Privacy policy

1. Introduction

The privacy of our visitors, customers and users is of importance to us. This Privacy Policy describes how UOLLB ("UOLLB", "UOL", "UOL Press", "UOLLB First Class Law Notes", the "Site", "we", "us", or "our") collects, uses, stores, processes and discloses personal information when you visit, use or interact with our website, purchase or access our law notes and educational materials, create or use an account, communicate with us, interact with our social-media platforms, subscribe to our communications, or otherwise use our products and services (collectively, the "Services" or "Products/Services").

For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, prospective customer, website visitor, account holder, subscriber, student, or another individual whose personal information we process in connection with our business. This Privacy Policy explains the types of personal information we may collect, the purposes for which we may use it, the circumstances in which we may disclose it, how we protect it, how long we may retain it, and certain rights that may be available to you depending on where you live.

This Privacy Policy applies subject to applicable data-protection, privacy, electronic-communications and consumer laws. Where mandatory law provides you with rights or protections that are greater than those described in this Privacy Policy, those mandatory rights and protections will continue to apply.

Please read this Privacy Policy carefully. By using our Site or Services, you acknowledge that you have had an opportunity to review this Privacy Policy. Where applicable law requires your consent to a particular processing activity, your use of the Site or Services will not by itself constitute consent to that processing activity, and we will obtain consent through an appropriate mechanism.

2. Purpose and Scope

UOLLB is committed to respecting the privacy rights of users of the Site, our Services and any software applications or digital services made available by us. We are committed to protecting personal information that we collect and process and to handling such information in accordance with applicable privacy and data-protection laws.

This Privacy Policy is intended to provide transparent information concerning our privacy practices while also protecting UOLLB's legitimate interests in operating, maintaining, securing and developing its business. This includes our legitimate interests in providing law notes and educational materials, processing transactions, protecting our intellectual property, preventing fraud and misuse, maintaining the security of our systems, responding to customer enquiries, enforcing our agreements and defending our legal rights.

Where applicable UK or EU data-protection law requires UOLLB to identify a lawful basis for processing personal data, we will rely on the lawful basis that is appropriate to the particular processing activity. Depending on the circumstances, this may include performance of a contract, compliance with a legal obligation, legitimate interests, consent, or another lawful basis recognised by applicable law.

3. Scope

This Privacy Policy applies to data collection and processing by us and applies to your use of the publicly accessible portions of the Site, including blog sections and other webpages, customer accounts, checkout pages, digital products, law notes, educational materials, communications, applications, software, social-media interactions and other related sites, applications, capabilities and services operated or provided by UOLLB.

This Privacy Policy does not automatically apply to websites, applications, services or platforms operated by independent third parties, including payment providers, advertising networks, social-media platforms, analytics providers or websites to which our Site may contain links. Such third parties may have their own privacy policies and terms and may process your information independently of UOLLB.

We have established and implemented this Privacy Policy to inform you of the types of information that we collect and process, the purposes for which we process that information, the circumstances in which information may be shared, and the rights and choices that may be available to you.

4. Your Responsibility

You should read this Privacy Policy carefully so that you understand our policies and practices concerning your information. You should also review any additional privacy notices presented to you at the point at which particular information is collected, where applicable.

You are responsible for ensuring that information you provide to UOLLB is accurate and, where you provide information concerning another individual, that you are legally entitled or authorised to provide that information.

You should not provide passwords, complete payment-card details, unnecessary sensitive personal information or other confidential information through ordinary email, public comments or other insecure communication channels.

5. Changes to Privacy Policy

This Privacy Policy may change from time to time to reflect changes in our Services, business operations, technologies, service providers, legal requirements, regulatory guidance or privacy practices.

The latest version of this Privacy Policy will be made available through the Site and the "Last Updated" date will indicate when the policy was most recently revised. We may update this Privacy Policy without separately notifying every user where applicable law permits us to do so.

Where a change is material and applicable law requires notice, consent or another form of communication, we will take the steps required by applicable law. We will not rely solely on your continued use of the Site as evidence of consent where applicable law requires affirmative consent.

6. Your Authorisation and International Processing

UOLLB is based in the United Kingdom and may use service providers, contractors, affiliates and other business partners located in countries outside the United Kingdom or European Economic Area. As a result, your personal information may be transferred to, stored in or accessed from countries other than the country in which you reside.

