Who we are & how to contact us

Controller: AHJ Immigration (“we”, “us”, “our”), a UK-based immigration consultancy authorised and regulated by the Immigration Advice and Assistance Service (IAA), formerly the OISC.

Contact: info@ahjimmigration.co.uk · 0121 828 2224 · {Birmingham, United Kingdom}.

What data we collect

We collect and process the following categories, depending on how you interact with us:

Website visitors

• Device and usage data (IP address, browser type, pages visited, approximate location).
• Cookie preferences and security signals (e.g., spam prevention).

Enquiries & consultations

• Identity & contact details (name, email, phone) and enquiry content.
• Appointment information (date/time, medium, time zone).

Clients (when you engage us)

• Identification & contact details; case details necessary to provide immigration services.
• Document data provided by you (e.g., passports, certificates) where required for your matter.
• Billing details and transaction records.

How we use your data (purposes & lawful bases)

• To respond to enquiries and provide initial guidance (Legitimate interests; steps prior to a contract at your request).
• To provide regulated immigration services, including scheduling, document handling, submissions and case management (Contract; Legal obligation).
• To secure our website and forms and prevent spam/abuse (Legitimate interests).
• To manage billing and accounting (Contract; Legal obligation).
• To improve our site (Legitimate interests; analytics configured to respect privacy).
• Marketing (only with your clear consent, which you can withdraw at any time).

Where we rely on consent, you can withdraw it at any time by contacting us.

Who we share data with (processors)

We use trusted service providers (“processors”) to operate our website and deliver services. They only process data under our instructions and with appropriate safeguards.

• Website & hosting/CMS – to host our site and store enquiries submitted via forms.
• Form & scheduling tools (e.g., WPForms, online booking calendar) – to capture enquiries and manage appointments.
• Spam prevention & security (e.g., Cloudflare Turnstile) – to block bots and fraudulent submissions.
• Communications (email/telephony/meeting tools) – to contact you and hold consultations (e.g., phone or online meetings).
• Payments (if used) – to process lawful payments for services.
• Professional partners (where necessary and lawful) – such as counsel or experts with your knowledge, and only where relevant to your matter.

We do not sell your personal data.

International data transfers

Where a provider or recipient is located outside the UK, we use appropriate safeguards (such as UK International Data Transfer Agreements/clauses or an adequacy decision) to protect your data.

How long we keep data

We keep personal data only as long as necessary for the purposes described above and to meet regulatory/legal requirements. Typical retention periods are:

• Enquiry records: up to 12 months.
• Client files: generally 6 years after matter closure (or longer if required by law/regulator).
• Financial records: 6 years (statutory requirement).

We securely delete or anonymise data when retention periods end.

Your UK GDPR rights

You have the right to:

• Access your personal data and get a copy.
• Correct inaccurate or incomplete data.
• Request deletion in certain circumstances.
• Restrict or object to processing in certain circumstances.
• Data portability (receive your data in a structured, commonly-used format).
• Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, contact us using the details below. We may need to verify your identity before responding.

Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls, least-privilege principles, and staff confidentiality obligations. While no method is 100% secure, we work to protect your information from unauthorised access, alteration or loss.

Cookies & tracking

We use essential cookies to operate the site and security tools (e.g., spam prevention). We may use limited analytics configured to respect privacy (e.g., IP truncation). You can manage non-essential cookies via our cookie banner/settings if present, or through your browser.

Children

Our services are intended for adults. If you believe a child has provided us with personal data without appropriate consent, please contact us so we can take appropriate steps.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will show the most recent version. Significant changes will be highlighted on this page.

Contact & complaints

Data protection contact: AHJ Immigration · info@ahjimmigration.co.uk · 0121 828 2224.

If you have concerns about how we handle your data, please contact us first so we can help. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).