Scroll Top

Privacy Policy

Privacy and Data Protection Policy

1. Preliminary Notice and Statutory Framework

DocuConsult Ltd, a company registered in England with company number 16357140 at registered address, SE1, London. DocuConsult Ltd. reaffirms its unreserved commitment to upholding the highest standards of confidentiality, transparency, and accountability in the processing and protection of personal data. This commitment is enshrined in the implementation of data governance protocols that reflect the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability—as codified in the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all personal data, whether collected online via www.docuconsulting.co.uk (“the Website”) or offline during the course of service provision, and whether the data relates to clients, partners, suppliers, or any other data subjects whose information is processed by the Company.

For the avoidance of doubt, “personal data” shall be defined in accordance with Article 4(1) of the UK GDPR as any information relating to an identified or identifiable natural person (“data subject”). The Company also recognises and complies with additional domestic and international statutory instruments that supplement or supersede the aforementioned legislation, including any successor frameworks adopted post-Brexit or by the Information Commissioner’s Office (ICO).

As a data processor or, in limited instances, a joint controller, DocuConsult Ltd ensures that all processing activities are predicated upon a valid legal basis as articulated under Article 6(1) of the UK GDPR. Where consent forms the basis for processing, such consent shall be specific, informed, unambiguous, and freely given, and capable of being withdrawn without prejudice at any time.

Data subjects are hereby notified that the Company has adopted a proactive approach to compliance, which includes the conduct of Data Protection Impact Assessments (DPIAs), the maintenance of processing records as per Article 30 obligations, and the designation of internal data protection coordinators to oversee the lawful processing of personal data. The Company has also adopted privacy-by-design and privacy-by-default principles in the development and operation of its digital and organisational infrastructure.

DocuConsult Ltd acknowledges the evolving nature of data protection law and affirms that this policy shall be subject to continuous review to ensure compliance with current best practices and regulatory expectations. Any substantive changes to this policy will be promulgated through formal updates on the Website and, where feasible, through direct notification to affected parties.

2. Categories of Data Processed

2.1 Voluntary Disclosures Data subjects may, at their discretion, disclose personal information to the Company via website forms, email communications, telephone interactions, or physical correspondence. Such information may include, without limitation: full name, email address, residential and/or mailing address, telephone number, nationality, date of birth, language preference, and additional details germane to the facilitation of specific administrative or consultancy services.

The Company strictly adheres to the principle of data minimisation, and shall only collect such data as is reasonably necessary to carry out its obligations under a contract or to take steps at the request of the data subject prior to entering into a contract. We do not request, nor do we retain, sensitive personal data (as defined under Article 9 of the UK GDPR), unless processing is required and justifiable by law, or has been consented to explicitly and in writing.

Under no circumstances will personal data be collected for speculative profiling, marketing, or advertising purposes. The Company expressly prohibits the unauthorised secondary use or sale of personal data to any external party.

2.2 Technical and Device Information Through the deployment of automated tracking tools, including but not limited to cookies, pixels, and server log files, the Company may gather and process technical metadata about users accessing the Website. This information may include:

  • IP (Internet Protocol) addresses;
  • Browser type and version;
  • Operating system and platform;
  • Time zone setting and location data;
  • Session durations, page response times, and clickstream behaviour;
  • Device make, model, and unique identifiers (e.g., MAC address, IMEI);
  • Language preferences and referring URLs.

This data is captured solely for legitimate purposes which include but are not limited to: improving user experience, performing statistical and system performance analyses, detecting and preventing security breaches, ensuring compatibility with different devices, and complying with applicable regulatory reporting requirements.

The use of such technologies shall be governed by the Company’s Cookie Policy, which specifies the lawful basis for data collection and offers data subjects the ability to exercise control over non-essential tracking. The Company shall not use automated decision-making or profiling, as defined under Articles 22(1) and 22(4) of the UK GDPR, without first obtaining explicit consent and providing meaningful information about the logic involved and the significance of such processing.

3. Purpose and Lawfulness of Processing

DocuConsult Ltd affirms that, in accordance with the principle of storage limitation under Article 5(1)(e) of the UK GDPR, personal data provided by clients shall not be retained by the Company beyond the duration necessary for fulfilling the specific purpose for which it was collected. Upon completion of the relevant administrative assistance or upon the expiration of a lawful retention period as may be defined under applicable regulation, such data shall be subject to secure deletion.

All personal data is automatically and irretrievably purged from internal systems, electronic repositories, and localised devices upon fulfilment of contractual or statutory obligations. This includes but is not limited to the deletion of email records, digital forms, scanned documents, and any temporary files stored on Company-controlled hardware.

