Privacy Policy

1. Who we are

​

​Po Umu Ltd ("Переезд по Уму", "we", "us") is a company registered in England and Wales, company number 12392198. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

We are authorised to provide immigration advice and services by the Immigration Advice Authority (IAA reg. no. F202000160) and registered with the UK data protection regulator under reference ZB239381.

We are the controller of the personal data described in this policy. For any data protection question or request, email pora@poumu.co.uk.

​​

2. Who this policy covers

​

• visitors to www.poumu.co.uk;

• people who contact us through the website form, by email, WhatsApp or Telegram;

• our consultation clients, including representatives of businesses we advise.

​

3. What we collect, why, and our lawful basis

​

Website visitors

• Technical data (IP address, browser and device information, pages viewed), processed by our website host and its technical providers to deliver and protect the website. Lawful basis: our legitimate interest in running a secure website.

• Analytics data, collected through cookies only if you accept analytics cookies. We use it to understand which pages are useful. Lawful basis: your consent.

Enquiries

• Your name, email address, the information you give us about your situation, and your preferred days and times for a call.

• We use this to reply to you and arrange an introductory call. Lawful basis: steps taken at your request before entering into a contract.

Clients

• Identity and contact details, immigration history, documents and other information provided for your consultation, and invoicing and payment records.

• We use this to give advice, issue invoices and keep the records we are required to keep. Lawful basis: performance of our contract with you, and compliance with legal and regulatory obligations (IAA Code of Standards, tax and accounting rules).

• Sometimes we receive your data from someone else, for example a family member included in your matter, your employer or sponsor, or correspondence from the Home Office. We handle it as described in this policy.

Sensitive information

• Immigration advice may require information about your health, criminal record or other sensitive matters. We process it only where it is relevant to your matter and necessary to give you advice or to establish or exercise your legal rights (UK GDPR Article 9(2)(f); for criminal offence data, Data Protection Act 2018, Schedule 1, paragraph 33).

• Please do not include sensitive details in the website form. If we need them, we will ask for them separately.

Do you have to give us your data?

No. However, we cannot reply to an enquiry without your contact details, and we cannot advise you without the information relevant to your matter.

​​

4. Who we share data with

​

We use service providers that process data on our behalf for:

• website hosting and the website form;

• email, calendar, video calls and file storage;

• client record management;

• website analytics;

• invoicing and payments. Payment providers may also use payment data for their own purposes, such as fraud prevention and security, under their own privacy policies.

If you contact us through WhatsApp or Telegram, those services process your messages under their own privacy terms.

For clients, we may also share data with:

• the Home Office, endorsing bodies, sponsors or other parties, only on your instructions;

• partners or subcontractors, only with your prior agreement;

• our accountant, for invoicing records;

• the Immigration Advice Authority, where required for regulatory purposes;

• public authorities, where the law requires it.

We do not sell personal data and do not use it for advertising.

​

5. International transfers

​

Some of our service providers process data outside the UK. Where they do, the transfer relies on UK adequacy regulations or on safeguards approved under UK data protection law, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of these safeguards at pora@poumu.co.uk.​

​

6. How long we keep data​

​

• Enquiries that do not lead to a consultation: 12 months after our last contact.

• Client records, including invoices: 6 years after our last contact, as required by the IAA Code of Standards. After that they are securely deleted.

• Website analytics: event data for 14 months; user-level data for 14 months after your last visit.

​

7. Security

​​

We use access controls, two-factor authentication and encrypted connections to protect personal data, and we limit access to those who need it.

​

8. Your rights

​

You have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable format, and withdraw your consent at any time where we rely on consent. Some of these rights are subject to conditions and exemptions.

Right to object: where we rely on our legitimate interests, you can object to the processing of your data at any time.

To exercise any of these rights, email pora@poumu.co.uk. We will respond within one month. For complex requests, the law allows us to extend this by up to two further months, and we will tell you if we do.

​

9. Complaints

​

If you are unhappy with how we handle your data, please tell us first, by email to pora@poumu.co.uk or by post to our registered office. We will acknowledge your complaint within 30 days and respond without undue delay.

You can also complain to the UK data protection regulator, the Information Commission (formerly the Information Commissioner's Office): ico.org.uk.

For complaints about our immigration advice or services, please contact us at pora@poumu.co.uk. You can also complain to the Immigration Advice Authority at any time: www.gov.uk/find-an-immigration-adviser/complain-about-an-adviser.

​

10. Cookies

​

We use a small number of cookies.

• Essential cookies keep the website secure, help pages load and remember your cookie choice. They are always on. The cookie that stores your choice lasts 12 months; the others expire when you close your browser or shortly after.

• Analytics cookies, including Google Analytics, help us understand how the website is used. They are set only if you accept them and last up to 13 months.

You can change your choice at any time through "Cookie Settings" at the bottom of every page, and you can delete cookies in your browser settings.

​

11. Children

​

Our website is not aimed at children. We process a child's data only when a parent or guardian provides it as part of a client's matter.

​

12. Automated decisions

​

We do not make decisions about you based solely on automated processing.

​

13. Changes to this policy

​

We will update this policy when our practices change. The date at the top shows the latest version.