—
Privacy Policy
—
Last updated: 29 July 2026
MJ AML Services Ltd is committed to protecting your personal data and handling it lawfully, fairly and transparently. This policy explains what personal data I collect, why I collect it, what I do with it, and what rights you have. MJ AML Services Ltd is a sole-director consultancy and all work is carried out by Michael Jesuorobo personally.
1. Who I am
MJ AML Services Ltd is the data controller for the personal data described in this policy. Registered in England and Wales, company number 17332908. Registered office: 22 Alexander Grove, Burnley, England, BB12 6DJ. Email: michael@mjamlservices.co.uk. Telephone: 07445 868286. If you have any question about this policy or how your data is handled, contact me using these details.
2. The personal data I collect
If you contact me through this website, the contact form collects your name, email address, telephone number if you provide one, your firm or organisation if you provide it, and the content of your message, together with the date and time of submission.
If you contact me by email or telephone, I hold your name, email address, telephone number and the content of our correspondence.
If you become a client, I may hold your name, job title, business contact details and records of the work carried out for you.
Personal data contained in client records. Where I carry out AML file audits or client due diligence reviews, I will see and handle personal data relating to your clients and other individuals. This can include identity documents, addresses, dates of birth, source of funds and source of wealth information, beneficial ownership details, politically exposed person and sanctions screening results, and information relating to suspicions of money laundering or terrorist financing. Some of this is sensitive. Data about suspected criminal offences is subject to additional protection under UK data protection law and I handle it accordingly. Where I process this data on your instructions as my client, you remain the data controller and I act as your data processor. The specific terms are set out in the written agreement between us.
If you attend a training session, I hold your name, job role, employer, and a record of the training you attended and when, so that you and your firm have the attendance records your supervisor expects.
When you visit this website. This site is hosted by IONOS and uses IONOS SiteAnalytics, which collects information about how visitors use the site. The site also offers a third-party translation service. Both are controlled through the privacy settings on this site and neither loads unless you consent.
3. Why I collect it, and my lawful basis
Responding to your enquiry: legitimate interests, to reply to someone who has contacted me. Providing consultancy, audit, training or documentation services: performance of a contract with you, or steps taken at your request before entering a contract. Handling personal data within client files during an AML review: legal obligation, and substantial public interest in preventing or detecting unlawful acts. Keeping records of work carried out: legal obligation, and legitimate interests in maintaining a proper professional record. Training attendance records: performance of a contract, and legitimate interests. Website analytics and translation services: consent, which you can give or withdraw at any time. Invoicing and accounting: legal obligation.
Where I rely on legitimate interests, I have considered whether those interests are overridden by your rights and I am satisfied they are not. You can object to processing based on legitimate interests. See section 7.
4. Who I share it with
I do not sell your personal data and I do not share it for marketing purposes. I may share personal data with IONOS, who host this website and provide my email service, acting as my processor; my accountant, for invoicing and statutory accounts; my professional indemnity insurer or legal advisers, where necessary to establish, exercise or defend a legal claim; and law enforcement, HMRC, the National Crime Agency or a supervisory authority, where I am required or permitted by law to do so.
An important point on anti-money laundering reporting. If I form a suspicion of money laundering or terrorist financing in the course of my work, I may be required by law to report it, and I may be prohibited from telling you that I have done so. This is known as tipping off and it is a criminal offence to do it.
5. Where your data is held
Personal data is stored on systems provided by IONOS and on devices under my control within the United Kingdom. Where any provider transfers personal data outside the UK, I take steps to satisfy myself that appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
6. How long I keep it
Website enquiries that do not lead to an engagement: 12 months from the last contact. Client engagement records, including AML documentation and audit findings: 5 years from the end of the business relationship or the completion of the work, whichever is later. Training attendance records: 5 years. Invoices and accounting records: 6 years from the end of the relevant financial year. Internal records relating to a suspicion or a report: 5 years, or longer if required by law or requested by a law enforcement authority.
The five-year period reflects the record-keeping requirements under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. When a retention period ends, records are securely deleted or destroyed.
7. Your rights
Under UK data protection law you have the right to be informed about how your data is used, to access a copy of the personal data I hold about you, to have inaccurate or incomplete data corrected, to have your data erased in certain circumstances, to restrict processing in certain circumstances, to receive your data in a portable format, to object to processing based on legitimate interests or to direct marketing, and to withdraw consent at any time where processing is based on consent.
To exercise any of these, email michael@mjamlservices.co.uk. I will respond within one month and there is normally no charge.
Some of these rights are qualified. Where I hold personal data because anti-money laundering law requires me to, I may not be able to delete it on request, and I may not be able to confirm or provide access to information relating to a suspicion report. Where a restriction applies I will explain it to you unless the law prevents me from doing so.
8. Cookies and website analytics
This website uses cookies and similar technologies. Cookies that are strictly necessary for the site to work are set automatically. Everything else, including IONOS SiteAnalytics and the third-party translation service, loads only if you consent. You can review and change your choices at any time using the Privacy Settings link on this site. You can also block or delete cookies through your browser settings, though some parts of the site may not work properly if you do.
9. Automated decision-making
I do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects for you.
10. Complaints
If you are unhappy with how I have handled your personal data, please contact me first at michael@mjamlservices.co.uk so that I can try to put it right. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113. Website ico.org.uk.
11. Changes to this policy
I review this policy periodically and will update it when my processing changes or when the law requires. The date at the top shows when it was last updated.