DocuConsult Ltd maintains industry-standard safeguards, including automated file expiry rules and encrypted deletion protocols, to ensure the secure and irreversible destruction of personal data. The Company disclaims any obligation to archive or retain such data unless expressly mandated by law or explicitly agreed upon with the data subject under written contract. Once deleted, no backup or retrievable copy of the data is held by the Company, thereby safeguarding against unauthorised reprocessing, disclosure, or misuse.

Specifically, personal data may be processed for the following lawful and clearly defined purposes:

  • Identity Verification and Client Authentication: To confirm the identity of individuals requesting services and to prevent unauthorised access to client-specific support, particularly where the subject matter concerns confidential documentation or correspondence.
  • Assistance with Administrative Document Completion: To assist clients in the accurate and lawful preparation of statutory and non-statutory forms, including but not limited to support for Universal Credit, visa documentation, and consular applications. For the avoidance of doubt, this support does not include the submission or representation of such documentation on behalf of the client.
  • Translation and Procedural Guidance: To provide clients with non-legal explanatory guidance, including translation or interpretation of document content, thereby facilitating client understanding and enabling lawful self-administration of personal affairs.
  • Technical Operations and Platform Improvement: To analyse site performance, user engagement, system diagnostics, and device compatibility to improve the digital service environment and rectify or enhance Website functionalities.
  • Legal Compliance and Rights Protection: To monitor for, and respond to, breaches of the Company’s Terms and Conditions, enforce rights arising from contracts entered into with users, and safeguard the Company’s intellectual property, systems, and other lawful interests.
  • Regulatory and Statutory Disclosures: To comply with lawful requests, orders, or obligations imposed by competent courts, government authorities, or law enforcement agencies, including but not limited to disclosures required under anti-fraud, anti-money laundering, and immigration laws.

In each instance, DocuConsult Ltd shall identify the applicable lawful basis for processing under Article 6(1) of the UK GDPR, and where appropriate, rely upon the basis of contractual necessity, legal obligation, legitimate interest, or, where none of these apply, informed and explicit consent.

4. Clarification of Liability and Role in Application Processes

Ltd explicitly disclaims any legal, procedural, or representational responsibility for the submission, delivery, verification, approval, or final outcome of any documents, applications, or forms prepared with or through its administrative assistance. The Company’s role is strictly confined to facilitating the drafting, translation, or explanatory clarification of documentation as instructed by the client, and does not extend to any form of advocacy, representation, or official transmission to third parties.

All documents, information, and content received from the client are processed and returned in good faith and on an “as received” basis. The Company makes no warranties, express or implied, as to the completeness, accuracy, legal validity, or adequacy of the materials submitted by the client. The client bears full and exclusive responsibility for verifying the appropriateness and legal sufficiency of any information or documentation submitted to external authorities.

At no point shall DocuConsult Ltd be construed to act as a legal representative, agent, or authorised delegate of the client before any governmental department, tribunal, public institution, or other competent authority. The Company is not a legal entity licensed or regulated to conduct reserved legal activities under the Legal Services Act 2007 and shall not be deemed to engage in such conduct under any circumstance.

Furthermore, the client remains the sole data controller for any application or submission that contains their personal data, and DocuConsult Ltd acts only in the limited and subordinate capacity of a data processor—where applicable—based on explicit instructions. The client is solely responsible for ensuring that the data shared with third parties complies with all relevant statutory and regulatory requirements.

Clients are strongly encouraged to seek independent legal advice before proceeding with any formal applications, submissions, or declarations based on documentation reviewed or prepared with administrative support from the Company.

5. Disclosure of Data to Third Parties

DocuConsult Ltd affirms its strict adherence to the principle of data confidentiality and will not transfer, disseminate, disclose, or otherwise make available personal data to third parties, except in exceptional and narrowly defined circumstances where such disclosure is legally justified and adequately safeguarded in accordance with the UK GDPR and the Data Protection Act 2018.

Disclosure of personal data may occur only in the following legally permissible situations:

