Dec 11, 2024
Written By AllAboutLaw
AllAboutLaw.co.uk | Privacy Policy & GDPR Compliance Statement
Dec 11, 2024
Written By AllAboutLaw
Last Updated: 11.12.2024
AllAboutLaw.co.uk is a product of AllAboutGroup Holdings Ltd.
WHO SHOULD READ THIS PRIVACY POLICY?
This privacy policy sets out how AllAboutGroup Holdings Ltd (“We”, “Us”) uses and protects any information that you give to AllAboutGroup Holdings Ltd when you use or register with AllAboutLaw.co.uk and when we share your data with third parties.
AllAboutGroup Holdings Ltd is committed to ensuring that your privacy is protected.
Should we ask you to provide personal data by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
AllAboutGroup Holdings Ltd may change this policy from time-to-time by updating this page. If you opt-in to receive emails from us, we will notify you of any changes or updates we make. If you do not opt-in to receive emails, you should check this page occasionally to ensure that you are happy with any changes.
If you have any questions, please email us at: mydata@allaboutgroup.org
WHO IS THE DATA CONTROLLER?
Organisation Name: AllAboutGroup Holdings Ltd
Email address: mydata@allaboutgroup.org
Postal address: AllAboutGroup, Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA
WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU?
When you sign up to AllAboutLaw.co.uk, we collect, use, and share the following categories of personal data:
Your basic personal details:
- Your name;
- Your email address;
- Your password;
- Phone number (optional).
Information about your educational background and your academic plans:
- The university or college you attend/attended;
- Your academic stage, i.e. when you graduate;
- The type of course you plan to study next such as LLB or LLM.
- Your preferred course start date.
Sensitive data:
- Your gender (optional);
- Your ethnicity (optional);
- Your disability status (optional);
- If you identify as LGBTQ+ (optional).
Data about your economic background
- If you were previously eligible for free school meals (optional);
- If you are the first in your family to go to university (optional);
- If you are from a low-income family (optional).
Data about your device and how you interact with our website:
When you use AllAboutLaw.co.uk generally, even as an unregistered user, we may process data on your use of the website, including:
- Which pages you visit;
- The time of your visit;
- How long you spend on each page;
- How long you remain on the website;
- The method/ by which you were referred to our website, e.g. via Google or social media channels;
- Your general site browsing habits;
- The type of device you used to access the website;
- The type of web browser you used to access the website;
- The type of operating system you used to access the website;
- Your network location and IP address.
Data collection via Zoom or similar video conferencing tools
To engage with some of the sessions during our Virtual Law Fair, First Year Law Fair, Digital Campus, and our Diversity Programme you will need to use a video conferencing software program that we will choose to interact with exhibitors and speakers via video chat. You will have the option to turn off your camera and mute your microphone.
BY WHAT METHODS DO WE COLLECT YOUR DATA?
Data you voluntarily provide to us
When you access our website, register on our platform, and sign up for events, you voluntarily disclose your personal data to us such as your name, surname, email address, your educational background, and your sensitive data.
Data we automatically collect about you
When you access our website and use our platform, we collect data about you such as your IP address, your device type, and pages you visit our website through the use of cookies and similar technologies. For instance, we use Google Analytics to collect data about your IP address and how you browse our website.
WHY DO WE COLLECT THIS PERSONAL DATA AND WHAT DO WE DO WITH IT?
We collect, process, and share your personal data for the following purposes:
To send you promotional emails
We may periodically send promotional emails to you containing career advice and information about job opportunities, courses, new products, special offers, or other information that we think you may find interesting or useful in your search for employment. We will only use the email(s) you have provided and only if you give us consent to email you.
Contacting you via email for market research purposes
From time-to-time, we may also use your information to contact you for market research purposes. We will contact you by email.
To customise our website according to your interests.
We also use this information to allow our clients to target particular groups with their promotional messages, based on particular users’ general trends, i.e. this page, X, is the most popular page for sixth-form students. Please note: our clients will never contact you directly, and we will not share your contact details with them. All of the messages you receive will come from us on behalf of other organisations.
To sell aggregated information about our users
We may also sell aggregate information from time-to-time about our users, i.e., not personal data specific to an individual user, but data about our user group as a whole.
To analyse how you use and interact with our website so that we can improve our content, product, and services
We partner with Microsoft Clarity to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity.
To ensure the security of our website and services
Additionally, we use this information for site optimisation and fraud/security purposes. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
Advertisement
Sharing your data with third-party Employers and Law Schools who may send you personalised promotional messages via email and phone
Who may send you promotional messages and for what purpose?
If you sign up for our events, employability tools or other free services, we may share your data with employers and law schools who would potentially like to contact you about opportunities at their firm or institution. Your data will only be shared with employers and law schools that you specifically opt to give this to when you click a specific consent box for that exhibitor/host.
