Privacy Policy

1. Introduction

Crystal Returns is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, services, or interact with us.

As a law firm regulated by the Solicitors Regulation Authority (SRA), we are bound by strict professional duties regarding confidentiality and data protection.

2. Who We Are

Data Controller: Crystal Returns
Address: 27 Dial Hill Rd, Clevedon BS21 7HL, United Kingdom
Phone: +447780410583
Email: [email protected]

3. What Information We Collect

3.1 Information You Provide

• Contact Information: Name, email address, phone number, postal address
• Case Information: Immigration history, personal circumstances, legal queries
• Identity Documents: Passport details, visa information, identification documents
• Financial Information: Income details, bank statements (where relevant to case)
• Family Information: Details of family members relevant to your case
• Communication Records: Emails, letters, phone call notes, meeting minutes

3.2 Information We Collect Automatically

• Website Usage: IP address, browser type, pages visited, time spent
• Cookies: See our Cookie Policy for detailed information
• Technical Data: Device information, operating system, referral sources

4. How We Use Your Information

4.1 Legal Services

• Providing immigration legal advice and representation
• Preparing and submitting visa applications
• Communicating with Home Office and other authorities
• Managing your case and maintaining case files

4.2 Business Operations

• Client relationship management
• Billing and payment processing
• Appointment scheduling and reminders
• Quality assurance and service improvement

4.3 Marketing and Communications

• Sending newsletters and updates (with your consent)
• Informing you of relevant law changes
• Service announcements and important notices

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: To provide legal services you have requested
• Legitimate Interests: For business operations and case management
• Legal Obligation: To comply with SRA rules and other legal requirements
• Consent: For marketing communications and non-essential cookies
• Vital Interests: In emergency situations affecting health or safety

6. Who We Share Information With

6.1 Necessary Disclosures

• Home Office: For visa and immigration applications
• Courts and Tribunals: For legal proceedings
• Other Government Bodies: When legally required
• Professional Advisors: Barristers, expert witnesses, translators

6.2 Service Providers

• IT Services: Cloud storage, email systems, case management software
• Administrative Services: Couriers, postal services, document services
• Financial Services: Payment processors, banking services

6.3 Third Parties (with your consent)

• Family members or authorized representatives
• Employers or sponsors (for business immigration cases)
• Other legal advisors working on your behalf

7. International Transfers

We may transfer your data outside the UK/EEA in limited circumstances:

• To overseas authorities for your immigration case
• To cloud services with appropriate safeguards
• With your explicit consent for specific purposes

All transfers comply with UK GDPR requirements and include appropriate safeguards.

8. Data Retention

We retain your data as follows:

8.1 Case Files

• Active Cases: For the duration of representation plus 7 years
• Closed Cases: 7 years after case completion (SRA requirement)
• Complex Cases: May be retained longer if legally required

8.2 Marketing Data

• Newsletter Subscribers: Until you unsubscribe
• Enquiry Data: 2 years after last contact

8.3 Website Data

• Analytics Data: 26 months
• Cookie Data: As specified in Cookie Policy

9. Your Rights

Under UK GDPR, you have the following rights:

9.1 Right of Access

You can request copies of your personal data we hold.

9.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

9.3 Right to Erasure

You can request deletion of your data (subject to legal and professional obligations).

9.4 Right to Restrict Processing

You can request we limit how we use your data in certain circumstances.

9.5 Right to Data Portability

You can request transfer of your data to another service provider.

9.6 Right to Object

You can object to processing based on legitimate interests or for marketing purposes.

9.7 Rights Related to Automated Decision Making

You have rights regarding automated decisions (we don't generally use automated decision-making).

10. Security Measures

We implement comprehensive security measures:

• Technical Measures: Encryption, secure servers, firewalls, access controls
• Organizational Measures: Staff training, data protection policies, regular audits
• Physical Measures: Secure offices, locked filing cabinets, visitor controls
• Professional Standards: SRA compliance, confidentiality obligations

11. Cookies and Website Analytics

Our website uses cookies and analytics tools. For detailed information, please see our Cookie Policy.

12. Children's Privacy

We do not knowingly collect personal information from children under 16 without parental consent. If you believe we have collected such information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, regulation, or our practices. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending email notifications to active clients
• Providing notice during your next interaction with us

14. Contact Information

For any questions about this Privacy Policy or to exercise your rights, contact us:

15. Complaints

If you believe we have not handled your data correctly, you can:

• Contact us directly: We will investigate and respond promptly
• Contact the ICO: Information Commissioner's Office (ico.org.uk)
• Contact the SRA: Solicitors Regulation Authority for professional conduct issues

16. Professional Standards

As solicitors, we are bound by:

• SRA Principles: Including client confidentiality and data protection
• Legal Professional Privilege: Protecting confidential communications
• Duty of Confidentiality: Ongoing obligation to protect client information