We will not treat your general use of the Site as a blanket waiver of mandatory international-transfer protections. Where UK GDPR or EU GDPR applies and a transfer constitutes a restricted international transfer, UOLLB will use an appropriate lawful transfer mechanism where required, which may include an adequacy decision, standard contractual clauses, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another mechanism permitted by applicable law. Where required, UOLLB may also undertake an appropriate transfer risk assessment or equivalent data-protection assessment.

The country in which your information is processed may have privacy laws that differ from those in your country of residence. By using our Services, you acknowledge that international processing may occur where lawful and necessary for the purposes described in this Privacy Policy.

7. Application of Privacy Policy

This Privacy Policy applies to UOLLB's Services unless a particular product, service, application or feature is expressly accompanied by a separate privacy notice that states otherwise.

This Privacy Policy does not apply to products, services, websites or platforms operated by other companies or individuals. Our Site may contain links to third-party websites or services, and our advertising, payment, analytics, social-media and technology partners may independently collect and process information in accordance with their own privacy notices.

UOLLB is not responsible for the independent privacy practices of third parties that operate outside our control. You should review the privacy policy and terms of any third-party service before providing information to that service.

8. Traffic Data

Like most website and online-service operators, we may automatically receive certain technical information from web browsers, devices and networks used to access the Site. This may include IP addresses, internet domain names, device type, browser type, operating system, referring website, pages visited, dates and times of access, approximate location derived from technical information, device identifiers, language preferences, interaction information, error logs and other technical or usage information.

We may use this information to operate and secure the Site, diagnose technical problems, understand usage patterns, prevent fraud and abuse, improve our Services, analyse performance and maintain the security and reliability of our systems.

Although certain traffic data may not directly identify an individual by itself, it may become identifiable when combined with other information. We will process such information in accordance with applicable law.

9. Cookie Policy

Cookies are small text files or similar technologies that may be placed on your computer, mobile device or other device when you visit a website. We may use first-party and third-party cookies, pixels, tags, local storage, software development kits and similar technologies for purposes including essential functionality, authentication, security, remembering preferences, analytics, advertising, conversion measurement and other legitimate business purposes.

Where applicable law requires consent before non-essential cookies or similar technologies are used, UOLLB will seek appropriate consent before activating the relevant technology. You may also be provided with a cookie-management mechanism through which you can accept, reject or modify certain categories of cookies.

Our use of cookies and similar technologies is subject to applicable privacy and electronic-communications laws, including the Privacy and Electronic Communications Regulations 2003 ("PECR") where applicable in the United Kingdom.

10. First-party Cookies

We may use first-party cookies and similar technologies to provide essential functionality, maintain sessions, remember preferences, authenticate users, protect accounts, improve website performance and understand how visitors use our Site.

Certain cookies may be strictly necessary for the operation of the Site or for a service specifically requested by you. Where applicable law permits the use of such technologies without consent, we may use them without obtaining consent.

Where consent is required, we will provide an appropriate mechanism for obtaining and recording consent. You may be able to manage certain cookies through your browser or device settings, although disabling cookies may cause some features of the Site to operate incorrectly or become unavailable.

11. Third-party Cookies

We may use third-party cookies and similar technologies provided by analytics, advertising, social-media, payment, security and other technology providers.

These technologies may allow third parties to collect information about your use of our Site, measure advertising effectiveness, recognise returning visitors, provide security features, analyse traffic, measure conversions or display advertisements that may be relevant to your interests.

Where applicable law requires consent for such technologies, we will seek consent before using them. Your use of third-party technologies may also be subject to the privacy policies of the relevant third-party providers.

12. Marketing

We may use personal information to communicate with you about UOLLB products, law notes, educational materials, promotions, offers, events, updates and other information that may be relevant to our Services.

Where applicable law permits us to do so, we may use information such as your email address, purchase history, interactions with our Services and marketing preferences to conduct and measure marketing activities.

We may also use advertising and conversion-tracking technologies to understand whether our marketing campaigns result in commercially relevant actions, such as website visits or purchases. Where consent is legally required for such technologies or marketing activities, we will obtain the necessary consent.

For users in the United Kingdom, electronic direct marketing will be conducted in accordance with applicable PECR requirements. Where consent is required, we will obtain valid consent. Where the applicable soft opt-in requirements are satisfied, we may rely upon that mechanism where permitted by law. You have an absolute right to object to direct marketing and may unsubscribe from marketing communications at any time.