How do the Law Firms and Law Schools contact you?
They may send you personalised promotional messages via email, text messages, and phone calls.
What types of data will be used to send you personalised marketing communications via email and phone?
Law Firms and Law Schools may personalise their promotional messages by using the following types of personal data about you:
- The specific university or college you attend(ed),
- The specific university you are interested in studying,
- The program you are interested in studying such as LLB, LLM.
We will not share the user data you enter when you register with any of the employers or law schools we work with unless you specifically provide this consent by completing the required action.
Sharing your data with Law Schools who may contact you with promotional emails, text messages or phone calls
If you sign up to use one of our Academy tools or to attend a virtual event, you may also be asked to share your data with a partner law school that is sponsoring the event or the specific Academy tool. Your data will only be shared with law schools that you specifically opt to give this to when you click a specific consent box for that law school partner. We will not share the user data you enter when you register with any of the employers or law schools we work with unless you specifically provide this consent by completing the required action.
To provide you with our vacation-training management services
If you are undertaking a vacation scheme with a law firm that has secured the services of AllAboutLaw to assist in the delivery of the vacation scheme, we may email you before, during, and after the vacation scheme to provide updates on the schedule and programme of this scheme. Your details will not be used for any other purpose other than those just outlined.
To analyse and measure the performance of marketing campaigns
Once you have registered with AllAboutLaw.co.uk, we record some of the activities you perform on the website while you are logged in, such as the events you register for, and the Academy tools you use. Some of the law firms and law schools we work with are given the opportunity to enter the email addresses of their applicants and/or hires into our ROI Tracker. This system matches successful candidates with active members of our AllAboutLaw community. This enables our clients to better understand how their promotional campaigns with AllAboutLaw have performed. This also allows us to better understand trends in user activity on the AllAboutLaw website and how this might contribute to a candidate successfully securing a vacation scheme, a training contract, or a place on a law school's course. Please note: we do not store or process any personal data of people who are not already registered members of AllAboutLaw.
To contact you about your progression on the Diversity Employability Programme
We use your phone number to provide you with updates on your progression on this programme.
To share your data with the Selected Partners, so that they may send you marketing emails about relevant courses and opportunities
We share your basic details, your phone number, your email, information about your educational background, and your academic plans with the following partners:
- BPP Law School
- BARBRI
- QLTS
These Partners may use your data to send you promotional emails, text messages, or phone calls about relevant courses.
To allow you to access specific events and opportunities
We collect sensitive data such as your race, ethnic origin, disability status, and whether you identify as LGBTQ+ on our Website to allow you to access specific events and opportunities that may be of relevance to you.
OUR LAWFUL BASIS FOR COLLECTING THIS DATA
When we collect, process, use, and share your data, we rely on one of the legal bases under Article 6 of the UK GDPR to justify our processing activities.
When do we rely on Consent under Article 6.1.a of the GDPR?
- When we send you promotional emails about our services and similar opportunities
- Contacting you via email for market research purposes
- To customise our website according to your interests.
- To sell aggregated information about our users
- To analyse how you use and interact with our website so that we can improve our content, product, and services
- Sharing your data with third-party Employers and Law Schools who may send you personalised promotional messages via email and phone
- Sharing your data with Law Schools who may contact you with promotional emails
- To analyse and measure the performance of marketing campaigns
- To contact you about your progression on the Diversity Employability Programme
- To share your data with the specified Partners such as BPP Law School, BARBRI, and QLTS so that they may send you marketing emails about relevant courses and opportunities.
When do we rely on Legitimate Interests under Article 6.1.f of the UK GDPR?
To ensure the security of our website and services
- When do we rely on Contractual Necessity under Article 6.1.c of the UK GDPR?
- To provide you with our vacation-training management services
- When do we obtain your Explicit Consent under Article 9 of the UK GDPR?
- When you submit sensitive personal data such as your race, gender, and sexual preferences, we obtain your explicit consent.
AGE RESTRICTIONS
You must be aged 13 or older to register with AllAboutLaw.co.uk. We will ask you to verify your age when completing the sign-up form, and this is why we ask for your date of birth.
Should we become aware that any site users under 13 are using the site, we will remove their profile and the personal data that we have collected.
Any personal information you choose to share on the site is at your own risk, but if you are concerned at all, and are aged between 13 and 17, we recommend that you seek advice from your parents or guardians before deciding to share your personal data with us.
WHERE IS THIS PERSONAL DATA STORED?
All of the data you give us consent to process when you sign up to AllAboutLaw.co.uk is securely stored on our dedicated server which is managed by eUKhost at their UK Data Centre. The data centre is independently audited to ISO27001 standard and is protected from both physical and electronic intrusion at all times using some of the most sophisticated technologies.
