Privacy Policy

Who we are

Flashpoint Legal Ltd (company number 11656703) is a solicitors' firm authorised and regulated by the Solicitors Regulation Authority, SRA No. 807809. We are the data controller for the personal data described in this policy.

Flashpoint Legal Ltd has submitted its registration application to the Information Commissioner's Office (ICO). Confirmation is pending.

Contact: Flashpoint Legal Ltd
The Beehive
Beehive Ring Road
Crawley, RH6 0PA. Phone: 020 3916 6049. Email: info@flashpointlegal.com.

What personal data we collect

When you use this website or contact us, we may collect:

• Your name, email address and phone number
• Whether you're enquiring as a business/employer or as an individual, and the related details you provide (for businesses: company name, company size, sponsor licence status; for individuals: current immigration status, whether you've had a previous refusal)
• Your preferred consultation type and format
• The description of your situation you give us in the enquiry form, and whether you've flagged it as urgent
• Any documents you send us and correspondence between us
• Basic technical/attribution information captured automatically when you submit the form (the page you came from and how you arrived at the site)

We do not currently use analytics, tracking cookies, or any similar technology on this website. If that changes, this policy will be updated to explain what is collected and to provide cookie controls before any such technology goes live.

How we use your data

• Respond to your enquiry
• Assess whether we can act for you
• Provide legal services to you if you become a client, in line with our client care terms
• Meet our legal, regulatory and professional obligations, including anti-money laundering and identity checks

Our legal basis for processing

• Where you make an enquiry, we process your data on the basis of our legitimate interest in responding to prospective clients
• Where you instruct us, we process your data to perform our contract with you, and to comply with our legal and regulatory obligations as a solicitors' firm

Where your enquiry goes

When you submit our enquiry form, it is sent by secure, authenticated email directly to our own mailbox, info@flashpointlegal.com, using Microsoft 365 / Exchange Online. The website itself is operated through our contracted website hosting provider. There is no automatic case-management or CRM system connected to this website. Where appropriate, a member of the team may then add your details manually to our client records.

If your enquiry cannot be sent for a technical reason, we do not store what you typed — you will see a message asking you to contact us directly instead, with our phone number, email address and WhatsApp number.

How long we keep your data

We normally retain enquiry information for 12 months from your last meaningful contact with us. After that, it is deleted unless we have a legitimate reason to retain it for longer.

Where you become a client, information relevant to your matter becomes part of your client file. We normally retain client files for 6 years after your matter closes. In some cases we retain a file for longer — for example because of the nature of the matter, a legal or regulatory requirement, limitation or professional-risk considerations, or another legitimate reason.

We do not store the content of your enquiry in technical logs. Where a technical or security log contains identifying information, we normally keep it for no longer than 30 days, unless we need to keep it for longer to investigate a specific security or operational incident.

Sharing your data

We do not sell your personal data. We may share it with:

• Our contracted website hosting provider, which operates the infrastructure used to host this website and process the form submission
• Microsoft 365 / Exchange Online, which provides the email service used to receive enquiries
• The Home Office, courts, tribunals or other bodies where necessary to progress your matter
• Regulators or law enforcement where we are required to by law

No case-management system, CRM, analytics tool or artificial intelligence service currently receives your enquiry data automatically from this website. If that changes, we will assess the proposed processing and update this policy before the connection goes live.

Your rights

Under UK GDPR you have the right to:

• Ask us what personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data, where we are not required to keep it
• Object to or restrict certain processing
• Ask for your data to be provided to you in a portable format

To exercise any of these rights, contact us using the details above. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse.

Changes to this policy

We may update this policy from time to time. The version published on the site at any given time applies.