Privacy Policy
Last updated: 24 April 2026
1. Introduction and Scope
This Privacy Policy sets out how ILA-Connect Limited (“ILA-Connect”, “we”, “us” or “our”) collects, uses, shares, and protects your personal data when you visit our website (www.ila-connect.co.uk) or use our services to book appointments for Independent Legal Advice (ILA) provided by independent solicitors. This Policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
ILA-Connect Limited is not a law firm, does not provide legal advice, and does not form a solicitor-client relationship with any user. We provide a secure platform to arrange and coordinate Independent Legal Advice appointments with SRA-regulated solicitors.
By using our website or engaging our services, you acknowledge this role and the practices described in this Privacy Policy.
2. Who We Are
ILA-Connect Limited is a company registered in England and Wales under company number 11500074 with registered office at:
130 Aztec West, Park Avenue, Almondsbury, Bristol BS32 4UB, United Kingdom.
We act as a data controller in relation to the operation of our platform and booking services.
Where we pass data to solicitors for the purpose of your appointment, they act as independent data controllers.
For privacy-related enquiries, you may contact us at:
E-Mail: privacy@ila-connect.co.uk
Phone: 0333 300 1879
Postal: ILA-Connect Limited, 130 Aztec West, Park Avenue, Almondsbury, Bristol BS32 4UB
3. Personal Data We Collect
We only collect and retain personal data that is necessary for the purposes described in this Policy.
This may include:
- Identity & Contact Information: Name, email address, phone number, and address
- Appointment Details: Type of ILA, selected solicitor, date/time, and transaction details
- Identification Documents: Passport, driving licence, proof of address
- Documents for Legal Advice: Contracts, guarantees, and related materials uploaded via our client portal
- Technical Data & Cookies: IP address, browser type, device information, and website usage data
- Communications: Emails, phone calls, and messages
- Consent Preferences: Marketing and cookie choices
We do not intentionally collect special category data. However, where such data is included in documents you upload, it will be processed securely and only for the purpose of facilitating your legal advice.
We do not collect payment information. All solicitor fees are handled directly by the solicitor.
4. Legal Bases for Processing
We rely on the following lawful bases under UK GDPR:
- Performance of a Contract (Art. 6(1)(b)) – to arrange and manage your ILA appointment
- Legal Obligation (Art. 6(1)(c)) – to support solicitors in meeting regulatory obligations (e.g. AML)
- Legitimate Interests (Art. 6(1)(f)) – to operate our platform, ensure security, and provide efficient service delivery
- Consent (Art. 6(1)(a)) – for non-essential cookies and optional communications
Our legitimate interests include operating an efficient booking platform, preventing fraud, and ensuring effective communication between clients and solicitors.
Where we rely on consent, you may withdraw it at any time.
5. How We Use Your Information
We process your personal data for the following purposes, on the legal bases set out in Section 4:
- Schedule and manage your appointment
- Provide access to and operate your client portal
- Share necessary information with your chosen solicitor
- Facilitate the transfer of documents to the solicitor
- Support compliance with AML and regulatory requirements
- Respond to enquiries and provide customer support
- Communicate essential appointment information
- Monitor and improve website performance and usability
We do not use your data for advertising or profiling. Non-essential analytics are only used where you have provided consent.
6. Sharing Your Information
We only share your personal data where necessary to deliver our services or comply with legal obligations.
A) With Solicitors
We share your personal data, including documents you upload, with the independent solicitor you select or are connected with for the purpose of providing Independent Legal Advice.
That solicitor acts as an independent data controller and is responsible for their own processing of your personal data in accordance with applicable data protection laws and professional obligations.
B) With Third Parties at Your Direction
We may share confirmation that Independent Legal Advice has been completed (such as a signed certificate) with a lender, broker, or other third party, but only where you have requested or authorised us to do so.
C) With Trusted Service Providers
We use trusted third-party providers to support the operation of our platform and services. These include providers supporting:
- Online booking and scheduling systems
- Secure client portal and document upload functionality
- Cloud-based document storage
- Internal workflow and automation tools
- Calendar and diary management systems
- Website hosting and email infrastructure
- Analytics and website performance monitoring
These providers act as data processors and are contractually bound to process personal data only on our instructions and subject to appropriate confidentiality and security obligations. They do not use your data for their own purposes.
