Privacy Policy & Data Protection

1. Data Controller Identity

ILC Advisory Group Ltd acts as the Data Controller responsible for your personal and corporate data. We adhere strictly to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We collect and process the following categories of information:

• Identity & Corporate Data: Full name, company name, and corporate role.
• Contact & Account Data: Email address, encrypted authentication credentials, and secure portal communication logs.
• Billing & Transaction Data: Stripe customer IDs, payment histories, and commercial invoice archives (We do not store raw credit card numbers; all payment processing is tokenized securely via Stripe).
• Advisory Inquiry Data: Confidential legal consultation requests and practice area documentation submitted via our ticket system.

3. Lawful Basis for Processing

We process your data under Article 6 of the UK GDPR on the following legal grounds: (a) Contractual Necessity: To fulfill advisory retainers and process payments; (b) Legal Obligation: To maintain UK statutory accounting records and AML compliance; and (c) Legitimate Interests: To secure our web portal and improve B2B consulting services.

To provide our services, we share strictly necessary data with authorized third-party processors under strict Data Processing Agreements (DPAs):

• Stripe: For secure payment processing and subscription management.
• Cloud Hosting Providers: For secure application hosting and database management.

Your data is stored on secure, encrypted infrastructure (including PostgreSQL databases and secure object storage) hosted within the United Kingdom and the European Economic Area (EEA). The UK Government formally recognizes the EEA as providing an adequate level of data protection. We employ 256-bit SSL encryption and strict role-based access controls (RBAC) across all environments.

We retain your account data for as long as your account is active. Transactional data and invoices are retained for a statutory period of 6 years to comply with UK HMRC tax legislation.

We use essential cookies to maintain secure user sessions and CSRF protection. Non-essential analytical cookies are only deployed with your explicit consent via our cookie banner. You can manage your preferences at any time.