Last updated: August 2026
moon-ibex complies fully with the UK General Data Protection Regulation and the Data Protection Act 2018. As a legal consultancy handling sensitive personal information, we take data protection responsibilities seriously and have implemented robust processes to safeguard your rights.
moon-ibex is the data controller for personal information processed through our services. We are registered with the Information Commissioner's Office and adhere to all applicable data protection regulations.
Contact details:
moon-ibex Legal Consultancy
14 Castle Street
Liverpool, L2 0NE
United Kingdom
contact@moon-ibex.com
We process personal data only when we have a lawful basis to do so:
Due to the nature of benefits and pension consultation, we often process special category data including health information and details about disabilities. We process this data only when:
We apply enhanced security measures to protect special category data and limit access to authorised personnel only.
You can request a copy of the personal data we hold about you. We will provide this within one month of your request, free of charge in most cases.
If information we hold is inaccurate or incomplete, you can request that we correct or complete it.
In certain circumstances, you can request deletion of your personal data. However, this right is limited where we have legal obligations to retain records, particularly under professional regulations governing solicitors.
You can request that we limit how we use your data while we investigate concerns you have raised about accuracy or processing legitimacy.
You can request that we transfer data you provided to us to another service provider in a structured, commonly used format.
You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
To exercise any of your data protection rights, contact us at contact@moon-ibex.com or write to our office address. We will respond to verified requests within one month. In complex cases, we may extend this by a further two months and will inform you if this becomes necessary.
We may need to verify your identity before processing requests to ensure we disclose information only to authorised individuals.
We protect your data through:
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office within 72 hours of becoming aware of the breach, as required by GDPR.
When we engage third parties to process data on our behalf, we ensure they provide sufficient guarantees of GDPR compliance. We use written contracts that specify data protection obligations, restrict processing to our documented instructions, and require appropriate security measures.
We do not routinely transfer personal data outside the United Kingdom. If international transfers become necessary for specific cases, we will implement appropriate safeguards such as standard contractual clauses approved by the ICO.
Our services are not directed at individuals under 18. When we provide consultation related to benefits for minors, we obtain consent from parents or legal guardians and process data only to the extent necessary for the service.
If you believe we have not complied with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
We encourage you to contact us first so we can address your concerns directly.
We review this GDPR compliance statement regularly and update it as necessary to reflect changes in our practices or legal requirements. Significant changes will be communicated to active clients via email.