IAA Immigration Privacy Notice

Last updated: 19/02/2026

OnDemand Concierge LTD
(Services Regulated by the Immigration Advice Authority)

1. Who We Are

OnDemand Concierge LTD is a limited liability company registered in England and Wales (Company No. 16116378).
Registered office:
5th Floor, 167–169 Great Portland Street,
London,
W1W 5PF.

We are authorised and regulated by the Immigration Advice Authority (IAA), Registration Number F202536969, to provide immigration advice and services at Level 1.

For the purposes of data protection law, OnDemand Concierge LTD is the Data Controller of your personal data. This Privacy Notice applies solely to immigration services regulated by the Immigration Advice Authority. For other services provided by OnDemand Concierge LTD, please refer to our General Privacy Policy.

2. Contact Details

If you have any questions regarding this Privacy Policy or how we handle your personal data, please contact:
Data Protection Officer
OnDemand Concierge LTD
Email: inessa.pobyeda@ondemand-concierge.co.uk
Address: 5th Floor, 167–169 Great Portland Street, London, W1W 5PF

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

3. What Personal Data We Collect

We may collect and process the following categories of personal data:
·       Full name
·       Date of birth
·       Nationality
·       Passport details
·       Contact details
·       Immigration history
·       Financial information
·       Employment information
·       Biometric information (where required for applications)

In immigration matters, we may also process special category data, including:
·       Ethnic origin
·       Health information
·       Criminal conviction data (where relevant to your application)

4. Lawful Basis for Processing

We process your personal data under the following lawful bases:
Contractual Necessity

Processing is necessary to provide immigration advice and services you have requested.

Legal Obligation Processing is required to comply with regulatory obligations under the Immigration and Asylum Act 1999 and IAA Code of Standards.
‍
Substantial Public Interest

Special category data is processed for the purpose of legal advice and immigration representation.

5. How We Use Your Data

We use your personal data to:
·       Assess eligibility for immigration applications
·       Prepare and submit applications
·       Communicate with UK Visas & Immigration (UKVI)
·       Maintain regulatory records
·       Comply with IAA and legal requirements
·       Prevent fraud and financial crime
We do not sell or rent your data to third parties.

6. Sharing Your Information

We may share your data with:
·       UK Visas & Immigration (UKVI)
·       Home Office departments
·       Professional translators
·       Payment processors
·       Regulatory bodies (IAA, ICO)
·       Legal or compliance advisers (if required)
We ensure appropriate safeguards are in place for any data sharing.

7. International Transfers

Where data is transferred outside the UK (for example, if a client is overseas), weмensure appropriate safeguards are applied in accordance with UK GDPR requirements.

Where data is transferred outside the UK (for example, if a client is overseas), weмensure appropriate safeguards are applied in accordance with UK GDPR requirements.

8. Data Retention

We retain immigration case files for a minimum of 6 years from the date of case completion in accordance with IAA requirements.
In some cases, we may retain data longer where:
·       Required by law
·       Required for regulatory defence
·       Necessary to protect legal interests 
After the retention period, data is securely deleted or destroyed.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:
·       Secure digital storage systems
·       Restricted access controls
·       Encrypted communications where appropriate
·       Confidentiality obligations for staff

10. Your Rights

Under UK GDPR, you have the right to:
·       Access your personal data
·       Request correction of inaccurate data
·       Request restriction of processing
·       Request erasure (subject to regulatory obligations)
·       Object to processing in certain circumstances
·       Request data portability (where applicable)
Requests should be made in writing to the contact details above.

11. Cookies

Our website may use cookies to improve user experience and analyse website traffic. You can control cookie settings through your browser preferences.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.