Privacy Policy
Last updated: 8 June 2026
This Privacy Policy explains how Expert Country Reports (“we”, “us”, or “our”) collects, uses, stores, and protects personal data when you visit expertcountryreports.co.uk or submit an enquiry or instruction through our website.
We handle personal data relating to asylum and immigration proceedings with particular care. We will not share your information with the Home Office, UK Visas and Immigration (UKVI), or any government body unless you expressly instruct us to do so or we are legally required.
1. Who we are
Expert Country Reports provides UK immigration and asylum country condition expert witness services. We are based in London, United Kingdom.
Data controller: Expert Country Reports
Email: contact@expertcountryreports.com
For any data protection enquiry, please contact us at the email address above.
2. Personal data we collect
Depending on how you use our website, we may collect:
- Contact form data: name, organisation (if provided), email address, telephone number (if provided), your role, enquiry type, country of interest, and message content.
- Instruction form data: instructing party details, firm or organisation, contact details, DX number (if provided), role, tribunal and proceeding information, country of origin, thematic areas, languages, service requirements, hearing and deadline dates, case brief, and related administrative information.
- Technical data: IP address, browser type, device information, and pages visited — collected automatically through server logs where necessary for security and site operation.
- Cookie preferences: your choice of essential-only or all cookies, stored locally in your browser.
Instruction and contact submissions may include special category data (for example, information relating to asylum claims, country of origin, or protected characteristics) because of the nature of our services. We process this data only as necessary to respond to your enquiry or fulfil an expert witness instruction.
3. How we use your data and lawful bases
We use personal data for the following purposes under UK GDPR:
- Responding to enquiries — lawful basis: legitimate interests (operating our business and responding to requests) or, where applicable, steps prior to entering a contract.
- Processing instructions — lawful basis: performance of a contract or steps prior to entering a contract.
- Lead notifications — we may send a secure notification containing basic contact details to our internal workflow systems so that enquiries are actioned promptly. Lawful basis: legitimate interests.
- Record keeping — storing submission records securely for case administration, quality assurance, and legal compliance. Lawful basis: legitimate interests and legal obligation where applicable.
- Website security and operation — lawful basis: legitimate interests.
- Analytics cookies (only if you accept them) — lawful basis: consent. You may withdraw consent at any time by clearing your browser storage or contacting us.
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights, particularly given the confidential nature of asylum and immigration work.
4. Confidentiality
All enquiries and instructions are treated in strict confidence. We do not disclose your personal data to the Home Office, UKVI, tribunals, or any third party except:
- where necessary to fulfil an instruction you have given us (for example, appointing an expert or preparing a report);
- where required by law, court order, or regulatory obligation; or
- with your explicit consent.
5. Who we share data with
We share personal data only with trusted service providers who assist us in operating our website and processing enquiries, including:
- Cloud storage providers — for secure storage of form submissions (for example, Google Workspace / Google Sheets).
- Automation and notification services — for internal lead handling and workflow notifications.
- Hosting providers — for website hosting and delivery.
These providers process data on our instructions and are required to protect it appropriately. We do not sell your personal data.
6. International transfers
Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place — such as UK International Data Transfer Agreements, adequacy regulations, or Standard Contractual Clauses — in accordance with UK data protection law.
7. Data retention
We retain personal data only for as long as necessary:
- General enquiries: typically up to 24 months from last contact, unless a longer period is needed.
- Instructions and case records: for the duration of the matter and thereafter as required for legal, regulatory, insurance, or professional obligations — generally up to 7 years after matter closure unless a longer period is required.
- Server logs: typically up to 90 days.
Data is securely deleted or anonymised when no longer required.
8. Cookies
Our website uses:
- Essential cookies / local storage — required for the site to function, including remembering your cookie preference.
- Analytics cookies (optional) — only set if you choose “Accept all” in our cookie banner. These help us understand how visitors use the site.
You can manage cookies through our cookie banner or your browser settings. Refusing non-essential cookies will not prevent you from submitting an enquiry or instruction.
9. Your rights
Under UK data protection law, you have the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request erasure in certain circumstances;
- restrict or object to processing in certain circumstances;
- request data portability where applicable; and
- withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at contact@expertcountryreports.com. We will respond within one month, subject to any lawful extension.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
10. Security
We implement appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and secure storage of form submissions. No method of transmission over the internet is completely secure; we encourage you to avoid sending highly sensitive information by unsecured email where possible and to use our secure instruction form instead.
11. Children
Our services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have received data relating to a child, please contact us and we will delete it promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will be revised when changes are made. We encourage you to review this page periodically.
13. Contact
For questions about this Privacy Policy or how we handle your data, contact: contact@expertcountryreports.com. See also our Terms of Use.