D) Legal Obligations and Authorities
We may disclose your personal data where required by law or where necessary to respond to requests from courts, regulators, or law enforcement, or to prevent fraud or enforce our legal rights.
7. Cookies and Analytics
We use cookies for:
- Essential Functions – e.g. booking, navigation, session storage.
- Analytics (with consent) – via Google Analytics to understand user behaviour.
- Google Analytics data is anonymised (IP masking is enabled).
- Microsoft Clarity
We also use Microsoft Clarity, a behaviour analytics tool provided by Microsoft Corporation, to help us understand how visitors interact with our website and to improve usability. Clarity captures anonymised data such as mouse movements, clicks, and scrolling activity. This information is processed in a way that does not personally identify individual users. Microsoft may also use this data for its own analytics and advertising purposes in accordance with its Privacy Statement. You can learn more about how Microsoft Clarity collects and processes data at https://clarity.microsoft.com/terms.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide our services, comply with legal obligations, and resolve disputes.
Our typical retention periods are:
- Appointment records and client information: Retained for up to 6 years from the date of the appointment
- Identification documents (e.g. passport, driving licence, proof of address):
Collected solely to facilitate the Independent Legal Advice process and enable the appointed solicitor to carry out their regulatory obligations.
These documents are retained for a limited period, typically no longer than 30 to 90 days following the appointment, after which they are securely deleted unless a longer retention period is required for legitimate operational reasons (such as resolving disputes or handling reissued documentation).
This limited retention period reflects our role as a facilitator rather than the party responsible for carrying out identity verification checks. - Client portal documents and uploaded files (including mortgage offers, loan agreements, and guarantees):
Retained for a limited period, typically up to 6 months following the appointment, to allow for operational requirements such as responding to queries, reissuing documentation, or supporting the completion process.
After this period, documents are securely deleted or anonymised unless a longer retention period is required for legitimate purposes such as resolving disputes.
This approach reflects our role as a facilitator of the Independent Legal Advice process, with the appointed solicitor retaining the official record of documents as part of their professional obligations. - Emails and support communications: Retained for 1 to 3 years
- Analytics data: Retained for up to 14 months
Important – Solicitor Retention Obligations
The independent solicitor who provides your legal advice is required to retain certain records, including identification documents, in accordance with their legal and regulatory obligations. This may include retention for up to 5 years under anti-money laundering regulations.
We regularly review and securely delete or anonymise personal data that is no longer required
9. International Data Transfers
Some of our service providers may process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, including:
- Transfers to countries with adequacy decisions
- Use of Standard Contractual Clauses (SCCs)
- Implementation of appropriate technical and organisational safeguards
10. Data Security
We take appropriate technical and organisational measures to protect your personal data, including:
- Encrypted (HTTPS) connections
- Secure cloud storage
- Restricted access controls (least privilege)
- Regular system updates and patching
- Staff training and internal protocols
- Ongoing review of third-party security practices
11. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict processing in certain circumstances
- Request data portability
- Object to certain processing (e.g. analytics)
- Withdraw consent at any time
- Not be subject to automated decision-making producing legal effects
To exercise your rights, E-Mail: privacy@ila-connect.co.uk
We may require ID to verify your request.
12. Complaints
If you are unhappy with how we handle your data, please contact us at privacy@ila-connect.co.uk. We will respond promptly and take concerns seriously.
You also have the right to complain to the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/make-a-complaint
Phone: 0333 3001879
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website and will include the “last updated” date.
Where appropriate, we will notify you of material changes.
14. Version and Contact
This is the Privacy Policy of ILA-Connect Limited
E-Mail: privacy@ila-connect.co.uk
Website: www.ila-connect.co.uk
Phone: 0333 300 1879
Address: ILA-Connect Limited, 130 Aztec West, Park Avenue, Almondsbury, Bristol BS32 4UB