# Privacy Policy
**Last updated: 16 July 2026**
## 1. Who we are
CG Consulting Firm Ltd (“CG Consulting”, “we”, “us” or “our”) provides UK immigration advice and related consultancy services.
For data-protection purposes, CG Consulting Firm Ltd is the controller of the personal information described in this Privacy Policy.
**Company name:** CG Consulting Firm Ltd
**Company number:** 14372248
**Registered office:** 24 Malvern House, 2 Palmer Road, London, England, SW11 4GJ
**IAA registration number:** F202432182
**Email:** post@cg-cons.co.uk
**Telephone:** +44 7459 565717
**Website:** https://cg-cons.co.uk/
This Privacy Policy explains how we collect, use, store and share personal information when you:
- visit our website;
- contact us by telephone, email, WhatsApp, Telegram or social media;
- submit a Facebook or Instagram lead form;
- arrange a consultation;
- become a client;
- provide information in connection with another person’s immigration matter; or
- otherwise communicate or work with us.
## 2. Information we collect
Depending on how you interact with us and the services you request, we may collect:
### Contact and identification information
- name;
- email address;
- telephone number;
- postal address;
- preferred language and contact method;
- date of birth;
- passport, identity-document or immigration-document details.
### Enquiry and consultation information
- the immigration service or consultation you are interested in;
- your preferred consultation time;
- information you provide about your circumstances;
- correspondence, call notes and appointment records.
### Immigration and case information
If you instruct us, we may need to collect information concerning:
- nationality, citizenship and immigration status;
- visa and travel history;
- family and relationship circumstances;
- employment, education and professional qualifications;
- income, savings, accommodation and sponsorship arrangements;
- Home Office application and reference numbers;
- identity, passport and supporting documents;
- information concerning family members, sponsors, employers or dependants;
- previous immigration decisions, refusals, appeals or legal proceedings.
Some immigration matters may require information about health, racial or ethnic origin, religious beliefs, biometric information or criminal convictions. We collect such information only where it is relevant and necessary for the service you have asked us to provide and where the law permits us to process it.
### Financial information
We may collect payment and billing information when you purchase our services. Payments may be processed by a third-party payment provider. We do not retain complete payment-card information unless this is necessary and lawfully permitted.
### Website and technical information
When you use our website, we may collect:
- IP address;
- browser and device information;
- pages visited and time spent on the website;
- referring website;
- cookie identifiers;
- website interaction and security information.
## 3. Facebook and Instagram lead forms
When you submit an enquiry through a Facebook or Instagram lead form, Meta provides us with the information you choose to submit.
This may include:
- your name;
- telephone number;
- email address;
- the type of consultation you are interested in;
- your preferred contact method; and
- when you would like us to contact you.
We use this information to:
- respond to your enquiry;
- arrange a consultation;
- provide information about the service you requested;
- assess whether we may be able to assist you; and
- take steps at your request before entering into a contract.
Submitting an enquiry does not automatically subscribe you to unrelated marketing. We will send promotional communications by email, text message or similar electronic methods only where we have an appropriate legal basis and, where required, your consent.
Meta separately processes information under its own privacy policy. You should review Meta’s privacy information before using Facebook or Instagram.
## 4. Where we obtain information
We normally obtain personal information directly from you.
Where relevant to an immigration matter, we may also receive information from:
- your spouse, partner, family member or sponsor;
- an employer or educational institution;
- another professional adviser;
- the Home Office or another public authority;
- a court or tribunal;
- an interpreter, translator or expert;
- publicly available records; or
- Facebook, Instagram or another platform through which you submitted an enquiry.
If you provide personal information about another person, you should ensure that you are authorised to do so and, where appropriate, make this Privacy Policy available to them.
## 5. How and why we use personal information
We may use personal information to:
- respond to enquiries and arrange consultations;
- assess whether we can provide the requested service;
- provide immigration advice and case-management services;
- prepare and manage applications, representations, reviews and appeals;
- communicate with clients and relevant third parties;
- verify identity and conduct necessary compliance checks;
- manage payments, accounts and business records;
- protect our clients, staff, systems and business against fraud or misuse;
- meet legal, regulatory, professional and insurance obligations;
- handle complaints or legal claims;
- improve our website and services; and
- send marketing communications where permitted.
Our lawful bases may include:
- **Steps before a contract or performance of a contract:** where processing is necessary to respond to your request or provide an agreed service.
- **Legal obligation:** where we must process information to comply with legal, regulatory, accounting or professional requirements.
- **Legitimate interests:** where processing is reasonably necessary to operate and protect our business, manage enquiries, provide effective client service or establish, exercise or defend legal claims.
- **Consent:** where we ask for and obtain your consent, including for certain marketing communications or particular uses of sensitive information.
- **Legal claims or substantial public interest:** where processing special-category or criminal-offence information is necessary and permitted under applicable data-protection legislation.
Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and interests.
## 6. Marketing communications
We may contact you about the service you requested without treating that communication as marketing.
We will not use a consultation enquiry to send unrelated electronic marketing unless:
- you have consented;
- another lawful exception applies; or
- the communication is otherwise permitted by applicable direct-marketing rules.