  • With the Data Subject’s Explicit Consent: Where the data subject has provided prior, informed, specific, and unambiguous consent, freely given without duress, to the disclosure of their personal data to a named third party for a clearly identified purpose. Such consent shall be recorded and retained as proof of lawful basis under Article 6(1)(a) of the UK GDPR.
  • Pursuant to Legal or Regulatory Obligation: Where disclosure is required by operation of law, regulatory enactment, judicial decree, administrative order, or legally binding warrant or subpoena. The Company will only comply with such demands where satisfied that the request is valid, proportionate, and issued by a competent authority within lawful jurisdiction.
  • In Defence of the Company’s Legitimate Interests: Where disclosure is strictly necessary to establish, exercise, or defend legal claims, or to protect the rights, property, or personal safety of the Company, its staff, clients, or the public, and only insofar as such interests are not overridden by the fundamental rights and freedoms of the data subject. This is pursuant to Article 6(1)(f) of the UK GDPR.
  • With Contracted Service Providers and Professional Advisers: To third-party vendors, consultants, insurers, legal advisers, IT support technicians, and subcontractors who require access to such data in order to perform services on behalf of the Company. These parties shall operate strictly under binding legal instruments, including data processing agreements compliant with Article 28 of the UK GDPR, which impose enforceable contractual obligations concerning confidentiality, data security, and lawful use.

In all cases of permitted disclosure, the Company shall:

  • Ensure the data is strictly limited to what is necessary, relevant, and proportionate for the intended lawful purpose;
  • Conduct appropriate due diligence on all third-party recipients to verify their legal compliance and technical safeguards;
  • Prohibit any secondary processing, onward transfer, or reuse of the data without the data subject’s additional consent or lawful exemption.

Under no circumstances shall DocuConsult Ltd sell, lease, or otherwise profit from the unauthorised commercial distribution of personal data. The Company further confirms that it does not engage in data brokerage activities or profiling for advertising or marketing purposes.

Where disclosure involves international data transfers, the Company shall ensure such transfers are compliant with Chapter V of the UK GDPR, including reliance on adequacy regulations or appropriate safeguards such as standard contractual clauses (SCCs) approved by the Information Commissioner’s Office.

DocuConsult Ltd remains fully accountable for the safeguarding of all personal data it lawfully processes or discloses and will ensure that all transfers comply with the principle of integrity and confidentiality as required by Article 5(1)(f) of the UK GDPR.

6. Data Integrity, Retention, and Security

All personal data is retained only for as long as is strictly necessary for the fulfilment of the purpose for which it was obtained or as required under applicable retention schedules. The Company undertakes to implement appropriate technical and organisational measures, including physical, procedural, and electronic safeguards, to ensure the confidentiality, integrity, and availability of data processed under its control.

Access to such data is limited to personnel who, by virtue of their role and authority, have a legitimate and justifiable requirement to access the same. Although the Company applies industry-standard security protocols, it disclaims absolute liability for security breaches arising from circumstances beyond its reasonable control.

7. Cookies and Analytical Technologies

DocuConsult Ltd uses cookies and similar tracking technologies on its website in compliance with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (as amended), the UK General Data Protection Regulation (UK GDPR), and the Data Protection Act 2018.

Cookies are small data files stored on your device that help us operate our website effectively, improve functionality, and understand user behaviour. These technologies allow us to optimise user experience, maintain system integrity, and compile anonymised statistical data that informs service improvement.

The types of cookies deployed by the Website may include:

  • Strictly Necessary Cookies – Essential for core website operations, including page navigation and access to secure areas. The website cannot function properly without these cookies.
  • Analytical/Performance Cookies – Used to collect information about how users interact with the website, such as which pages are visited most often. These insights help us to improve the way our website functions.
  • Functionality Cookies – Enable the website to remember choices you make (such as language preference) and provide enhanced features.
  • Targeting or Advertising Cookies – DocuConsult Ltd does not use any cookies for marketing or targeted advertising purposes. We do not profile users or share cookie data with advertisers.

Users are notified of the use of cookies upon their first visit to the Website. Where cookies are not strictly necessary, users will be asked to provide clear, affirmative consent via a cookie banner or similar consent mechanism. Users may withdraw their consent at any time by adjusting their browser settings or selecting the relevant option in our cookie preferences tool.

All cookies, once placed, are subject to periodic expiry and secure removal in accordance with regulatory and operational requirements. We do not use cookies to collect personally identifiable information unless explicitly provided by the user in connection with a request for service.

Human-Friendly Explanation:

We use cookies (tiny text files) on our website to make things work smoothly, like helping you move from page to page or remembering your language settings. Some cookies also help us understand how people use our site—so we can make it better for everyone.

We don’t use cookies to sell anything or track you across other websites. You can manage your cookie choices any time by clicking on the settings or adjusting your browser. We’ll always respect your decision.

Your privacy matters to us, and we use these tools only to give you a better, safer experience on our site.

8. Third-Party Websites and External Links

The Website may contain hyperlinks to external websites owned and operated by third-party organisations, institutions, or service providers. These hyperlinks are provided for convenience only and do not imply any affiliation, sponsorship, endorsement, or approval by DocuConsult Ltd of the linked website or its operators.

