The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation of the European Parliament, the Council of the European Union and the European Commission intended to strengthen and unify data protection for all individuals within the European Union (EU) and became law in the UK on 25th May 2018.
Under the General Data Protection Regulation (GDPR), we are required to publish information about what data we collect, why we need to store it, and your rights under the GDPR legislation.
In these matters we are subject to the rulings of the Information Commissioner’ Office (ICO), the UK’s independent authority set up to uphold information rights and data privacy for individuals.
We have always, and continue to, treat all data we receive and works submitted as strictly confidential.
Basis of and scope of data storage:
We store and process data only as agreed by the client or as required in order to perform services requested by the client. We regard all details we do store as confidential.
We do not engage in any profiling activities.
We never share data with 3rd parties (e.g. for advertising, marketing, data analysis or similar).
How we obtain data:
Data we hold will consist solely of information that you provide to us (e.g. contact details you enter on forms or correspondence), or is determined through your direct interaction with our website (e.g. your IP address), documents you provide, questionnaire you fill.
Data we hold consists of
Your name. Company name (if applicable). Postal address. Country. Email addresses (if applicable). Telephone numbers (if applicable).
This is used so that we can contact you when needed (e.g. to send invoices, certificates you have requested, communicate information affecting your account or our service to you, etc.)
Payee name. Billing contact details (if applicable). Card type (e.g. Amex, Visa) (card payments only). Last 4 digits of payment card (card payments only). Date and amount of payments.
This data is kept purely to allow cross-checking in the event of accounting imbalance, customer payment enquiries or investigation by tax authorities (i.e. mandatory accounting requirements).
Information you supply relating to works you have lodged with us (i.e. all documents related to your immigration matter that has been used as part of lodging an immigration application).
Enquiries we have received via email, web-form or post.
We may also store your IP address for security reasons and to enable us to investigate technical problems if you experience a fault whilst using our site.
We retain personal data that you supply for as long as you are a client with an active account, and for as long as we are legally required to do so (e.g. by tax and accounting regulations, ICO & OISC – 6 years for OISC)
Where data may exist on back-ups, these are regularly changed and expired files (etc.) are securely disposed of when backup media is expired or replaced.
General enquiries via web-form, email or post
These are generally kept for a number of years so that we can refer back to them if you send a follow up to our reply, after that they are deleted: At scheduled times throughout the year enquiries over the specified number of years old are removed.
The number of years will depend on the type of enquiry and how it was submitted:
Any correspondence that may potentially relate to a financial transaction, currently active registration or client account, is treated the same as as tax records (tax records are legally required to be stored for a minimum of 6 years) and deleted after 7 years.
Right of access and rectification
If you are a client and need to check any information we hold about you, or need to correct inaccurate information, please contact us.
For security reasons we will need to ensure that you are the client (and may ask you to provide proof of your identity) before we can release any information.
Right to erasure
If you decide that you no longer need our services and want the data we hold to be deleted, you may withdraw your case at any time and we will remove your data once we are legally able to do so.
If you are not a client, but have contacted us via email/letter, and want any emails, letters, or form submissions enquiries you have made erased please contact us and we will be happy to arrange that.
Please note: for security reasons you must contact us from the address you want removed and we may ask you to prove your identity (i.e. you cannot delete someone else’s data without their consent).
If you take no action, the data will be securely disposed automatically in due course as part of our routine maintenance activities.
Complaints, corrections or objections
If you have any questions or concerns about the information we hold about you, or need to correct inaccurate information, please contact us
We can be contacted as follows
Address: GSN Immigration Ltd, 79 College Road, Harrow, London, United Kingdom HA1 1BD
Telephone: +44 208 150 6709