Privacy Policy & Data Protection

1. Data Controller Identity

ILC Advisory Group Ltd is the registered Data Controller responsible for your personal and corporate data. We adhere strictly to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We collect and process the following categories of information:

• Identity & Corporate Data: Full name, company name, corporate role, and UK VAT registration numbers.
• Contact & Account Data: Email address, encrypted authentication credentials, and secure portal communication logs.
• Billing & Transaction Data: Stripe customer IDs, payment histories, and VAT invoice archives (We do not store raw credit card numbers; all payment processing is tokenized securely via Stripe).
• Advisory Inquiry Data: Confidential legal consultation requests and practice area documentation submitted via our ticket system.

3. Lawful Basis for Processing

We process your data under Article 6 of the UK GDPR on the following legal grounds: (a) Contractual Necessity: To fulfill advisory retainers and process payments; (b) Legal Obligation: To maintain UK tax/VAT accounting records and AML compliance; and (c) Legitimate Interests: To secure our web portal and improve B2B consulting services.

To provide our services, we share strictly necessary data with authorized third-party processors under strict Data Processing Agreements (DPAs):

• Stripe: For secure payment processing and subscription management.
• Cloud Hosting Providers: For secure application hosting and database management.

Your data is stored on secure, encrypted PostgreSQL databases hosted exclusively within the UK cloud region. We employ 256-bit SSL encryption and strict role-based access controls (RBAC).

We retain your account data for as long as your account is active. Transactional data and invoices are retained for a statutory period of 6 years to comply with UK HMRC tax legislation.

We use essential cookies to maintain secure user sessions and CSRF protection. Non-essential analytical cookies are only deployed with your explicit consent via our cookie banner. You can manage your preferences at any time.