Your Data and Privacy
The Incorporated Council of Law Reporting website and online platform (www.iclr.co.uk) is operated by the Incorporated Council of Law Reporting for England and Wales (us, we, our or ICLR). We are registered under company number 00005034 and have our registered address at Megarry House, 119 Chancery Lane, London WC2A 1PP.
This notice describes how the we use and disclose your personal data. It also describes your data protection rights, including a right to object to some of the processing which ICLR carries out. More information about your rights, and how to exercise them, is set out in the “Your choices and rights” section.
When does ICLR collect personal data about me?
We will collect your personal data when:
- You interact with our website
- You create an account with us
- You provide us with your areas of interest
- You submit a request to take a trial to one of our services
- You upload content to our website
- You sign up to receive marketing updates
- You sign up to receive blog updates
- You take a paid subscription to any of our services
- You participate in our market research
What personal data does ICLR collect about me?
We collect some information directly from you. For example, when you set up an account we will collect:
- your personal contact details such as name, title, addresses, telephone numbers and email addresses
- your account details such as usernames and passwords
- your financial details
- your place of work
- the area(s) of law you are most interest in
- information you upload to the site including your opinions
- your feedback and responses to market research
- whether you wish to receive marketing updates
We collect some information automatically when you interact with our website or access our products and services. This includes:
- your IP address and details of the device you are using such as device ID, operating system and browser
- details related to your account history such as start and end dates for trials and subscriptions, the products you currently and have previously subscribed to and records of invoices and payments
- usage data, limited to date and time-signatured analytics of the following metrics: (i) the number of search queries executed; (ii) the number of documents viewed; and (iii) the number of times you or your Authorised Users access your subscription, along with the incoming IP address; and
- if your subscription includes IP-authenticated access, we will store the IP addresses over which you require access to be provided
We collect some information from third parties, including:
- information on how you interact with our marketing materials so that we can ensure the marketing you receive is as relevant to you as possible;
- information available from public sources (e.g. the contact details that are published on the website of your organization) which may be collected by us or by market researchers instructed by us; and
Why do we process your data?
1. Where you have entered into a contract with us (including a trial) and the processing is necessary to provide you with the relevant goods and service, including:
- in order to manage your account membership, including when you have a trial or a subscription, and allow you to access our website and online platform; and
- to provide you with services in connection with your use of the platform, including the Case Genie search priming facility.
2. Where the processing is necessary for ICLR’s (or a third-party’s) legitimate business interests (as listed below) and these interests are not overridden by your rights, including:
- where your employer has entered into a contract with us to provide you with our services – we would be acting in the legitimate interests of your employer; and
- to personalize your feed and that emails we send to you are relevant to your interests;
- in certain circumstances, and where permitted by law, we will rely on our legitimate interests to send marketing materials to you; and
- in order to improve the functionality of the Case Genie search priming facility.
3. Where we rely on your consent, including where you have opted in to receive content updates and marketing material.
4. For purposes which are required by law, such as in response to requests by government or law enforcement authorities conducting an investigation.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us using the details set out below.
How secure is your data?
ICLR is registered with the Information Commissioner’s Office (ICO) and is fully compliant with the General Data Protection Regulation and the Data Protection Act 2018.
The personal information we collect from you will be stored securely on our electronic systems. Only relevant members of staff have access to the information that you provide to us. Those members of staff will have received appropriate data protection training.
In the event of a data breach, we undertake to use all reasonable means to contact anyone whose data is affected by such breach, and to take all reasonable steps to prevent further data loss. Where such a breach involves the loss of confidential or financial information it may be treated as a material breach for the purposes of termination under either clause 11 of the General Subscriber terms and conditions or clause 11 of the Academic Subscriber terms and conditions.
How long do we keep your data?
- Where you have an account to access our website and online platform (including for a trial period) we will store the data related to your account for no more than seven years from the time you last accessed your account.
- Where you have opted in to updates and marketing from us, we will store this data for as long as you are subscribed to the update list you elected to subscribe to.
- Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future.
How is my personal data shared?
Our products and services are backed by a range of systems, based in several locations.
This may involve sharing your personal data with various partners and affiliates, such as:
- Third party service providers who process the data on our behalf and help us to provide the products and services (such as payment service providers, IT support and cloud storage providers).
This may also involve sending your data to another country:
- The servers powering ICLR.4 (including in particular those processing information for Case Genie) are situated in the United Kingdom.
- Our internal business servers are situated in the United Kingdom.
- Customer data is stored on servers which are situated in France and Germany.
- The servers of the email delivery systems which we use are situated in the United States of America.
In the event that personal data is transferred outside of the UK or the EEA to an organisation in a country which is not subject to an adequacy decision by the EU Commission or considered adequate as determined by UK data protection laws, we will take steps to ensure your personal information is adequately protected (e.g. by way EU Commission approved Standard Contractual Clauses or a vendor’s Processor Binding Corporate Rules or by relying on such other data transfer mechanisms as available under applicable data protection laws). A copy of the relevant mechanism can be obtained for your review on request by using the contact details below.
Your choices and rights
You have the right to ask us for a copy of your personal data; to correct, delete or restrict processing of your personal data; and to obtain the personal data you provide in a structured, machine readable format. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you have unresolved concerns, you have the right to complain to a data protection authority where you live, work or believe a breach has taken place. In the UK, this is the Information Commissioner’s Office (ICO).
Data that is mandatory is indicated on relevant forms that you complete. Where provision of data is mandatory, if relevant data is not provided, then we will not be able to fulfil your requests to register, make a payment or otherwise engage with us for purposes where that data is required (usually the purposes of performing our contract with you). All other provision of your information is optional.
Contact us
If you have questions about this privacy notice or wish to contact us for any reason in relation to our personal data processing, please contact us at privacy@iclr.co.uk.
Further Information and Changes
If our information practices change at some time in the future we will post the policy changes to our website to notify you of these changes and provide you with the ability to opt out of these new uses.
The website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these other websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Updated 28 September 2023.