DocuConsult Ltd assumes no responsibility for, and expressly disclaims any liability arising from, the content, data handling practices, or privacy policies of any third-party website. Users are strongly encouraged to review the privacy policies, cookie notices, and terms of use of each external website before submitting any personal data.

DocuConsult Ltd does not monitor or control the accuracy, legality, security, or appropriateness of content available on such third-party sites. Accessing any linked third-party resource shall be undertaken solely at the user’s own risk, and the Company shall not be held liable for any direct, indirect, or consequential loss or damage resulting from the use of or reliance on any such third-party website.

For avoidance of doubt, any personal data submitted to an external website is subject to that entity’s privacy policy and is outside the scope of this Privacy and Data Protection Policy.

9. Data Subject Rights

Pursuant to Chapter III of the UK General Data Protection Regulation (UK GDPR), all data subjects whose personal data is processed by DocuConsult Ltd are entitled to exercise the following rights:

  • Right of Access (Article 15) – You have the right to obtain confirmation of whether we are processing your personal data and, if so, to request a copy of that data and related information.
  • Right to Rectification (Article 16) – You have the right to request the correction of inaccurate or incomplete personal data concerning you.
  • Right to Erasure (“Right to Be Forgotten”) (Article 17) – You may request the deletion of your personal data in certain circumstances, such as when processing is no longer necessary or when consent has been withdrawn.
  • Right to Restrict Processing (Article 18) – You may request a restriction on the processing of your personal data under specific conditions, such as where the accuracy of the data is contested.
  • Right to Data Portability (Article 20) – You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance.
  • Right to Object (Article 21) – You may object to the processing of your personal data where such processing is based on legitimate interests or involves direct marketing.
  • Right to Lodge a Complaint (Article 77) – You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection issues, if you believe that our processing of your personal data infringes applicable law.

To exercise any of the above rights, you may contact the Company in writing via email at: info@docuconsulting.co.uk. To safeguard against unauthorised access or fraudulent requests, we may require proof of identity and/or further information necessary to locate the relevant data.

We aim to respond to all legitimate requests within one calendar month. In cases involving complex or multiple requests, this period may be extended by an additional two months, in accordance with Article 12(3) UK GDPR.

10. Revisions to this Policy

DocuConsult Ltd reserves the unilateral and ongoing right to amend, update, revise, or otherwise modify this Privacy and Data Protection Policy at any time, without prior individual notice, in order to:

  • Comply with changes to applicable data protection legislation, including the UK GDPR, the Data Protection Act 2018, or any successor legislation;
  • Reflect modifications to Company operations, services, or technological infrastructure;
  • Accommodate guidance issued by supervisory authorities, including the Information Commissioner’s Office (ICO);
  • Enhance user clarity, legal accuracy, or enforceability.

Material amendments that significantly affect the rights or obligations of data subjects shall be notified either via a conspicuous notice on the Company’s Website or, where appropriate, through direct communication via email or written notice. The Company may, at its discretion, also archive historical versions of the Policy for transparency purposes.

Continued access to, and use of, the Website following the posting of such revisions shall constitute deemed acceptance of the updated Privacy and Data Protection Policy. Users who do not agree to the updated terms should cease using the Website and may contact the Company for clarification regarding the implications of the change.

DocuConsult Ltd encourages users to review this Privacy and Data Protection Policy regularly to remain informed of how their personal data is being processed and protected.

11. Contact and Complaints

DocuConsult Ltd remains committed to transparency, accountability, and responsiveness in all matters concerning the protection of personal data. We welcome queries, requests for clarification, and concerns about the contents of this Privacy and Data Protection Policy or the broader data processing practices employed by the Company.

If you wish to exercise your rights under data protection law, require assistance with understanding this policy, or have a complaint regarding how your personal data has been handled, you may contact us at the following address:

Email: info@docuconsulting.co.uk

All communications will be treated with the utmost seriousness, and we will aim to acknowledge and respond to queries and complaints in accordance with our legal obligations—typically within one calendar month of receipt.

If, having contacted us, you remain dissatisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a formal complaint with the Information Commissioner’s Office (ICO), which is the UK’s independent authority established to uphold information rights.

Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113

Plain-Language Explanation:

If you have any concerns about how your personal data is being handled—or if something in this document is unclear—please don’t hesitate to reach out to us. We’re here to help and want to make sure your rights and privacy are respected.

You can email us directly at info@docuconsulting.co.uk. If we can’t resolve your concern, you also have the right to speak to the UK’s data protection authority, the Information Commissioner’s Office (ICO). Their job is to help protect your privacy rights too.

We take your feedback seriously and will do our best to respond clearly and quickly.

Call for Free