ALL IN ORDER – PRIVACY POLICY

  1. Privacy Policy

1.1 Who We Are

All In Order
Based in Cardiff, South Wales, United Kingdom
Email: AIO.advice@outlook.com

All In Order provides legal support services, consultancy, document preparation, and related administrative services to individuals, families, and small businesses.

For the purposes of UK data protection law, All In Order is the Data Controller.

1.2 Personal Data We Collect

We may collect and process the following personal data:

  • Name
  • Email address
  • Telephone number
  • Postal address
  • Payment and invoicing information
  • Case-related information and documents
  • Correspondence (emails, messages, letters)
  • Website usage data (where applicable)

We may also process special category data, including information relating to health, disability, criminal allegations, court proceedings, or children, where this is necessary to provide our services or where permitted by law.

1.3 How We Collect Your Data

We collect personal data when you:

  • Contact us via our website, email, telephone, or messaging services
  • Instruct us to provide services
  • Submit documents or information
  • Make payments for services

1.4 Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Contract – where processing is necessary to provide requested services
  • Legal obligation – including accounting, tax, and regulatory requirements
  • Legitimate interests – to manage and operate our business effectively
  • Consent – where required and clearly provided

Special category data is processed where necessary for the establishment, exercise, or defence of legal claims, or where explicit consent has been given.

1.5 How We Use Your Data

Your personal data is used to:

  • Provide legal support and consultancy services
  • Communicate with you
  • Prepare documents and case materials
  • Process payments and issue invoices
  • Maintain accurate business records
  • Comply with legal and regulatory obligations

1.6 Data Sharing

We do not sell personal data.

We may share data only where necessary with:

  • Payment processors
  • Website hosting and IT service providers
  • Professional advisers (where required)

All third parties are required to process data securely and in accordance with applicable data protection laws.

1.7 Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected. Further details are set out in our Data Retention Policy below.

1.8 Your Data Protection Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate or incomplete data
  • Request erasure of personal data (where applicable)
  • Object to processing
  • Request restriction of processing
  • Request data portability

Requests can be made using the contact details above. We will respond within one month, in accordance with UK GDPR.

1.9 Data Security

All In Order takes appropriate technical and organisational measures to protect personal data, including:

  • Password-protected devices
  • Secure storage systems
  • Restricted access controls

1.10 Complaints

If you are dissatisfied with how your data is handled, you may raise a complaint with the Information Commissioner’s Office (ICO) at:
www.ico.org.uk

  1. Data Retention Policy

All In Order retains personal data for the following periods:

  • Client case files: 6 years after case closure
  • Financial records and invoices: 6 years
  • Enquiries that do not become clients: 12 months
  • Marketing communications: Until consent is withdrawn

Data is securely deleted or anonymised once retention periods expire.

  1. Data Handling & Security Policy (Internal)

All In Order is committed to protecting personal data.

Security measures include:

  • Password-protected devices
  • Encrypted secure cloud storage
  • Restricted access to client information
  • No sharing of login credentials
  • Secure disposal of physical and digital data

Any personal data breach will be assessed promptly and reported to the ICO where legally required.

  1. Subject Access Request (SAR) Procedure

Individuals may request access to their personal data by contacting All In Order.

Procedure:

  1. Identity verification
  2. Identification of relevant data
  3. Response within one month
  4. Data provided free of charge unless requests are excessive or repetitive

All SARs are documented.

  1. Website Form Privacy Notice (Short Version)

“By submitting this form, you agree that All In Order may use your information to respond to your enquiry and provide services. For full details, please see our Privacy Policy.”

  1. Cookie Notice (Basic)

“Our website uses essential cookies to ensure it functions correctly. Analytical cookies may be used to improve user experience. You can manage cookie preferences through your browser settings.”

  1. Record of Processing Activities (Summary)
  • Data Controller: All In Order
  • Purpose: Legal support, consultancy, and administrative services
  • Categories of Data: Contact details, case information, financial data
  • Retention: In line with the Data Retention Policy
  • Security Measures: Encrypted storage and access controls
  1. ICO Registration

All In Order is required to register with the Information Commissioner’s Office (ICO) and pay the applicable data protection fee.

  1. COOKIE NOTICE

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to improve user experience.

How We Use Cookies

All In Order uses cookies to:

  • Ensure the website functions correctly (essential cookies)
  • Understand how visitors use the website, where analytical cookies are enabled
  • Improve the performance and usability of our website

Types of Cookies We Use

  • Essential Cookies
    These cookies are necessary for the website to operate properly and cannot be switched off.
  • Analytical Cookies (where used)
    These cookies help us understand how visitors interact with the website, allowing us to improve the site. These cookies are only used with your consent.

Managing Cookies

You can control and manage cookies in the following ways:

  • Through your browser settings
  • By using any cookie preference tools provided on our website

You can choose to block or delete cookies, although this may affect how the website functions.

Third-Party Cookies

Some cookies may be set by third-party services used on our website (for example, analytics or embedded content). These third parties are responsible for their own cookies and privacy practices.

Changes to This Cookie Notice

We may update this Cookie Notice from time to time. The version published on our website will apply.

Further Information

For more information about how we handle personal data, please see our Privacy Policy.

All In Order, Tramshed, Pendyris St, Cardiff, CF11 6BH