Who we are
This website is operated by Collegium of International Lawyers LP, registered in the United Kingdom under number LP023044, trading as KYC Record Review (“we”, “us”). We are the controller of personal data collected through this website and through the contact channels listed on it.
- Registered address: 167-169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom
- Office in Cyprus: 171 Arch. Makariou III Avenue, Vanezis Business Center, 4th floor, Limassol 3027, Cyprus
- Email: [email protected]
- WhatsApp: +357 96 447475
- Telegram: @interpollawyer
We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018 and, where it applies to you, the EU General Data Protection Regulation (together, “data protection law”).
Data we collect
Information you give us
- Enquiry form: your name, the contact detail you choose (email address, phone number or messenger name), matter type, issue category, the country of the bank or provider, and, if you choose to give them, the institution name, any deadline and a short description of the issue.
- Direct contact: anything you send us by email, WhatsApp or Telegram, and information you share during calls or consultations.
The form asks you not to send passports, bank statements, account numbers or case files. A short description and a way to reach you are enough for a first reply; documents can be exchanged later through a channel agreed with you.
Information collected automatically
- Enquiry reference: a random six-character code that links your visit to your enquiry, so we can recognise you if you contact us by more than one channel. The code is added to WhatsApp, Telegram and email messages you start from this website.
- Visit source: the page where you entered the website, the referring website and, if present in the page address, campaign parameters (UTM tags and advertising click identifiers).
- Technical data: IP address, browser type and time of request, processed in server logs and by our anti-spam checks to deliver and secure the website.
How we use data and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry and assessing whether and how we can help | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Providing legal services and managing the client relationship | Performance of a contract (Art. 6(1)(b)) |
| Conflict checks, identity verification, record keeping and other professional and regulatory duties | Legal obligation (Art. 6(1)(c)) |
| Filtering spam and abusive submissions, rate limiting and keeping the website secure | Legitimate interests (Art. 6(1)(f)) |
| Understanding which pages and campaigns lead to enquiries, using the enquiry reference and visit source | Legitimate interests (Art. 6(1)(f)) |
We do not use your data for automated decisions that have legal or similarly significant effects on you. Our anti-spam filter can hold back a submission that looks automated; if you believe your enquiry was not received, write to us by email.
Sensitive and criminal-offence data
Screening records and banking decisions can involve allegations of offences, sanctions, political exposure or other sensitive matters. Information you share may therefore include criminal-offence data or special categories of data, such as data revealing political opinions.
We process such information only where it is necessary for the establishment, exercise or defence of legal claims (Art. 9(2)(f) and the conditions in the Data Protection Act 2018) or as otherwise permitted by law, and we handle it under professional confidentiality. Please share only what is needed for a first assessment.
Who we share data with
We do not sell personal data. We share it only where necessary:
- Service providers acting on our behalf, such as website hosting and content delivery, email, our client relationship management system and the messaging service used to notify our team of new enquiries. They may use the data only to provide their service to us.
- Messaging platforms you choose: if you contact us through WhatsApp or Telegram, those platforms also process your messages under their own privacy terms.
- Organisations involved in your matter, such as a screening provider, a bank, an ombudsman, a regulator or a court, only on your instructions as part of our work for you.
- Professional advisers and authorities where the law requires it.
International transfers
Our team works from the United Kingdom and Cyprus, and some service providers process data in other countries, including the United States. Where personal data leaves the UK or the European Economic Area, we rely on an adequacy decision or regulations (such as the UK Extension to the EU–US Data Privacy Framework) or on standard contractual clauses approved for the UK and the EU, with additional safeguards where needed.
How long we keep data
- Enquiries that do not lead to an engagement: up to 12 months after our last contact, then deleted.
- Client files: for the period required by the professional and legal rules that apply to the matter.
- Submissions rejected as spam and security logs: only as long as needed to protect the website.
- Enquiry reference cookie: 90 days (see below).
Cookies and similar storage
This website does not use analytics or advertising cookies. It sets one first-party cookie and uses your browser’s session storage:
| Name | What it stores | Duration |
|---|---|---|
| cil_att (cookie) | The enquiry reference code, the date, the entry page, the referring website and any campaign parameters from the page address | 90 days |
| cil_utm, cil_landing (session storage) | Campaign parameters and entry page, used only if the cookie is unavailable | Until you close the tab |
You can delete or block cookies in your browser settings. The website and the enquiry form will continue to work; your enquiry will simply not be linked to your visit.
Security
The website uses an encrypted HTTPS connection. Access to enquiries is limited to the people and service providers who need it to deal with them. No method of transmission over the internet is completely secure, so please do not send identity documents or full account numbers through the form or open messaging channels.
Your rights
Under data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased where there is no overriding reason to keep it;
- restrict or object to processing, including processing based on legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent at any time, where we rely on consent.
Some rights are limited where data is protected by professional privilege or must be kept by law. To exercise your rights, email [email protected]. We reply within one month.
Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office in the United Kingdom (ico.org.uk) or, if you live or work in the European Union, to the data protection authority in your country, such as the Commissioner for Personal Data Protection in Cyprus.
Changes and contact
We may update this notice from time to time; the date at the top shows the latest version. Questions about this notice can be sent to [email protected].