top of page

Privacy Policy

Last updated: October 2026

This policy explains how Michelle Clement AML Consultancy Ltd collects, uses and protects personal data when you visit our website, contact us, use the resources on our site or engage us for advisory work. We have written it to be clear and specific, and we will answer any question about it directly.

Data Controller

Michelle Clement AML Consultancy Ltd

Company number

16626448 (registered in England and Wales)

Address

24–26 Regent Place, Birmingham, B1 3NJ

ICO registration

C1759502

Contact

contact@michelleclementamlconsultancy.co.uk

1. Who we are

Michelle Clement AML Consultancy Ltd is an independent consultancy advising law firms on anti-money laundering compliance. We are the controller of the personal data described in this policy, and our processing is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

During an engagement we may review client files and other records that contain personal data about a firm's clients, staff or counterparties. Our handling of that material is governed by the terms of the engagement letter, which sets out the confidentiality, security, and return or deletion arrangements that apply.

2. Information we collect

Information you provide to us

  • Contact details: your name, job title, firm, email address and telephone number.

  • Enquiries and correspondence: the content of emails, messages and consultation requests.

  • Engagement information: details about your firm that are relevant to the advisory work we carry out.

  • Forms and self-assessments: the information you enter when you complete the AML Foundations Check or another form on our website.

  • Purchases: your name, email address and billing details when you buy templates or other resources. Payments are handled by our payment provider, and we do not see or store full card details.

​

Information collected automatically

​

  • Technical information: such as your IP address, browser type and version, time zone setting, operating system and device type.

  • Usage information: how you navigate and use our website.

  • Cookies: our website platform uses cookies and similar technologies. Essential cookies are needed for the site to work. You can manage non-essential cookies through the cookie banner on our website and through your browser settings.

3. How we use your information

We use personal data to:

  • deliver our advisory services and manage our engagements;

  • respond to enquiries and requests;

  • provide the results of the AML Foundations Check and follow up where you have asked us to;

  • deliver templates and resources you have purchased;

  • send occasional updates about our services and regulatory developments, where you have agreed to receive them or where the law otherwise permits it. You can unsubscribe at any time;

  • keep business records and meet our legal, accounting and regulatory obligations; and

  • maintain and improve our website and services.

​

​

4. Legal basis for processing

We rely on the following legal bases under the UK GDPR:

  • Contract: where processing is needed to provide our services or to take steps at your request before entering into a contract.

  • Legal obligation: where we must process data to comply with the law.

  • Legitimate interests: to run and develop our business, provided those interests are not overridden by your rights and interests.

  • Consent: where you have given clear consent, for example to receive marketing emails. You can withdraw consent at any time.

5. Sharing your information

We do not sell personal data. We share it only where needed, with:

  • Service providers: who support our business, including our website platform and hosting provider, form-handling and email services, payment providers and IT support.

  • Professional advisers: such as our accountants, legal advisers and insurers, where this is necessary.

  • Authorities: regulators, law enforcement or other public bodies, where the law requires us to share information.

Our service providers may only use personal data on our instructions and are required to keep it secure.

6.  International transfers

Some of our service providers are based in, or store data in, countries outside the United Kingdom, including the United States. Where personal data is transferred outside the UK, we rely on safeguards recognised under UK data protection law, such as adequacy regulations or the International Data Transfer Agreement.

7. How long we keep your information

We keep personal data only for as long as we need it for the purposes described in this policy. As a guide:

  • enquiries that do not lead to an engagement are kept for up to two years;

  • engagement records are kept for six years after the engagement ends, reflecting limitation periods and our professional obligations; and

  • marketing preferences are kept until you unsubscribe.

When data is no longer needed, we securely delete or anonymise it.

8. Your rights

Under the UK GDPR you have the right to:

  • access the personal data we hold about you;

  • ask us to correct inaccurate or incomplete data;

  • ask us to delete your data, or to restrict how we use it;

  • object to processing based on our legitimate interests, and to any direct marketing;

  • receive data you have provided to us in a portable format; and

  • withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email contact@michelleclementamlconsultancy.co.uk. We will respond within one month, and there is normally no charge.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would welcome the chance to address your concern first, so please contact us before going to the ICO.

9. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Documents shared during an engagement should be sent through a secure file transfer platform or as password-protected files, as agreed at the start of the engagement. No method of transmission over the internet is completely secure, and we can provide further detail on our security arrangements to clients on request.

10. Links to other websites

Our website contains links to external sites, including podcast platforms and publications. We are not responsible for the content or privacy practices of those sites, and we recommend reading their privacy policies.

11.  Changes to this policy

We may update this policy from time to time. The current version will always be available on our website, with the date it was last updated shown at the top.

12. Contact us

For any question about this policy or about how we handle personal data, please email contact@michelleclementamlconsultancy.co.uk or write to us at the address shown above.

bottom of page