contractual safeguards, where applicable.
8. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, regulatory, tax, accounting, insurance and professional obligations. Our usual retention approach is:
Client and matter files: normally up to 6 years after the matter is closed, unless a longer or shorter period is required for a particular reason.
Financial and transaction records: normally 6 years in line with accounting and tax requirements.
General enquiries that do not become client matters: normally up to 12 months after the last substantive contact.
Complaints and regulatory records: normally up to 6 years after closure, subject to regulatory requirements.
Website security and technical logs: retained for a proportionate period according to operational and security needs.
Marketing information: until you opt out or we determine that it is no longer appropriate to retain it.
We may retain information for longer where a legal claim, regulatory issue, safeguarding concern or other lawful reason requires this.
9. Security
We use reasonable technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure. No internet-based system can be guaranteed to be completely secure, so you should take care when sending particularly sensitive documents electronically.
10. Cookies and website technologies
Our website may use necessary cookies to operate core functions and may use optional analytics or similar technologies where permitted. Where consent is required, non-essential cookies should not be used until you have made your choice through the cookie banner or settings. You can also control cookies through your browser settings.
11. Your data protection rights
The right to be informed about how your personal information is used.
The right of access to personal information we hold about you.
The right to ask for inaccurate or incomplete information to be corrected.
The right to request erasure in circumstances where the law gives you that right.
The right to request restriction of processing in certain circumstances.
The right to object to certain processing, including direct marketing.
The right to data portability where the legal conditions are met.
Rights relating to certain solely automated decisions and profiling.
The right to withdraw consent where processing is based on consent, without affecting processing already carried out lawfully.
To exercise a right or ask a privacy question, contact us at info@zaynlaw.com. We may need to verify your identity before responding.
12. Complaints about data protection
Please contact us first if you have concerns about how we use your personal information. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113.
13. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, regulation or law. The latest version should be published on our website with the date of the most recent update.