Privacy Notice
01About this notice
This notice explains how I, Daniel McAfee, collect, use and protect your personal data when you book and use my independent legal advice service. I process personal data under the UK GDPR and the Data Protection Act 2018.
02Who is responsible for your data
I am the controller of your personal data: Daniel McAfee.
Contact: hello@danielmcafee.co.uk or daniel@ila-hub.com · Whitfield Business Hub, 184-200 Pensby Road, Heswall, Wirral, United Kingdom, CH60 7RJ.
ICO registration number: ZC146113.
03What I collect
From you:
From other people. Someone who arranges or pays for your appointment, your broker, your conveyancer or the lender's solicitor may send me information about you or your matter. Someone else arranging or paying for your appointment does not entitle them to your identity documents, private advice or outputs. Each advised person has a separate matter and private access. Any permitted sharing is limited to its approved purpose.
04Why I use it and on what legal basis
Sensitive information. If you tell me about your health, capacity or circumstances that affect your decision, I use it only to give the advice and to keep a proper record of it. My condition for doing so is that it is necessary for establishing, exercising or defending legal claims (Article 9(2)(f) UK GDPR). Information about criminal offences is handled under the equivalent legal-claims condition in Schedule 1 of the Data Protection Act 2018.
AI assistance. I use an AI tool to help check uploaded documents against the lender's requirements before the call and to draft the record of advice from my notes and the transcript. I review and approve every output myself; no decision about you is made automatically.
05Who I share it with
The recipient you instruct. The certificate goes to you, or to the lender or lender's solicitor if you ask me to send it. Payment by someone else is not authority for me to share your advice.
Service providers acting on my instructions under written terms:
Regulators, insurers, professional advisers and authorities, where I am required to or it is necessary to deal with a complaint, claim or legal duty.
Payment disputes. If you dispute a payment, I share only the evidence needed to respond, after checking it for confidentiality and privilege.
I do not sell your data.
International transfers. Some providers above store or access data outside the UK, mainly in the EU and the United States. Where they do, the transfer relies on the safeguard that applies to that provider, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
06How long I keep it
I may keep records longer if there is a complaint, claim or legal hold. Deleted data leaves backups as they cycle, within 90 days.
07Your rights
You can ask for access to your data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests or withdraw consent. These rights have limits: for example, I may need to keep the advice file to meet legal and professional duties, and I may need to redact material about other people or that is legally privileged, including from transcripts.
Email hello@danielmcafee.co.uk or daniel@ila-hub.com. I will need to confirm your identity. I respond within one month, which can be extended by two further months for complex or numerous requests; I will tell you if so.
08Complaints to the ICO
You can complain to the Information Commissioner's Office: ico.org.uk · 0303 123 1113. I would appreciate the chance to deal with your concern first.
09Security
I use encrypted storage, access controls, secure upload links and restricted accounts.
If a breach is likely to result in a risk to your rights and freedoms, I report it to the ICO within 72 hours of becoming aware of it. If it is likely to result in a high risk to you, I tell you without undue delay.
10Cookies and similar technologies
The website uses technologies needed for security and the service you request. Advertising technologies are used only with the required consent. The explains purposes, providers, durations and how to change your choice.
11Marketing
Marketing consent is separate from booking and service messages. You will receive messages about your booking and matter whether or not you agree to marketing. You can withdraw marketing consent at any time.
12Children
The service is only for people aged 18 or over.
13Changes
I may update this notice. The current version and its date are on the website.