Privacy Policy & Terms of Service

1.1. Introduction to Data Governance

In the highly specialized field of UK immigration law, the management of personal information is a strategic necessity that transcends mere administrative duty. UHA Legal Limited (Company Registration Application Ref: 116-733078) operates at the intersection of critical legal advocacy and rigorous data protection. We recognize that providing high-level immigration advice necessitates the processing of deeply sensitive personal data. Our governance framework is specifically engineered to balance this operational requirement with the stringent protections mandated by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By maintaining this robust compliance posture, we safeguard the integrity of the legal process and the fundamental privacy of our clients.

Fatima Arooj Rashid, as the Sole Director and Data Owner, holds ultimate personal accountability for all data processing activities within the firm. This centralized leadership ensures that privacy-by-design is not a secondary thought but a foundational element of our practice, from the moment of initial instruction to the final secure destruction of a file. The following sections define our regulatory standing and the specific protocols governing your data.

1.2. Identity of the Data Controller and Regulatory Status

The firm's regulatory standing provides clients with the essential assurance that their most sensitive documents are handled by an entity subject to independent, statutory oversight. UHA Legal Limited serves as the primary data controller. All inquiries regarding the processing of personal data should be directed to the Principal Director. The specific details of our regulatory and contact status are as follows:

• Legal Entity: UHA Legal Limited.
• Registered Address: 443 Cheetham Hill Road, Manchester, M8 0PF.
• ICO Registration Reference: ZC187130 (Active: 01 July 2026 – 30 June 2027).
• Direct Contact: info@uhalegal.co.uk.

This formal regulatory oversight dictates the lawful bases under which UHA Legal Limited processes your personal information, ensuring every action taken is legally defensible.

1.3. Lawful Bases for Processing and Data Categorisation

To protect the firm's professional standing and the client's legal interests, we process data under the specific lawful bases of Contractual Necessity, Legal Obligation, and Consent. Contractual Necessity ensures we can deliver the specific immigration services defined in your Client Care Letter. Legal Obligation allows us to fulfill our statutory reporting duties to our regulator, the Immigration Advice Authority (IAA). These bases serve as a “legal shield,” ensuring your data is never used beyond the scope required to advance your immigration status.

We categorize the data processed by the firm into the following tiers of sensitivity:

This categorised data is the evidentiary foundation of all legal advice and application submissions. Because this information is highly sensitive, UHA Legal Limited utilizes multi-layered security protocols to maintain absolute confidentiality.

1.4. Data Storage, Security, and Retention Protocols

UHA Legal Limited employs a rigorous security strategy to mitigate the risks inherent in handling sensitive immigration documentation. Our primary electronic storage is a secure, encrypted cloud-based legal practice management system. Access to this environment is exclusively restricted to Fatima Arooj Rashid and is fortified by mandatory Two-Factor Authentication (2FA) and high-entropy alphanumeric passwords. No client data is ever stored on unprotected local hard drives or personal mobile devices.

Physical security is managed with equal precision. Temporary physical documents or original certificates are held at our Manchester office within heavy-duty, fireproof filing cabinets secured by a dual-lock system. In adherence to the mandates of the IAA, we maintain a strict 7-year retention policy for all closed client files and correspondence.

Upon the conclusion of this 7-year period, data is destroyed using the following industry-standard methods:

• Digital Data: Permanent deletion from cloud systems using secure overwriting software, rendering the data digitally unrecoverable.
• Physical Data: Destruction on-site via DIN P-4 cross-cut shredding, which transforms documents into unreadable confetti prior to recycling.

1.5. Individual Data Rights under UK Law

Under UK data protection law, clients possess fundamental rights that ensure continued autonomy over their information. These include the Right of Access (Subject Access Request), Right to Rectification (correcting errors), Right to Erasure (the ‘right to be forgotten’ where legally permissible), and the Right to Object to specific processing activities.

To exercise these rights or submit a Subject Access Request (SAR), please contact Fatima Arooj Rashid directly at the email addresses provided in Section 1.2. While our privacy protocols protect your data, our professional engagement is further governed by our commercial Terms of Service.

2.1. Introduction to Professional Standards

A transparent contractual framework is the bedrock of professional immigration advice. These Terms of Service govern the relationship between UHA Legal Limited and the client, acting as a mandatory supplement to the formal Client Care Letter. UHA Legal Limited is regulated by the Immigration Advice Authority (IAA) at Advice Level 1. We emphasize that while our registration is currently pending, the firm operates with proactive adherence to the IAA's transitional rules, maintaining the highest possible ethical and professional standards during this period.

This relationship is defined by direct accountability and a financial model designed to prioritize consumer protection.

2.2. Financial Transparency: The “No Client Money” Model

UHA Legal Limited operates exclusively on an “Invoice-Only” model. This is a critical consumer-protection mechanism: the firm does not maintain a client bank account and strictly prohibits the acceptance of advance payments for legal fees or third-party disbursements. By billing only upon the completion of specific, proven milestones, we eliminate the risks associated with traditional client accounts, such as delays in fund disbursement or the risk to client funds in the event of firm insolvency.

The following financial rules are absolute:

• Strict Prohibition: No advance fees, cash payments, or payments for uncompleted work are accepted.
• Payment Method: All fees must be paid via Direct Bank Transfer to our Airwallex (UK) Limited commercial account. Account details are provided on your invoice.
• Accidental Transfers: If a client inadvertently overpays or transfers funds ahead of a completed milestone, UHA Legal Limited will return the funds to the originating account within 2 business days.

2.3. Fees and Disbursements

We operate a transparent, fixed-fee structure that gives clients certainty from the outset. The professional fee for your specific matter is set out in your Client Care Letter and is available on request.

Important Note on VAT and Disbursements: UHA Legal Limited is not registered for VAT, so no VAT is added to our professional fees. All Home Office application fees and Immigration Health Surcharges (IHS) are excluded and must be paid by the client directly to the Home Office at the time of submission.

2.4. Right to Cancel and Client Responsibilities

Under the Consumer Contracts Regulations, clients have the right to cancel their contract within 14 days of signing the Client Care Letter without providing a reason. If you request that work commence immediately within this period, you will be liable for the value of all professional work performed up to the point of cancellation.

The success of an immigration matter is a shared responsibility. Clients are contractually obligated to provide full, honest, and timely documentation. UHA Legal Limited accepts no liability for application rejections or delays caused by missing, fraudulent, or delayed evidence provided by the client. Honesty is the primary prerequisite for a successful application.

2.5. Complaints Procedure and Regulatory Escalation

UHA Legal Limited is committed to excellence, but we maintain a robust internal resolution process should you be dissatisfied. All complaints must be submitted in writing to Fatima Arooj Rashid. Our resolution timeline is:

• Acknowledgment: Within 3 business days.
• Investigation: Objective review of case files and communication logs.
• Final Response: A comprehensive written conclusion provided within 28 days.

If our internal resolution is not satisfactory, you possess the right to escalate your grievance to the Immigration Advice Authority (IAA):

• Address: PO Box 567, Dartford, Kent, DA1 9XW.
• Email: complaints@immigrationadviceauthority.gov.uk.

These terms are governed by the laws of England and Wales. UHA Legal Limited remains dedicated to the provision of ethical, transparent, and expert immigration counsel.