Legal
What personal information we collect, why we collect it, who we share it with, how long we keep it, and your rights.
ST Consultancies Ltd (trading as ST Consultancy) · Last updated: 18 October 2026
This policy explains what personal information ST Consultancy collects, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to visitors to stconsultancies.co.uk, to people who contact us or book a call, and to our clients.
We have written it in plain English. If anything is unclear, email us at info@stconsultancies.co.uk.
ST Consultancies Ltd is the “controller” of your personal information. This means we decide how and why it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
When we work with clients in Ireland or Hungary, the EU General Data Protection Regulation (GDPR) also applies.
When you visit our website we collect basic technical information, such as your IP address, browser and device type, and which pages you look at. We do this using cookies; see our Cookie Policy for details. Analytics cookies are only used if you agree to them.
The law says we must have a valid reason (a “lawful basis”) for each use of your information. These are ours:
| What we use it for | Our lawful basis |
|---|---|
| Replying to your enquiry and arranging your consultation | Our legitimate interest in responding to people who contact us, and taking steps at your request before a contract |
| Providing our services: company formation, corporate structuring, business plans, market expansion and immigration support | Performing our contract with you |
| Checking your identity and keeping records under anti-money-laundering law | Legal obligation (Money Laundering Regulations 2017) |
| Filing documents with authorities on your instructions (for example Companies House, HMRC, the Home Office, Revenue or NAV) | Performing our contract with you, and legal obligation |
| Keeping accounts and tax records | Legal obligation |
| Sending our newsletter and news about our services | Your consent (you can unsubscribe at any time). For existing clients, our legitimate interest in telling you about similar services, with an easy way to opt out. |
| Keeping our website secure and blocking spam (Google reCAPTCHA) | Our legitimate interest in protecting our website |
| Understanding how our website is used (Google Analytics) | Your consent, given through our cookie banner |
| Defending or bringing legal claims | Our legitimate interest |
Sensitive information. Health information and criminal-conviction details are treated with extra care. We only use them where your application requires it, with your explicit consent or where the law otherwise allows it, and only share them with the authority or adviser handling your application.
We never sell your personal information. We only share it where needed:
We work in the UK, Ireland, Hungary and India, and some of our service providers are based in the United States. This means your information may be sent outside the UK.
You can ask us for a copy of the safeguards we use.
| Type of information | How long we keep it |
|---|---|
| Enquiries that do not lead to work | 2 years from our last contact |
| Client files and correspondence | 6 years after our work for you ends |
| Identity and anti-money-laundering records | 5 years after our business relationship ends, as the law requires |
| Accounts and tax records | 6 years from the end of the financial year they relate to |
| Newsletter list | Until you unsubscribe |
| Website analytics | Up to 14 months |
After that, we delete your information securely or make it anonymous.
You have the right to:
To use any of these rights, email info@stconsultancies.co.uk. It is free, and we will reply within one month. We may need to confirm your identity first. Some rights have limits; for example, we cannot delete records we must keep by law. We do not make decisions about you using automated processes alone.
We use password protection, access controls, secure storage and encrypted connections, and only people who need your information for their work can see it. Our partners and service providers must protect it to the same standard.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the UK data protection regulator:
If you live in Ireland you can also contact the Data Protection Commission (dataprotection.ie), and in Hungary the National Authority for Data Protection and Freedom of Information (naih.hu).
Our website and services are for adults. We do not knowingly collect information from children, except where a child is included in a family immigration application made by their parent or guardian.
We may update this policy from time to time. The latest version will always be on our website, with the date it was last updated at the top.