Home / Privacy
UK GDPR · Data Protection Act 2018
Privacy policy
What data we process, why, for how long, and your rights.
1. Data controller
Acer Prime Law (“Acer”, “we”), sociedad limitada registrada en Inglaterra y Gales, of 7a Alkmaar Way, Norwich NR6 6BF, Reino Unido, registered with the Information Commissioner's Office (ICO) under number {{ICO}}. Privacy contact: inf@acerprimelaw.com.
2. What data we process
- Contact data: name, email, phone.
- Enquiry data: area, message and, for asset recovery, approximate amount, date of the fraud and whether it has been reported.
- Matter data if you become a client: identity documents, immigration status, financial information and whatever is needed for the work.
- Technical data: IP address (for security and to limit misuse of the form) and the cookies described in our cookie policy.
Some matters may involve special category data (for example health or ethnic origin in an immigration file) or criminal offence data (for example as a fraud victim). We process these only where necessary for legal advice or to establish, exercise or defend legal claims, with the safeguards of the Data Protection Act 2018.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and preparing a quote | Pre-contractual steps at your request; legitimate interests in handling enquiries |
| Providing legal services | Performance of contract (engagement letter) |
| Identity, anti-money laundering and conflict checks | Legal obligation |
| SRA regulatory and tax obligations | Legal obligation |
| Website security and preventing form abuse | Legitimate interests |
| Analytics (only if you accept) | Consent |
4. Who we share it with
We do not sell your data. We may share it with: our web hosting and email provider (Hostinger), IT and identity verification providers, barristers, experts or translators where needed for your matter and with your knowledge, courts and public bodies (such as the Home Office) where the work requires, our insurers and professional advisers, and authorities where the law requires.
5. International transfers
If any provider processes data outside the UK, we ensure there is an adequacy decision or appropriate safeguards (such as the International Data Transfer Agreement or the UK Addendum to the standard contractual clauses).
6. How long we keep it
- Enquiries that do not become instructions: 12 months.
- Client files: usually at least 6 years after the matter closes, or longer where the law or type of matter requires.
- Anti-money laundering records: 5 years from the end of the relationship, under the applicable regulations.
7. Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent at any time (without affecting prior processing). Some rights have exceptions, for example where we must keep data by law or due to legal professional privilege. Email inf@acerprimelaw.com; we will reply within one month, extendable for complex requests.
8. Complaining to the ICO
If you are unhappy with how we handle your data, please tell us first so we can try to resolve it. In any event, you have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint · phone 0303 123 1113.
9. Security
We use encrypted connections (HTTPS), restricted access and appropriate technical and organisational measures. Please do not send identity documents, passwords or bank details through the form.
10. Changes
We may update this policy and will publish the current version here. Last updated: 10/2026.