Privacy Statement
Nejat Immigration Ltd (“we”, “us”, “our”) is fully committed to protecting the privacy, confidentiality, and security of personal data entrusted to us by our clients, partners, and website users. This Privacy Statement explains in detail how we collect, use, store, share, and protect personal data in accordance with applicable data protection laws.
Nejat Immigration Ltd is registered with the UK Information Commissioner’s Office (ICO) as a data controller and processes personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As an OISC-accredited immigration law firm, we also observe professional confidentiality obligations and regulatory requirements governing immigration law firms in the United Kingdom.
This Privacy Statement applies to all personal data processed by us, whether obtained through our website, digital communications, consultations, contracts, or third-party sources in connection with the immigration and education services we provide.
Regulated immigration law firm you can rely on.
Our accreditations reflect ongoing regulatory oversight, strict compliance requirements, and a commitment to protecting client rights and personal data.
Accreditations
Authorised UK immigration lawyer licence number F202432157.
Registered UK data controller Registration reference ZB888269.
Registered Welsh Government supplier.
1.Data Controller Information
Nejat Immigration Ltd is the data controller responsible for determining how and why your personal data is processed.
- Company Name: Nejat Immigration Ltd
- Business Location: United Kingdom
- Telephone: +44 121 339 5171
- Email: info@nejat.uk
- ICO Registration Number: ZB888269
If you have any questions about this Privacy Statement or how we handle your personal data, you may contact us using the details above.
2.Scope of This Privacy Statement
This Privacy Statement applies to:
- Clients and prospective clients seeking immigration or education-related services
- Website visitors and users of our online platforms
- Business partners, educational institutions, employers, and endorsing bodies
- Individuals whose data is provided to us in connection with an application (e.g. dependants, sponsors, referees)
It covers personal data processed both electronically and in paper-based records.
3. Personal Data We Collect
We collect and process personal data that is necessary for providing immigration advice, representation, and related professional services.
3.1 Identity and Contact Data
This may include:
- Full legal name
- Previous names or aliases
- Date and place of birth
- Gender (where required by official forms)
- Nationality and immigration status
- Passport details and national identification numbers
- Residential and correspondence addresses
- Telephone numbers and email addresses
3.2 Immigration, Legal, and Case-Related Data
Depending on the service provided, we may collect:
- Visa and immigration history
- Entry clearance and residence permit information
- Biometric information (only where processed via official UKVI systems)
- Home Office correspondence and decision letters
- Education records, qualifications, transcripts, and certificates
- Employment history, contracts, and references
- Sponsor licence details
- Endorsement and compliance documents
- Family and dependant information
3.3 Financial and Supporting Documents
For immigration applications, we may process:
- Bank statements and financial evidence
- Proof of funds and maintenance documents
- Tuition fee payment evidence
- Scholarship or sponsorship letters
- Invoices and payment records
3.4 Technical and Usage Data
When you visit our website, we may automatically collect:
- Internet Protocol (IP) address
- Browser type and version
- Device type, operating system, and platform
- Time zone settings and location data (approximate)
- Website usage data, page views, and interaction logs
4.How We Collect Personal Data
We collect personal data through various lawful and transparent means, including:
- Direct communication with you by email, telephone, WhatsApp, or messaging platforms
- Online enquiry forms and consultation booking systems
- Written documents and forms provided by you
- Virtual or in-person consultations
- Our website, cookies, and analytics tools
- Third parties such as educational institutions, employers, endorsing bodies, or legal partners, where permitted by law
- UK government authorities, including UK Visas and Immigration (UKVI), where relevant to your case
5.Lawful Bases for Processing Personal Data
Under UK GDPR, we process personal data only where a lawful basis applies. These include:
5.1 Contractual Necessity
Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract, including providing immigration advice and submitting applications.
5.2 Legal Obligation
We process personal data to comply with legal and regulatory obligations, including:
- UK immigration law requirements
- OISC regulatory obligations
- Anti-money laundering and fraud prevention laws
- Record-keeping and reporting obligations
5.3 Legitimate Interests
We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This includes:
- Business administration and case management
- Service quality improvement
- Risk management and compliance
- Preventing fraud and misuse of services
5.4 Consent
Where required, we rely on your explicit consent, for example:
- Marketing communications
- Use of non-essential cookies
You may withdraw consent at any time.
6.How We Use Your Personal Data
We use personal data for the following purposes:
- Assessing eligibility for immigration routes
- Providing tailored immigration advice
- Preparing, reviewing, and submitting visa applications
- Communicating with UKVI, the Home Office, educational institutions, employers, and endorsing bodies
- Managing client relationships and correspondence
- Verifying identity and preventing fraud
- Maintaining regulatory compliance with OISC and ICO
- Improving our website, systems, and service delivery
- Responding to enquiries and complaints
We do not sell, rent, or trade personal data to third parties for marketing purposes.
7. Data Sharing and Third Parties
We may share personal data with trusted third parties where necessary and lawful, including:
- UK Visas and Immigration (UKVI) and the Home Office
- Educational institutions and training providers
- Employers, sponsors, and endorsing bodies
- Professional advisers and legal partners
- Regulatory bodies, including OISC and ICO
- IT service providers, cloud storage providers, and case management system operators
All third parties are required to process personal data securely and only in accordance with our instructions and applicable law.
8.International Data Transfers
Some personal data may be transferred outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as:
- Transfers to countries recognised as providing adequate protection
- Use of Standard Contractual Clauses (SCCs)
- Secure encryption and restricted access controls
9. Data Retention Policy
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations.
As a general rule:
- Client files are retained for a minimum of six (6) years after case closure
- Financial and accounting records are retained in accordance with HMRC requirements
- Data may be retained longer where required by law or for the establishment, exercise, or defence of legal claims
Data that is no longer required is securely deleted or anonymised.
10. Data Security Measures
We take data security seriously and implement appropriate technical and organisational measures, including:
- Secure case management and document storage systems
- Access controls and staff confidentiality obligations
- Encrypted communications and password protection
- Regular data protection reviews and staff training
Incident response and data breach management procedures
11. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- The right to access your personal data
- The right to rectification of inaccurate or incomplete data
- The right to erasure (“right to be forgotten”)
- The right to restrict processing
- The right to object to processing
- The right to data portability
- The right to withdraw consent at any time
Requests can be made by contacting us using the details above. We may require proof of identity before responding.
12. Cookies and Website Analytics
Our website uses cookies and similar technologies to improve functionality and analyse website traffic. You may manage cookie preferences through your browser settings. Further details are available in our Cookie Policy.
13. Complaints and Regulatory Oversight
If you believe your data protection rights have been infringed, you may contact us directly so we can address your concerns promptly.
You also have the right to lodge a complaint with:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Telephone: 03031231113
14. Updates to This Privacy Statement
We may update this Privacy Statement periodically to reflect legal, regulatory, or operational changes. The most current version will always be published on our website.
Last updated: 12 April 2025
Nejat Immigration Ltd
Committed to confidentiality, transparency, and regulatory compliance.