At Lawli, we take your privacy and your trust in us very seriously. This privacy policy informs you about how we collect, use and disclose your personal information. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
1. About This Privacy Policy
This privacy policy applies when you visit or use our websites, apps and other services, including events, that refer or link to this privacy policy (each, a “Service”). This privacy policy may be supplemented by additional privacy statements, terms or notices provided to you.
Lawli owns or administers the Service, as identified therein, is the primary controller of your personal information provide to, or collected by or for, the Service.
We will indicate within the registration processes of our products and services and other registration forms what types of personal information are required and those that are requested. You may choose not to submit the requested information, but that may limit or prohibit the services that Lawli is able to provide to you.
For information about the handling of personal information contained in our service content, please read our Fair Processing Statement.
2. Controller
Lawli Ltd. is the controller and responsible for your personal data (collectively referred to as “Company”, “we”, “us” or “our” in this privacy policy).
We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests, please contact the data privacy manager using the details set out below.
3. Information We Collect
We collect information about you in three ways: directly from your input, from third-party sources, and through automated technologies.
3.1 Data You Provide to Us
The types of personal information that we collect directly from you depends on how you interact with us and the Service, which may include:
Contact details, such as your name, email address, postal address, social media handle, and phone number;
Account login credentials, such as usernames and passwords, password hints and similar security information;
Other account registration and profile information, such as job title, educational and professional background and qualifications, and photo;
Payment information, such as a credit or debit card number, bank account and PayPal information;
Comments, feedback and other information you provide to us, including search, edit and output query data, and questions or information you send to us and customer support; and/or
Interests and communication preferences, including preferred language.
3.2 Data from Your Organisation
We may obtain personal information about you from the organisation with which you are employed or affiliated in order to activate and manage your access to and use of the organisation’s subscription to the Service, including:
Contact details, such as your name and organisational email address, postal address, and phone number;
Other account registration information such as job title; and/or organisational user ID.
3.3 Data from Other Sources
We also may obtain contact details and other information about you from our affiliates and from other third parties, including:
Social networks when you grant permission to the Service to access your data on one or more networks;
Service providers that help us determine a location in order to customise certain products to your location;
Businesses with which we offer co-branded services or engage in joint marketing activities; and/or
Publicly-available sources and data suppliers from which we obtain data to validate or supplement the information we hold.
3.4 Internal Third Parties
Other companies in the Lawli Group acting as joint controllers or processors and who provide IT and system administration services and undertake leadership reporting.
3.5 External Third Parties
Service providers acting as processors who provide IT and system administration services.
Professional advisers acting as processors or joint controllers including lawyers, bankers, accountants, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom and other locations in the World where Lawli has operations, who require reporting of processing activities in certain circumstances.
3.6 Data from Service Use, including Cookies
The Service may automatically collect information about how you and your device interact with the Service, including:
Computer, device and connection information, such as IP address, browser type and version, operating system and other software installed on your device, mobile platform and unique device identifier and other technical identifiers, error reports and performance data;
Usage data, such as the features you used, the settings you selected, your URL click stream data, including date and time stamp and referring and exit pages, search terms you used, and pages you visited or searched for on the Service;
For educational Services, the course modules and test questions you view, answer or complete; and/or
For location-aware Services, the region, city or town where your device is located in order to provide you with more relevant content for where you are in the world.
We collect this data through our servers and the use of cookies and other technologies. Cookies are small text files that can be read by a web server in the domain that put the cookie on your hard drive. We may use cookies and other technologies to store your preferences and settings, help you with signing in, provide targeted ads and analyse site operations. You can control cookies through your browser’s settings and other tools. However, if you block certain cookies, you may not be able to register, login, or access certain parts or make full use of the Service. For more details, see the cookie policy of the Service.