Unsubscribing from promotional communications will not normally prevent us from sending non-promotional communications that are necessary to administer your account, purchase, transaction, security, legal rights or Services.

13. Collecting Personal Information

To provide the Services, we collect personal information from a variety of sources depending on how you interact with us.

We may collect information directly from you when you create an account, purchase a product, contact us, subscribe to communications, submit a form, participate in a promotion, communicate through social media, submit feedback or otherwise provide information to us.

We may also collect information automatically through your use of the Site and Services, including technical, device and usage information.

We may receive information from third parties, including payment processors, e-commerce platforms, website hosts, analytics providers, advertising providers, fraud-prevention services, customer-support providers, social-media platforms and other service providers.

In addition to the specific uses described in this Privacy Policy, we may use information to communicate with you, provide and improve our Services, comply with applicable legal obligations, enforce our Terms and Conditions and other agreements, prevent fraud and abuse, protect our intellectual property, and protect or defend the Services, our rights, our customers or others.

14. Personal Information

To use certain features of the Site or purchase certain Products/Services, you may be asked to provide information that identifies or relates to you. This may include your name, email address, telephone number, billing address, postal address, username, account information, order information, transaction information, payment confirmation, customer-support information, marketing preferences and other information that you voluntarily provide.

Where you create an account, we may process information necessary to establish, authenticate, maintain and secure that account. You are responsible for maintaining the confidentiality of your login credentials.

Payment information may be collected and processed by third-party payment processors. UOLLB does not require you to provide complete payment-card information to us through ordinary email or customer-support communications.

You are not generally required to provide personal information merely to browse the Site. However, if certain information is necessary to complete a purchase, provide a requested Service, verify an account or comply with a legal obligation, failure to provide that information may prevent us from providing the relevant Service.

15. Information You Make Public

The Site may contain features such as reviews, comments, testimonials, profiles or other functionality that allows you to upload, post, transmit, display, perform or distribute content or other information.

Any information that you voluntarily make publicly available through such features may be accessible to other users or members of the public. You should therefore exercise caution when deciding whether to disclose personal information through public or semi-public features.

UOLLB cannot guarantee that information voluntarily made public through third-party platforms or public areas of the Site will remain private or that third parties will not copy, reproduce, store or use such information. You are responsible for information that you choose to make publicly available, subject to any rights you may have under applicable law.

16. Business Transition

In the event that UOLLB undergoes or considers a business transition, including a merger, acquisition, investment, partnership, restructuring, financing, sale of assets, sale of the business, insolvency, administration, bankruptcy or receivership, personal information may be disclosed or transferred as reasonably necessary for the relevant transaction.

Such disclosures may involve prospective purchasers, investors, lenders, advisers, insurers, professional advisers, counterparties, regulators or successor entities.

Where personal information is transferred as part of a business transition, we will take such steps as are required by applicable law concerning the lawful use, protection and transfer of that information.

17. Promotional Activities and Service Communications

By providing an email address or other contact information, you may receive communications necessary to administer your account, purchases, orders, payments, digital-product access, security, customer-support matters, refunds, policy changes or other Services.

Where permitted by applicable law, we may also use your contact information for promotional and marketing communications. Where consent is required, we will seek the appropriate consent.

You may opt out of promotional communications at any time using the unsubscribe mechanism included in the relevant communication. Opting out of marketing will not prevent us from sending communications that are necessary for the administration of your account, purchases, legal rights or Services.

18. Storage of Information

We may save enquiries made through our main contact forms, email communications, social-media channels and customer-support systems. We may do this for purposes including responding to enquiries, analysing our Services, monitoring customer-service responsiveness, resolving disputes, preventing fraud and abuse, investigating transactions, enforcing our Terms and Conditions and protecting our legal and commercial interests.

We may directly or indirectly through third-party service providers process, store and transfer information that you provide to us.

Personal information may be transferred to and stored in countries whose privacy laws differ from those in your country. Where applicable UK or EU data-protection law imposes requirements concerning international transfers, UOLLB will use an applicable lawful transfer mechanism and appropriate safeguards rather than relying solely upon a general contractual authorisation.

No method of transmission or storage is completely secure. UOLLB will nevertheless maintain reasonable and appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

19. Information from Third Parties

We may obtain information about you from third parties, including companies that support our Site and Services, payment processors, e-commerce platforms, website hosts, analytics providers, advertising platforms, fraud-prevention services, customer-support providers, social-media platforms and other service providers.

