1. Home
  2. Privacy notice

UK GDPR ยท Data protection

Privacy notice

What we collect when you use this site or send an enquiry, why we collect it, and how to make us stop.

  • Last updated 22 October 2026

Who is responsible for your data

Wanderson & Barrera Solicitors, 56 Skylines Village, London E14 9TS, is the data controller. Our data protection contact is Rebecca Thorne, reachable at contact@ilrsolicitors.com or on 020 7946 0102.

What we collect

  • Enquiry data: the name, email address or phone number, route selection and optional message you submit through the consultation form.
  • Correspondence: emails, call notes and documents you send us if you become a client.
  • Technical data: standard server logs from our hosting provider, including IP address and requested page, retained for security and fraud prevention.

We do not use advertising cookies, tracking pixels or third-party analytics on this site. No data is sold or shared for marketing.

Why we use it, and our lawful basis

Processing purposes
PurposeLawful basis
Responding to your enquiry and assessing eligibilityLegitimate interests, and steps prior to entering a contract
Providing legal services if you instruct usPerformance of a contract
Identity, conflict and anti-money-laundering checksLegal obligation
Keeping files and accounting recordsLegal obligation and legitimate interests
Website security and fraud preventionLegitimate interests

Special category data

Immigration enquiries can involve nationality, health, family circumstances or domestic abuse. We only ask for what the route requires, and we process that information to provide legal advice or because it is necessary for the establishment or defence of legal claims.

Who we share it with

  • Our email and file storage providers, acting as processors under written terms.
  • The Home Office, UKVCAS and test providers, where you instruct us to submit an application.
  • Barristers, translators or experts, only where your matter requires them and you have been told.
  • Our insurers and regulators, where required by law or to handle a complaint.

We do not transfer personal data outside the UK except where a processor's infrastructure requires it under an adequacy decision or the UK International Data Transfer Agreement.

How long we keep it

  • Enquiries that do not become instructions: 12 months, then deleted.
  • Client files: 7 years after the matter closes, in line with Limitation Act and regulatory expectations, then securely destroyed.
  • Accounting and anti-money-laundering records: 5 years after the end of the relationship.

Your rights

You can ask for access to your data, correction of errors, erasure, restriction of processing, portability, or object to processing based on legitimate interests. Email contact@ilrsolicitors.com; we respond within one month.

If you are unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather hear from you first.

Cookies

This site sets no cookies. If we add analytics in future, this notice and a consent banner will be updated before it goes live.

Security

Data is transmitted over HTTPS and stored in access-controlled systems. No system is completely secure; if a breach affects your rights, we will notify you and the ICO where the law requires it.

Back to contact