Legal

Privacy Policy

What personal information we collect, why we collect it, who we share it with, how long we keep it, and your rights.

ST Consultancies Ltd (trading as ST Consultancy) · Last updated: 18 October 2026

This policy explains what personal information ST Consultancy collects, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to visitors to stconsultancies.co.uk, to people who contact us or book a call, and to our clients.

We have written it in plain English. If anything is unclear, email us at info@stconsultancies.co.uk.

1. Who we are

ST Consultancies Ltd is the “controller” of your personal information. This means we decide how and why it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

When we work with clients in Ireland or Hungary, the EU General Data Protection Regulation (GDPR) also applies.

2. The information we collect

Information you give us

  • When you contact us or book a call: your name, email address, phone number, company name, website, the service you are interested in and your message.
  • When you become a client: proof of identity and address (for example a passport and a utility bill), details of your company, its directors and shareholders, financial and tax information, and the documents needed for the work we do for you.
  • For immigration work: your nationality, passport and travel history, immigration history, employment, education and family details. Some visa applications also ask for health information or details of criminal convictions. We only collect this where the application requires it.
  • If you sign up to our newsletter: your name and email address.

Information we collect automatically

When you visit our website we collect basic technical information, such as your IP address, browser and device type, and which pages you look at. We do this using cookies; see our Cookie Policy for details. Analytics cookies are only used if you agree to them.

Information from other sources

  • Public registers such as Companies House, the Irish Companies Registration Office and the Hungarian Court of Registration.
  • Identity verification services we use for anti-money-laundering checks.
  • Your employer, business partner or adviser, if they introduce you to us or instruct us on your behalf.

3. Why we use your information

The law says we must have a valid reason (a “lawful basis”) for each use of your information. These are ours:

What we use it for Our lawful basis
Replying to your enquiry and arranging your consultation Our legitimate interest in responding to people who contact us, and taking steps at your request before a contract
Providing our services: company formation, corporate structuring, business plans, market expansion and immigration support Performing our contract with you
Checking your identity and keeping records under anti-money-laundering law Legal obligation (Money Laundering Regulations 2017)
Filing documents with authorities on your instructions (for example Companies House, HMRC, the Home Office, Revenue or NAV) Performing our contract with you, and legal obligation
Keeping accounts and tax records Legal obligation
Sending our newsletter and news about our services Your consent (you can unsubscribe at any time). For existing clients, our legitimate interest in telling you about similar services, with an easy way to opt out.
Keeping our website secure and blocking spam (Google reCAPTCHA) Our legitimate interest in protecting our website
Understanding how our website is used (Google Analytics) Your consent, given through our cookie banner
Defending or bringing legal claims Our legitimate interest

Sensitive information. Health information and criminal-conviction details are treated with extra care. We only use them where your application requires it, with your explicit consent or where the law otherwise allows it, and only share them with the authority or adviser handling your application.

4. Who we share it with

We never sell your personal information. We only share it where needed:

  • Our partner professionals who carry out regulated work with us: registered immigration advisers in the UK, attorneys in Hungary, solicitors and accountants in Ireland, and Chartered Accountants and Company Secretaries in India. We tell you before your information is passed to a partner.
  • Government bodies and registries, when you ask us to file something for you or when the law requires it.
  • Service providers that help us run our business: our website host, email and document storage providers, TidyCal (booking calls), Google Analytics, Google reCAPTCHA and CookieAdmin (cookie consent). They may only use your information on our instructions.
  • Professional advisers, auditors and insurers, where needed.
  • The police, courts or regulators, if the law requires us to.

5. Sending information outside the UK

We work in the UK, Ireland, Hungary and India, and some of our service providers are based in the United States. This means your information may be sent outside the UK.

  • Ireland and Hungary are in the EU. UK law recognises that the EU protects personal information to an equivalent standard.
  • India, the United States and other countries: we use the safeguards UK law requires, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK–US “data bridge” where the US company has signed up to it.

You can ask us for a copy of the safeguards we use.

6. How long we keep it

Type of information How long we keep it
Enquiries that do not lead to work 2 years from our last contact
Client files and correspondence 6 years after our work for you ends
Identity and anti-money-laundering records 5 years after our business relationship ends, as the law requires
Accounts and tax records 6 years from the end of the financial year they relate to
Newsletter list Until you unsubscribe
Website analytics Up to 14 months

After that, we delete your information securely or make it anonymous.

7. Your rights

You have the right to:

  • See the personal information we hold about you and get a copy.
  • Correct information that is wrong or incomplete.
  • Delete your information, where we no longer need it.
  • Restrict how we use your information in certain cases.
  • Object to us using your information, including for marketing.
  • Move information you gave us to another organisation.
  • Withdraw your consent at any time, where we rely on consent.

To use any of these rights, email info@stconsultancies.co.uk. It is free, and we will reply within one month. We may need to confirm your identity first. Some rights have limits; for example, we cannot delete records we must keep by law. We do not make decisions about you using automated processes alone.

8. How we keep it safe

We use password protection, access controls, secure storage and encrypted connections, and only people who need your information for their work can see it. Our partners and service providers must protect it to the same standard.

9. Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the UK data protection regulator:

  • Information Commissioner’s Office (ICO), ico.org.uk, telephone 0303 123 1113

If you live in Ireland you can also contact the Data Protection Commission (dataprotection.ie), and in Hungary the National Authority for Data Protection and Freedom of Information (naih.hu).

10. Children

Our website and services are for adults. We do not knowingly collect information from children, except where a child is included in a family immigration application made by their parent or guardian.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on our website, with the date it was last updated at the top.