4. How We Use Your information
Depending on how you interact with us and the Service, we use your personal information. to:
Provide, activate and manage your access to and use of the Service;
Process and fulfil a request, order, download, subscription or other transaction;
Provide technical, product and other support and to help keep the Service working, safe and secure;
Enhance and improve the Service and our other products, events, and services and to develop new products, services and benefits;
Offer you customised content and other personalisation to make the Service more relevant to your interests and geography;
Respond to your requests, inquiries, comments and concerns;
Notify you about changes, updates and other announcements related to the Service and our other products and services;
Deliver targeted advertisements, promotional messages, notices and other information related to the Service and your interests;
Provide you with promotional messages and other information about products, events and services of ours, our affiliates and third parties such as sponsors;
Invite you to participate in user testing and surveys as well as drawings, sweepstakes, competitions and similar promotions;
Identify usage trends and develop data analysis, including for purposes of research, audit, reporting and other business operations, including determining the effectiveness of our promotional campaigns and evaluating our business performance, or in other ways pursuant to a customer agreement; and/or
Comply with our legal obligations, resolve disputes, and enforce our agreements.
If you are an administrator of an organisation with a subscription to the Service, we will use your details to communicate with you about your organisation’s subscription and related services. If you supply us contact information of your colleagues, we may contact those individuals with communications about the Service that may include reference to you.
5. Sharing of Your Information
5.1 Your Organisation
If you access the Service through a subscription administered by your organisation, your personal information and certain usage data gathered through the Service may be accessed by or shared with the administrators authorised by your organisation for the purposes of usage analysis, subscription management and compliance, training course progress, performance and remediation, cost attribution and departmental budgeting.
5.2 Application Licensor
If you access a third-party application on the Service through a license agreement with the licensor of that application, personal information relevant that third-party application may be shared with the licensor so that it can provide you access to the application, subject to the terms of its license agreement and privacy policy.
5.3 Our Group Companies and Service Providers
Dependent upon the Services provided, we share information with:
Our affiliates, trading names and divisions within the Lawli group of companies worldwide that provide technology, customer service and other shared services functions; and/or
Our service providers, suppliers, agents and representatives, including but not limited to, payment processors, customer support, email service providers, event venues and service providers, IT service providers, marketing service providers, research providers, mailing houses and shipping agents;
to process the information as necessary to provide the Service, complete a transaction or fulfil your request or otherwise on our behalf based on our instructions and in compliance with this privacy policy and any other appropriate confidentiality and security measures.
5.4 Your Choices
We may share your personal information with our affiliates and with sponsors, joint venture entities and other third parties, including entities for which we are acting as an agent, licensee, application host or publisher, that wish to send you information about their products and services that may be of interest to you, as determined by your choices in managing your communications preferences and other settings.
The Service may let you post and share personal information, comments, materials and other content. Any such contributions that you disclose publicly may be collected and used by others. Please be careful when disclosing personal information in these public areas.
5.5 For Legal Reasons
We also will disclose your personal information if we have a good faith belief that such disclosure is necessary to:
meet any applicable law, regulation, legal process or other legal obligation;
detect, investigate and help prevent security, fraud or technical issues; and/or
protect the rights, property or safety of Lawli, our users, employees or others; and
as part of a corporate transaction, such as a transfer of assets to or an acquisition by or merger with another company.
6. Grounds for Processing
When we collect or otherwise process any personal information within the scope of European data protection laws, we do so:
where necessary to provide the Service, fulfil a transaction or otherwise perform a contract with you or at your request prior to entering into a contract;
where necessary for our compliance with applicable law or other legal obligation;
where necessary for the performance of a task carried out in the public interest;
where necessary to enable our customers to comply with their legal obligations;
where applicable, with your consent; and/or
where necessary to operate our business, protect the security of our systems, customers and users, detect or prevent fraud, or fulfil our other legitimate interests as described in sections 2-4 above, except where our interests are overridden by your privacy rights.
Where we rely on your consent to process personal information, you have the right to withdraw your consent at any time, and where we rely on legitimate interests, you may have the right to object to our processing.
7. Data Retention
We retain your personal information for as long as necessary to provide the Service and fulfil the transactions you have requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements. If you access the Service through a subscription administered or sponsored by your organisation, we retain your organisational contact details after the termination of your organisation’s subscription to continue to communicate with you.