Security is a top priority at the Data Centre. 24 x 7 on-site security guards, ID-based access policy, electronic access controls, external and internal CCTV monitoring, and perimeter fencing with controlled gate access safeguard the data hall from unauthorised access.
All of the data you give us consent to use by opting into cookies on your browser is processed by Google Analytics or Google Ad Manager. We also use the Facebook tracking pixel and Google remarketing tracking pixel to serve remarketing adverts. As part of our remarketing campaigns your data may also be encrypted and uploaded to social media platforms for the purpose of creating custom or lookalike audiences.
3RD PARTY DATA PROCESSORS WE MAY USE TO HELP PROCESS YOUR DATA
Here is a list of the 3rd party data processors we may use to store or process your personal data:
- Leadpages
- Google Analytics
- DoubleClick for Publishers (Google)
- Eventbrite
- Sprout Social
- Survey Monkey
- Mailchimp
- eUKHost
- Heart Internet
- Pathable
- Zoom
- Microsoft Clarity
We are committed to ensuring that all of the above third-party data processors that process personal data on our behalf are fully compliant with the GDPR.
We do not enter into contracts with other data processors unless they can demonstrate the steps they have taken toward compliance.
INTERNATIONAL DATA TRANSFERS
When we transfer your data outside the UK or a country without an adequacy status, we rely on the data transfer mechanisms enshrined under Article 46 of the UK GDPR.
When we transfer data subject to the UK GDPR out of the UK, we implement the UK International Data Transfer Agreement(IDTA) which is approved by the UK Data Protection Authority(ICO). The UK IDTA can be found here.
To learn more about how we comply with the international data transfer requirements under the UK GDPR, you may contact us for more information.
SECURITY MEASURES AND PROCEDURES
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have analysed the risks presented by our processing and have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online.
AllAboutLaw.co.uk has an SSL Certificate installed. This means when you are browsing on our website a secure connection will be established, and the connection between your browser and our server will be secure. You can see that our SSL Certificate is working correctly because a padlock or green bar will show in the address bar in your browser, depending on which one you use.
This is a method of cryptography that encrypts the data that is sent from your browser to our server. This means that if a hacker was to intercept that message, they will only be able to see a cryptographic code that it is impossible for them to break. Only the intended recipient of this data (i.e. our secure server) will be able to understand and process it.
You can access and update your own personal data via the Account Settings page once you have logged in. You can only access this data by entering your password. This password is encrypted within our database.
We regularly review our information security policies and measures and improve them where necessary. We also conduct regular testing and reviews of our measures to ensure they remain effective. We also make sure that any data processors we use implement appropriate technical measures.
HOW LONG DO WE RETAIN YOUR DATA?
The GDPR states that personal data should be stored for no longer than is necessary for the purposes for which the personal data is processed. With that in mind, we only store personal data on our users for a maximum of five years from the date on which they register, unless they request otherwise.
As the majority of our users register as school students, school leavers, undergraduates, or graduates, we feel that five years is a legitimate amount of time for those individuals to still be deemed active job seekers in the early careers market.
We prompt all registered users on an annual basis to update their data processing preferences, so if you would like us to store and process your data for longer than five years, it is advisable for you to update your consent preferences when prompted.
LINKS TO OTHER WEBSITES
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website.
Therefore, we cannot be responsible for the protection and privacy of any information that you provide whilst visiting such sites, and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
YOUR RIGHTS AS A DATA SUBJECT & CONTROLLING YOUR DATA
Once you have registered as a member of AllAboutLaw.co.uk, you are entitled to:
- Access the data we hold on you;
- Rectify the data we hold on you if you believe it to be incorrect;
- Request that the data we hold on you be erased;
- Request that we restrict the processing of the data we hold on you;
- Obtain and reuse the data we hold on you for different services;
- Object to the use of your data for direct marketing;
-Right to withdraw your consent at any time.
HOW TO EXERCISE YOUR RIGHTS
To exercise your rights and request any of the above, you may contact us via one of the following:
Email address: mydata@allaboutgroup.org
Postal address: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA
We will not charge you to request any of the above unless the request is deemed to be excessive. In the unlikely event of this happening, we may charge you a small fee to cover the costs of this excessive request.
HOW TO SUBMIT A COMPLAINT TO THE UK DATA PROTECTION AUTHORITY
If you have any concerns about this Privacy Policy or how we handle your personal data, you have the right to lodge a complaint with the Data Protection Authority in the UK.
For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
If you are based in the EU, you can get in touch with the relevant data protection authority in your country of residence. You can check the following directory to learn more:
https://iapp.org/resources/global-privacy-directory/
Advertisement
Terms & Conditions