Privacy Policy
Privacy Policy
# Privacy Policy
Last updated: September 2026
## Introduction
MLRO Support Ltd (“MLRO Support”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, subscribe to our services or engage us to provide professional support.
MLRO Support Ltd is registered in England and Wales under company number 05123645. Our registered office is:
Woodend
The Crescent
Scarborough
North Yorkshire
YO11 2PW
For data protection purposes, MLRO Support Ltd is the controller of personal information that we collect and determine how to use.
## Information we may collect
The personal information we collect will depend upon your relationship with us and the services you use.
It may include:
* your name;
* business or practice name;
* job title or professional role;
* email address;
* telephone number;
* postal or business address;
* details of services in which you are interested;
* correspondence and communications with us;
* information you provide when making an enquiry or requesting a call-back;
* information necessary to provide services to you and administer our relationship with you; and
* technical information relating to your use of our website, where applicable.
Where you engage us for specialist MLRO support, you may provide information relating to an AML matter or other professional issue. Such information may include personal information relating to other individuals.
We ask clients not to provide more personal information than is reasonably necessary for us to deal with the matter concerned.
## How we obtain personal information
Most personal information we process is provided directly by you, for example when you:
* complete a form on our website;
* contact us by telephone or email;
* request an initial consultation;
* subscribe to one of our services;
* ask us to provide a second opinion or other professional support; or
* correspond with us during the course of an assignment.
We may also receive information from another professional adviser or organisation where this is necessary for us to provide an agreed service.
## How we use your information
We may use personal information to:
* respond to enquiries;
* arrange initial discussions or consultations;
* provide quotations and agree terms of engagement;
* provide our MLRO support, second opinion, review and training services;
* manage subscriptions;
* communicate with clients about assignments and services;
* maintain appropriate business and accounting records;
* issue and process invoices;
* administer and improve our website and services;
* maintain the security of our systems;
* comply with legal, regulatory and professional obligations; and
* send information about MLRO Support or relevant AML developments where we are permitted to do so.
We will not use your personal information for purposes that are incompatible with those for which it was collected unless we have a lawful basis for doing so.
## Our lawful bases for processing
UK data protection law requires us to have a lawful basis for processing personal information.
Depending upon the circumstances, we may rely upon:
### Contract
We may process personal information where this is necessary to take steps at your request before entering into a contract or to provide services under an existing contract.
### Legitimate interests
We may process information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
These interests may include managing our business, responding to enquiries, maintaining client relationships, improving our services and protecting the security of our business and website.
### Legal obligation
We may process information where this is necessary to comply with a legal, regulatory, taxation, accounting or other obligation that applies to us.
### Consent
Where appropriate, we may ask for your consent to a particular use of your personal information. Where processing is based on consent, you may withdraw that consent at any time.
## Information supplied in connection with MLRO enquiries
The nature of our work means that clients may occasionally need to provide information about individuals other than themselves.
Where possible, information supplied to us for the purpose of obtaining an initial view should be anonymised or limited to what is reasonably necessary.
Where personal information about another individual is necessary for us to provide our services, we will handle that information confidentially and only for appropriate purposes connected with the work we have been asked to undertake, or as otherwise required by law.
## Sharing your personal information
We do not sell personal information.
We may share personal information with organisations that provide services to us where this is reasonably necessary for the operation of our business. These may include providers of:
* website hosting and maintenance;
* email and communications systems;
* secure data storage and IT services;
* accounting and payment services; and
* other professional or administrative services.
We may also disclose information where required by law, regulation, court order or other lawful authority.
Where third parties process personal information on our behalf, we take reasonable steps to ensure that appropriate data protection arrangements are in place.
## International transfers
Some technology or service providers may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with UK data protection law and that appropriate safeguards are used where required.
## How long we retain information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet any legal, regulatory, professional, accounting or reporting requirements.
The appropriate retention period will depend upon the nature of the information and our relationship with you.
Information relating to enquiries that do not result in an ongoing client relationship will normally be deleted when it is no longer reasonably required.
Records relating to clients and services provided may be retained for longer periods where necessary to maintain appropriate business records or comply with legal, regulatory or professional requirements.
## Keeping your information secure
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, disclosure, alteration or destruction.
Access to personal information is restricted to those who have a legitimate reason to use it.
No internet-based system can be guaranteed to be completely secure. You should therefore take appropriate care when sending particularly sensitive or confidential information electronically.
## Marketing communications
We may occasionally send clients and other contacts information about MLRO Support, AML developments, training, services or other matters that we believe may be relevant to them where we have a lawful basis for doing so.
Where consent is required, we will obtain it before sending such communications.
You can ask us to stop sending marketing communications at any time by using any unsubscribe facility provided or by contacting us.
## Cookies and website information
Our website may use cookies and similar technologies to operate correctly, remember preferences and, where applicable, help us understand how visitors use the site.
Further information is available in our Cookie Policy.
Where consent is required for non-essential cookies, those cookies will only be used in accordance with the choices you make through our cookie controls.
## Your data protection rights
Depending upon the circumstances and the lawful basis on which your information is processed, you may have rights including the right to:
* ask us for a copy of personal information we hold about you;
* ask us to correct inaccurate or incomplete information;
* ask us to delete your personal information in certain circumstances;
* ask us to restrict the processing of your information;
* object to certain types of processing;
* receive certain personal information in a portable format; and
* withdraw consent where we rely upon consent as the lawful basis for processing.
These rights are not absolute and exemptions may apply in particular circumstances.
If you wish to exercise any of these rights, please contact us using the details below.
## Your right to object
Where we process your personal information on the basis of our legitimate interests, you have the right to object to that processing in certain circumstances.
You also have the right to object at any time to the use of your personal information for direct marketing.
## Automated decision-making
MLRO Support does not use personal information to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.
## Complaints
If you have concerns about how we use your personal information, please contact us in the first instance so that we have an opportunity to investigate the matter.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Information Commissioner’s Office
Telephone: 0303 123 1113
Further information is available from the ICO website.
## Contacting us
Questions about this Privacy Policy or our handling of personal information should be addressed to:
MLRO Support Ltd
Woodend
The Crescent
Scarborough
North Yorkshire
YO11 2PW
Telephone: 01723 643111
Email: [support@mlrosupport.co.uk](mailto:support@mlrosupport.co.uk)
## Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, the way we process personal information or applicable legal requirements.
The current version will always be published on our website and the date of the latest revision will appear at the top of this page.