Privacy policy

Last updated: 27 December 2025

 
1. Introduction

Mayfield & Rowe Ltd. (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you interact with us, including when you visit our website, contact us, or use our immigration advisory services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 2. Who We Are

Mayfield & Rowe Ltd. is a UK-based immigration advisory with international offices, providing immigration advice and related support services to individuals, families, and businesses.

We are registered with and accredited by the UK Immigration Advice Authority (IAA).

For the purposes of data protection law, Mayfield & Rowe Ltd. is the Data Controller.

Contact details:

Email: [email protected]
Location: United Kingdom
 
3. Personal Data We Collect

We may collect and process the following categories of personal data.

3.1 Information You Provide to Us

Full name
Date of birth
Nationality and immigration status
Passport and identity document details
Contact details (email address, telephone number, postal address)
Employment, income, and financial information
Family and relationship information
Education and qualification details
Details provided during consultations, assessments, and applications
Correspondence and communications with us

3.2 Special Category Personal Data

Due to the nature of immigration advice, we may process special category personal data, including:

Racial or ethnic origin
Health or medical information (where required for an immigration application)

We only process special category data where it is:

Necessary for the provision of our services
Lawful under UK GDPR
Subject to appropriate safeguards

3.3 Data Collected Automatically

When you visit our website, we may automatically collect:

IP address
Browser type and version
Device and operating system information
Pages visited and time spent on the website

This information is used for security, performance monitoring, and analytics.

4. How We Use Your Personal Data

We use personal data for the following purposes:

To provide immigration advice and related services
To assess eligibility and prepare immigration applications
To communicate with you regarding enquiries or ongoing matters
To comply with legal and regulatory obligations
To maintain accurate internal records
To improve our website, services, and client experience
To prevent fraud and ensure system security

We do not sell your personal data.

 
5. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

Contract – where processing is necessary to provide services requested by you
Legal obligation – where processing is required to comply with legal or regulatory duties
Legitimate interests – to manage our business, improve services, and ensure security
Consent – where required, particularly for processing special category data

Where consent is relied upon, you may withdraw it at any time.

6. Sharing Your Personal Data

We may share your personal data with the following parties, where necessary:

The UK Home Office and other relevant government authorities
The UK Immigration Advice Authority (IAA), where required
Translation, certification, and courier service providers
Secure IT systems and case management providers
Professional advisers such as auditors, insurers, or compliance consultants

All third parties are required to process personal data securely and in accordance with data protection law.

 7. International Data Transfers

As Mayfield & Rowe Ltd. operates internationally, your personal data may be accessed or processed by our international offices or partners.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

Adequacy regulations recognised by the UK
Standard contractual clauses
Secure access controls and data handling procedures
 
8. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

Secure IT systems and access controls
Encryption where appropriate
Restricted access to personal data on a need-to-know basis
Staff confidentiality obligations and data protection training

Despite these measures, no method of transmission over the internet is completely secure.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

The duration of our engagement with you
Any statutory or regulatory retention requirements
The resolution of disputes or legal obligations

When data is no longer required, it is securely deleted or anonymised.

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate or incomplete data
Request erasure of personal data (where applicable)
Restrict or object to processing
Request data portability
Withdraw consent where consent is relied upon

To exercise your rights, please contact us using the details in Section 2.

11. Cookies

Our website uses cookies to improve functionality and analyse performance. For detailed information about the cookies, we use and how to manage them, please see our Cookies Policy.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can address the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Website: www.ico.org.uk 

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, and the “Last updated” date will be revised accordingly.