Privacy Policy

Last updated: 8 April 2026

We respect your privacy. This policy explains what personal data we collect, how we use it, and the choices you have when you use our website or contact us. It’s written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are (data controller)

For the purposes of UK data protection law, MILS is the data controller of personal data collected via this website.

• Organisation: Mohmand Immigration Legal Services
• Email: info@mohmandimmigration.org
• Phone: +44 7521497100
• Address: 79 College Road, Harrow, London, HA1 1BD, United Kingdom

2. Personal data we collect

The personal data we collect depends on how you interact with us. This may include:

• Contact details: name, email address, telephone number.
• Enquiry information: the content of messages you send us (including via WhatsApp, email or telephone).
• Technical data: IP address, device type, browser type, pages visited, and similar analytics data.

Note: If you include immigration details or other sensitive information in your message, we’ll treat it confidentially and use it only to help with your enquiry.

3. How we use your personal data

We use personal data to:

• respond to enquiries and provide information about our services;
• book and manage consultations and client relationships;
• provide our legal/immigration services, including preparing and managing casework;
• improve our website, services and user experience;
• protect our business, prevent fraud and keep our systems secure; and
• comply with legal and regulatory obligations.

4. Our lawful bases (UK GDPR)

UK GDPR requires that we have a legal reason to use your personal data. Depending on the situation, this may include:

• Consent: where you choose to contact us or opt in to a specific request.
• Contract: where processing is necessary to provide services you request or to take steps at your request before entering into a contract.
• Legal obligation: where we must comply with UK laws and regulatory requirements.
• Legitimate interests: where processing is necessary for our legitimate interests (e.g. running our business, improving services, preventing fraud) and your rights do not override those interests.

5. Sharing your personal data

We may share your personal data with:

• Service providers that help us operate our business (e.g. email, hosting, analytics).
• Professional advisers such as accountants, auditors, or legal advisers where necessary.
• Regulators and authorities where required by law or to protect our rights.

We do not sell personal data.

6. Data retention

We keep personal data only for as long as we need it to respond to you, provide services, and meet legal or regulatory requirements.

7. Your rights

Under UK GDPR you have rights, including:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete data in certain circumstances.
• Restriction: ask us to limit processing in certain circumstances.
• Objection: object to processing based on legitimate interests or direct marketing.
• Data portability: receive data in a structured, commonly used format (where applicable).
• Withdraw consent: where we rely on consent, you can withdraw it at any time.

To exercise your rights, contact us using the details above. We may need to verify your identity before responding.

8. Cookies and analytics

We may use cookies (or similar technologies) to help the website work properly and understand how it is used.

9. Security

We implement appropriate technical and organisational measures designed to protect personal data from loss, misuse, unauthorised access, alteration or disclosure. While we take security seriously, no method of transmission over the internet is 100% secure.

10. Questions or complaints

If you have any questions or concerns, please contact us first — we’ll do our best to help. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

This privacy policy is provided for general information and does not constitute legal advice.