8. Locations of Processing
Your personal information may be stored and processed in your region or another country where Lawli, its affiliates and their service providers maintain servers and facilities, including but not limited to the United Kingdom and the United States. We take steps, including through contracts, intended to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.
Where personal information is transferred from the European Economic Area (“EEA”) or Switzerland to a country that has not received an adequacy decision by the European Commission, we rely on appropriate safeguards, such as the European Commission-approved Standard Contractual Clauses and the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks, to transfer the data.
Certain U.S. entities within the Lawli group of companies may have certified certain of their services to the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce. Please view these entities’ Privacy Shield Notice here. To learn more about the Privacy Shield program, and to view these entities’ certification, please visit www.privacyshield.gov.
9. Data Security
We implement technical and organisational measures to seek to ensure a level of security appropriate to the risk to the personal information we process. These measures are aimed at ensuring the integrity, confidentiality, and availability of personal information.
10. Children’s Privacy
We do not knowingly collect information from children under the age of 13 or target the Service to children under 13.
11. Your Communications Preferences
You can customise and manage your communications preferences and other settings when you register with the Service, by updating your account features and preferences, by using the “opt-out” mechanisms such as “unsubscribe” or other means provided within the communications that you receive, or by contacting us. We reserve the right to notify you of changes or updates to the Service whenever necessary.
12. Accessing and Updating Your Information
12.1 Your Account
The Service may allow registered users to directly access and review their account information and make corrections or updates upon login at any time. Keeping such information up to date is the responsibility of the user. Registered users may also close their account directly through the Service or by contacting the Service’s customer support.
12.2 Your Rights
You have the right under European and certain other privacy and data protection laws, as may be applicable, to request free of charge:
access to your personal information;
rectification or erasure of your personal information;
restriction of our processing of your personal information, or to object to our processing; and
portability of your personal information.
If you wish to exercise these rights, please submit your request in writing via our Privacy centre. We will respond to your request consistent with applicable laws. To protect your privacy and security, we may require you to verify your identity.
13. Changes
We will update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. If we make any material changes, we will provide notice through the Service or by other means.
14. Contact
The data protection representative for our businesses that are processing personal data within the scope of European data protection laws and located outside of the EEA and Switzerland is Lawli Ltd.
If you have any questions, comments, complaints or requests regarding this privacy policy or our processing of your information, please contact us via our Privacy centre.
If you have any questions about this privacy policy our processing of your information, please contact our data privacy manager in the following way:
Email address: info@lawli.io
You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
You may also lodge a complaint with the data protection authority in the applicable jurisdiction.
15. Supplementary Notices
15.1 Authors / Contributors
Where we contract with you to produce content for any of our services, such as to write books, legal analysis, reviews, legal documents edits, guidance or legal opinion for dissemination to our subscribers, we will process some personal information about you. Such information includes:
name, organisation, and contact details;
professional experience, role, practice area, affiliations and subject expertise;
professional biography or profile produced or approved by you, including your image, likeness or voice, which may be published within our services and made available to our subscribers alongside any content produced by you for Lawli;
financial information in order to facilitate payments for works produced;
editorial and reviewer commentary and feedback as part of peer review; and
administration information such as author work progress updates.
The above information is processed in order to facilitate the publication of the work and to administer, manage and fulfil our contract with you.
You may choose not to be contacted by Lawli to produce content for us by contacting us via the communications that you receive from our content development teams, or via the contact details provided within this policy.
Please refer to the main section of this privacy policy for details on your rights, retention, locations of processing, and contact details for any privacy and data protection enquiries.
Lawli Fair Processing Statement
Some of the interactive content that we provide within our databases and document processing services, by its very nature, requires the input of personal information. This fair processing statement provides details about the personal information contained in our service content. Service we provide may require your input of personal information. Although we host and assist you to keep a copy of your completed documents as a provision of our Service, we will not use your personal information in any way, and will sensitise the data on hosted server as much as we make commercially reasonable efforts to.
Please refer to the main section of this privacy policy for details on your rights, retention, locations of processing, and contact details for any privacy and data protection enquiries.