1. Who We Are (Data Controller)
The data controller responsible for your personal data is:
SHYN Legal
25 Cabot Square, London E14 4QA, United Kingdom
Email: info@shynlegal.co.uk
Phone: 020 3488 7525
Legal
Privacy Policy
Last updated: 3 July 2026
SHYN Legal is committed to protecting your privacy and personal data. This policy explains how we collect, use, store, and share your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
◎
Data Controller
SHYN Legal, 25 Cabot Sq, London E14 4QA
✉
Data Enquiries
info@shynlegal.co.uk
★
Supervisory Authority
Information Commissioner's Office (ICO)
2. Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
Identity data
- ▷Full name
- ▷Date of birth (where required for immigration purposes)
- ▷Nationality and immigration status
Contact data
- ▷Email address
- ▷Phone number
- ▷Postal address
Case and immigration data
- ▷Visa type and immigration history
- ▷Passport and travel document details
- ▷Relationship and employment evidence submitted as part of an application
Technical data
- ▷IP address
- ▷Browser type and version
- ▷Pages visited and time spent on the website
- ▷Device identifiers
AI assessment data
- ▷Case details submitted through the AI intake tool
- ▷Visa type selected
- ▷Free-text description of your circumstances
Communications data
- ▷Email and message content sent to us
- ▷Enquiry form submissions
- ▷Records of telephone conversations (where noted)
We do not intentionally collect special category data (e.g. health, biometric, or racial/ethnic data) except where strictly necessary for the immigration application you instruct us to assist with, and only with your explicit consent.
3. How We Collect Your Data
- ◆Directly from you — via our contact form, AI assessment tool, telephone, email, or in-person
- ◆Automatically — through cookies and analytics tools when you visit our website
- ◆From third parties — from review platforms (Google, Facebook) where you have left a public review of our services
4. Legal Basis for Processing (UK GDPR Article 6)
We only process your personal data where we have a lawful basis to do so:
Contract performance (Art. 6(1)(b))
To provide immigration advisory services you have instructed us to carry out.
Legitimate interests (Art. 6(1)(f))
To operate and improve our website, prevent fraud, manage our business, and send service-related communications.
Legal obligation (Art. 6(1)(c))
To comply with anti-money laundering regulations, HMRC requirements, and other statutory obligations.
Consent (Art. 6(1)(a))
For marketing communications, optional cookies, and processing special category data (where required). You may withdraw consent at any time.
5. How We Use Your Data
- ◆To respond to enquiries and provide immigration advice and representation
- ◆To prepare and submit visa applications on your behalf
- ◆To manage your case and maintain accurate records
- ◆To send appointment confirmations and case updates
- ◆To conduct AI-assisted eligibility screening (indicative only)
- ◆To comply with our legal and regulatory obligations
- ◆To manage, improve, and secure our website and systems
- ◆To generate anonymised analytics for business purposes
6. Sharing Your Personal Data
We do not sell your personal data. We may share it with:
Home Office / UKVI
As required to submit your visa application.
Technology service providers
Cloud hosting, database, email, and scheduling tools (all bound by data processing agreements).
AI processing services
Our self-hosted AI system processes case descriptions locally. Where third-party AI tools are used, they are bound by data processing agreements.
Professional advisors
Accountants, legal counsel, or insurers, where necessary and under strict confidentiality.
Regulatory bodies
ICO, HMRC, or law enforcement where we are legally obliged to disclose.
7. International Transfers
We primarily process your data within the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses approved by the ICO, in compliance with UK GDPR Chapter V.
8. Data Retention
We retain your personal data only for as long as necessary for the purposes set out in this policy:
Client case files6 years from the conclusion of the matter (to comply with limitation periods)
Enquiry and contact form data2 years from date of submission
AI assessment data12 months from submission
Website analytics data26 months (standard analytics retention)
Financial and billing records7 years (HMRC requirement)
9. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right of access (Art. 15)
You may request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification (Art. 16)
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure (Art. 17)
You may ask us to delete your data where there is no longer a legal or legitimate basis for processing it.
Right to restriction of processing (Art. 18)
You may ask us to pause processing your data in certain circumstances.
Right to data portability (Art. 20)
You may request your data in a structured, machine-readable format where processing is based on consent or contract.
Right to object (Art. 21)
You may object to processing based on legitimate interests or for direct marketing.
Rights related to automated decision-making (Art. 22)
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Our AI tool is indicative only and does not make binding decisions.
Right to withdraw consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please email us at info@shynlegal.co.uk. We will respond within one month of receipt. We may need to verify your identity before fulfilling a request.
10. Cookies
Our website uses cookies to improve your experience and analyse traffic. Cookies are small text files placed on your device.
Strictly necessary cookies
Required for the website to function. These cannot be disabled.
Analytics cookies
Help us understand how visitors use our website. These are only set with your consent.
Functional cookies
Remember your preferences such as language or region settings.
You can manage your cookie preferences in your browser settings. Blocking certain cookies may affect website functionality.
11. Right to Lodge a Complaint
If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please contact us first at info@shynlegal.co.uk.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The date of the most recent revision appears at the top of this page. We encourage you to review this page periodically. Continued use of our website or services after any changes constitutes acknowledgement of the updated policy.