LEGAL

Privacy Notice

Version 2.0Effective 30 October 2026

01About this notice

1.1

This notice explains how I, Daniel McAfee, collect, use and protect your personal data when you book and use my independent legal advice service. I process personal data under the UK GDPR and the Data Protection Act 2018.

02Who is responsible for your data

2.1

I am the controller of your personal data: Daniel McAfee.

2.2

Contact: hello@danielmcafee.co.uk or daniel@ila-hub.com · Whitfield Business Hub, 184-200 Pensby Road, Heswall, Wirral, United Kingdom, CH60 7RJ.

2.3

ICO registration number: ZC146113.

03What I collect

3.1

From you:

Identityname, date of birth, address, photo ID and proof of address.
Contactemail, mobile and, if you message me on WhatsApp, your WhatsApp number.
Matterthe document you are asked to sign, lender, broker and conveyancer documents, company details where you sign as a director, and your answers to the booking questions.
Account and portalyour secure access link, uploads and when you accessed them.
Appointmentbooked time, changes and attendance.
Paymentamount, date and Stripe reference. Stripe processes card details; I do not see or store them.
Callmy notes and a transcript of the call.
Outputsthe certificate, the record of advice and my file notes.
Postingyour delivery address and tracking details, where I post an original.
Messagesemails and WhatsApp messages about your matter.
3.2

From other people. Someone who arranges or pays for your appointment, your broker, your conveyancer or the lender's solicitor may send me information about you or your matter. Someone else arranging or paying for your appointment does not entitle them to your identity documents, private advice or outputs. Each advised person has a separate matter and private access. Any permitted sharing is limited to its approved purpose.

04Why I use it and on what legal basis

PurposeLawful basis (Article 6 UK GDPR)
Booking, document review, the call, issuing outputs, posting an originalContract
Identity checks, professional record-keeping, tax and accounting recordsLegal obligation
Call notes and transcript, checking documents before the callContract and legitimate interests (an accurate advice record)
Responding to complaints, claims, regulator or insurer enquiriesLegal obligation and legitimate interests
Payment processing and payment disputesContract and legitimate interests
Security of the website and systemsLegitimate interests
Asking you for a review after your matter is completeLegitimate interests (you can opt out at any time)
Marketing emails, advertising cookiesConsent
4.1

Sensitive information. If you tell me about your health, capacity or circumstances that affect your decision, I use it only to give the advice and to keep a proper record of it. My condition for doing so is that it is necessary for establishing, exercising or defending legal claims (Article 9(2)(f) UK GDPR). Information about criminal offences is handled under the equivalent legal-claims condition in Schedule 1 of the Data Protection Act 2018.

4.2

AI assistance. I use an AI tool to help check uploaded documents against the lender's requirements before the call and to draft the record of advice from my notes and the transcript. I review and approve every output myself; no decision about you is made automatically.

05Who I share it with

5.1

The recipient you instruct. The certificate goes to you, or to the lender or lender's solicitor if you ask me to send it. Payment by someone else is not authority for me to share your advice.

5.2

Service providers acting on my instructions under written terms:

ProviderWhat for
StripePayments and refunds
CalendlyAppointment booking
Google (Workspace, Meet)Email, video calls, documents
SupabaseCase database and document storage
LovableWebsite and portal hosting
CloudflareDomain, security and site delivery
GranolaCall transcription
AnthropicAI-assisted document checks and drafting (§4.2)
WhatsApp (Meta), and Twilio when introducedMessages about your matter
Royal MailPosting an original certificate
Google AdsAdvertising measurement, only with your cookie consent
5.3

Regulators, insurers, professional advisers and authorities, where I am required to or it is necessary to deal with a complaint, claim or legal duty.

5.4

Payment disputes. If you dispute a payment, I share only the evidence needed to respond, after checking it for confidentiality and privilege.

5.5

I do not sell your data.

5.6

International transfers. Some providers above store or access data outside the UK, mainly in the EU and the United States. Where they do, the transfer relies on the safeguard that applies to that provider, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

06How long I keep it

RecordKept forStarts from
Advice file (documents, notes, transcript, outputs, correspondence)6 yearsMatter closed
Identity and address evidence6 yearsMatter closed
Payment and refund records6 yearsEnd of the tax year of payment
Matters cancelled, declined or with no certificate, where review began6 yearsMatter closed
Booking started but not paid, with no review12 monthsLast activity
Website and system logs12 monthsCreation
Marketing preferencesUntil you withdraw consent, plus a suppression recordWithdrawal
6.1

I may keep records longer if there is a complaint, claim or legal hold. Deleted data leaves backups as they cycle, within 90 days.

07Your rights

7.1

You can ask for access to your data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests or withdraw consent. These rights have limits: for example, I may need to keep the advice file to meet legal and professional duties, and I may need to redact material about other people or that is legally privileged, including from transcripts.

7.2

Email hello@danielmcafee.co.uk or daniel@ila-hub.com. I will need to confirm your identity. I respond within one month, which can be extended by two further months for complex or numerous requests; I will tell you if so.

08Complaints to the ICO

8.1

You can complain to the Information Commissioner's Office: ico.org.uk · 0303 123 1113. I would appreciate the chance to deal with your concern first.

09Security

9.1

I use encrypted storage, access controls, secure upload links and restricted accounts.

9.2

If a breach is likely to result in a risk to your rights and freedoms, I report it to the ICO within 72 hours of becoming aware of it. If it is likely to result in a high risk to you, I tell you without undue delay.

10Cookies and similar technologies

10.1

The website uses technologies needed for security and the service you request. Advertising technologies are used only with the required consent. The explains purposes, providers, durations and how to change your choice.

11Marketing

11.1

Marketing consent is separate from booking and service messages. You will receive messages about your booking and matter whether or not you agree to marketing. You can withdraw marketing consent at any time.

12Children

12.1

The service is only for people aged 18 or over.

13Changes

13.1

I may update this notice. The current version and its date are on the website.

Version 2.0 · Effective 30 October 2026.