Privacy Policy

Effective Date: 03.05.2025
Last Updated: 03.05.2025

ISM LAW (“we,” “us,” “our”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect and process the following types of personal data:

• Identity Data – Name, date of birth, government-issued ID (if required).
• Contact Data – Address, email, phone number.
• Financial Data – Bank details, payment information.
• Technical Data – IP address, browser type, device information.
• Usage Data – Interactions with our website or services.
• Marketing Preferences – Preferences for receiving marketing materials.
• Special Category Data – Only when necessary and with explicit consent (e.g., health data for service requirements).

2. How We Collect Your Data

We may collect your data in the following ways:

• Directly from You – When you sign up, contact us, or use our services.
• Automatically – Through cookies, analytics, and tracking technologies.
• From Third Parties – Business partners, public sources, or regulatory bodies.

3. How We Use Your Data

We process personal data for the following purposes:

• To provide and manage our services.
• To communicate with you regarding updates, promotions, or important notices.
• To process payments and prevent fraud.
• To improve our website, services, and customer experience.
• To comply with legal and regulatory obligations.

4. Lawful Basis for Processing

Under UK GDPR, we process your data under the following legal bases:

• Consent – Where you have given explicit consent (e.g., marketing emails).
• Contractual Obligation – Where processing is necessary to fulfill a contract.
• Legal Obligation – Where we are required to comply with the law.
• Legitimate Interests – Where processing is necessary for business operations, provided your rights do not override these interests.

5. Data Sharing & Third Parties

We do not sell your data. However, we may share it with:

• Service providers assisting in business operations (e.g., IT support, payment processors).
• Regulatory authorities if required by law.
• Business partners where necessary for service provision.

We ensure all third parties handle your data securely and in compliance with UK GDPR.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to improve our website and user experience. You can manage cookie preferences via your browser settings. For more details, see our Cookie Policy .

7. Data Retention

We only retain personal data for as long as necessary to fulfill the purposes outlined in this policy. When data is no longer required, we securely delete or anonymize it.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right to Access – Request a copy of your data.
• Right to Rectification – Request correction of inaccurate data.
• Right to Erasure – Request deletion of your data (subject to legal requirements).
• Right to Restrict Processing – Request limitation of data processing.
• Right to Data Portability – Request transfer of your data.
• Right to Object – Object to processing based on legitimate interests.
• Right to Withdraw Consent – Withdraw consent at any time.

9. Data Security

We implement strict security measures, including encryption and access controls, to protect your personal data from unauthorized access, loss, or misuse.

10. Contact & Complaints

If you have any concerns about your data, please contact:

Data Protection Officer (DPO)
ISM Law
Office Herwood House, 288 Southbury Road Enfield EN1 1TR
info@ismlaw.co.uk

If you are not satisfied with our response, you can file a complaint with the Information Commissioner’s Office (ICO):

• Website: www.ico.org.uk
• Phone: 0303 123 1113

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website, and where necessary, we will notify you.