You may withdraw consent or opt out of marketing at any time by:
- using the unsubscribe link in a marketing email; or
- contacting post@cg-cons.co.uk.
Withdrawing from marketing will not prevent us from sending necessary communications about an active enquiry, appointment or client matter.
## 7. Who we share information with
Where necessary, we may share personal information with:
- the Home Office, courts, tribunals, embassies and other public authorities;
- the Immigration Advice Authority and other regulators;
- solicitors, barristers and other professional advisers;
- translators, interpreters and expert witnesses;
- accountants, auditors and insurers;
- identity, fraud-prevention and compliance service providers;
- IT, cloud-storage, website, email, telephone, messaging and client-management providers;
- payment processors and banks;
- Meta, where Facebook or Instagram services are used;
- law-enforcement or regulatory bodies where disclosure is required or permitted by law; and
- a purchaser or successor if our business is reorganised, transferred or sold.
Service providers acting on our behalf are permitted to use personal information only for the agreed purpose and must protect it appropriately.
We do not sell personal information.
## 8. International transfers
Some technology, communications or cloud-service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure that the transfer is lawful. Depending on the circumstances, this may include:
- transferring information to a country covered by UK adequacy regulations;
- using an approved International Data Transfer Agreement or UK Addendum;
- relying on another lawful transfer mechanism; and
- applying appropriate contractual, technical and organisational safeguards.
## 9. How long we retain information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, regulatory, professional and insurance requirements.
Our normal retention periods are:
- **Enquiries that do not become client matters:** up to 12 months after the last meaningful contact.
- **Client and immigration case files:** normally six years after the matter is closed, unless a longer or shorter period is required because of the nature of the matter, a legal obligation, a complaint, a potential claim or the interests of a child.
- **Financial and accounting records:** normally six years after the end of the relevant accounting period.
- **Marketing records:** until you withdraw consent, object to marketing or the information is no longer required. We may retain a minimal suppression record to ensure that your opt-out request continues to be respected.
- **Website and cookie information:** according to the duration of the relevant cookie or analytics setting.
We may securely delete or anonymise information earlier where it is no longer required.
## 10. Security and confidentiality
We use reasonable technical and organisational measures designed to protect personal information against:
- unauthorised access;
- accidental loss;
- misuse;
- alteration;
- disclosure; and
- destruction.
Access to client information is restricted to people who require it for their work. Staff and service providers are subject to appropriate confidentiality obligations.
No internet transmission or storage system can be guaranteed to be completely secure. You should avoid sending highly sensitive documents through social media or ordinary messaging services unless we have agreed an appropriate method of transmission.
## 11. Cookies and analytics
Our website may use essential cookies required for security, navigation and website functionality.
Subject to your choices and where required by law, we may also use analytics or advertising technologies to understand website use, measure campaigns and improve our services. These may include technologies provided by website analytics services or Meta.
Non-essential cookies should be used only after any consent required by law has been obtained. You can manage available choices through our cookie banner or your browser settings.
Disabling some cookies may affect how the website functions.
## 12. Children’s information
Our immigration work may involve children and dependant family members. We process children’s information only where it is relevant and necessary for an enquiry or client matter and where there is an appropriate lawful basis.
Where appropriate, we obtain information from or communicate with a parent, guardian or authorised representative. We do not knowingly use children’s information for behavioural advertising.
## 13. Automated decision-making
We do not make immigration-advice or client-acceptance decisions solely through automated processing that produces legal or similarly significant effects.
Advertising and social-media platforms may use automated systems when delivering advertisements. Such processing is controlled by the relevant platform and is covered by its own privacy information.
## 14. Your data-protection rights
Depending on the circumstances, you may have the right to:
- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- request deletion of information;
- request restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing;
- request transfer of information in a portable format;
- withdraw consent at any time where processing is based on consent; and
- raise a concern about how your information is being used.
These rights are not absolute. We may need to retain or continue using certain information where permitted or required by law, including for regulatory compliance or legal claims.
To exercise a right, contact:
**Email:** post@cg-cons.co.uk
**Postal address:** CG Consulting Firm Ltd, 24 Malvern House, 2 Palmer Road, London, England, SW11 4GJ
We may ask for information necessary to verify your identity before responding.
## 15. Complaints
Please contact us first if you have a concern about how we use personal information. We will try to investigate and resolve the matter.
You also have the right to complain to the Information Commissioner’s Office:
**Information Commissioner’s Office**
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
## 16. Third-party websites and services
Our website may link to websites or services operated by other organisations. We are not responsible for their privacy practices. You should review their privacy information before providing personal information.
## 17. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our services, legal requirements or data-processing practices.
The current version will be published on this page with its last-updated date. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected individuals.
## 18. Contact us
If you have questions about this Privacy Policy or how we process personal information, contact:
**CG Consulting Firm Ltd**
24 Malvern House
2 Palmer Road
London
England
SW11 4GJ
**Email:** post@cg-cons.co.uk
**Telephone:** +44 7459 565717
**Website:** https://cg-cons.co.uk/