Payment processors may collect payment information, including payment-card or bank information, billing address and transaction details, for the purpose of processing payments and preventing fraud. UOLLB may receive information from those providers necessary to confirm payment, fulfil orders, administer refunds, investigate disputes and maintain transaction records.

We may also receive information concerning interactions with our Services, emails or advertisements where such information is lawfully made available to us by the relevant provider.

Information obtained from third parties will be processed in accordance with this Privacy Policy and applicable law.

20. Using Personal Information

We use personal information to provide Products and Services, perform contracts with customers, process payments, fulfil orders, provide access to digital law notes and educational materials, communicate about transactions, administer customer accounts, provide customer support, process refunds and otherwise operate the Services.

We may use personal information to maintain and improve our Site and Services, analyse usage, diagnose technical problems, prevent fraud, detect unauthorised access, protect our intellectual property, enforce our agreements and protect our customers and business.

We may also process personal information where necessary to comply with applicable laws, regulations, court orders, regulatory requirements, accounting and tax obligations, or to establish, exercise or defend legal claims.

Where UK GDPR or EU GDPR applies, the lawful basis for processing will depend on the particular purpose. This may include performance of a contract, compliance with a legal obligation, legitimate interests or consent. Where we rely on legitimate interests, those interests may include operating and improving our Services, maintaining security, preventing fraud and abuse, administering customer relationships, conducting appropriate marketing where permitted, protecting intellectual property and defending our legal rights.

Where we rely on consent, you may withdraw that consent where applicable. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

21. Personal Information Disclosure

In certain circumstances, we may disclose personal information to third parties where necessary for contract fulfilment, legitimate business purposes, legal compliance, security, fraud prevention, customer support or other lawful purposes.

Recipients may include vendors and service providers that perform services on our behalf, such as website hosting, IT management, payment processing, data analytics, customer support, cloud storage, email delivery, security, fraud prevention and other technology services.

We may disclose information to professional advisers, including lawyers, accountants, auditors, insurers and consultants, where reasonably necessary for our business, legal, financial, insurance, compliance or security purposes.

We may disclose information to business partners or other third parties where you direct us to do so, where you have provided appropriate consent, or where another lawful basis permits the disclosure.

We may disclose information to affiliates or entities within our corporate group where applicable and lawful for internal administrative, operational, security or business purposes.

We may also disclose information where reasonably necessary to comply with applicable law, respond to lawful requests from courts, regulators or law-enforcement authorities, enforce our Terms and Conditions, investigate fraud or other unlawful activity, protect our rights or property, or protect the safety and security of our customers, Services or others.

We will not disclose personal information merely because a third party requests it where disclosure is not legally permitted or otherwise lawful.

22. Third-party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow a link to a site that is not owned or controlled by UOLLB, you should review the privacy policy and terms of that third party.

UOLLB does not guarantee and is not responsible for the privacy, security, content or information practices of independent third-party websites or platforms. Information that you provide on public or semi-public third-party platforms, including social-networking platforms, may be viewable by other users and may be subject to the policies of those platforms.

The inclusion of a third-party link does not by itself imply that UOLLB endorses the third party or its privacy practices.

23. Children's Data

The Services are not intended to be directed to children under the age of 13, and UOLLB does not knowingly seek to collect personal information from children under 13 in circumstances where applicable law requires parental consent.

If UOLLB becomes aware that it has collected personal information from a child under 13 in circumstances where applicable law required parental consent and such consent was not obtained, UOLLB will take reasonable steps to address the situation, which may include deleting the relevant information.

Where the U.S. Children's Online Privacy Protection Act ("COPPA") applies, UOLLB will comply with applicable requirements concerning children's personal information, including applicable notice, parental-consent, access, deletion, security and retention requirements. COPPA may apply not only to websites specifically directed to children but also to general-audience services that have actual knowledge that they are collecting personal information from children under 13.

Other jurisdictions may apply different rules or age thresholds concerning children and minors. Where such requirements apply to UOLLB, we will comply with the applicable legal requirements.

24. Security and Retention of Your Information

UOLLB takes reasonable and appropriate technical and organisational measures designed to protect personal information against unauthorised access, unlawful processing, accidental loss, destruction, alteration, disclosure and misuse.

Such measures may include access controls, authentication procedures, secure hosting, restricted access, appropriate encryption, security monitoring, backups, confidentiality obligations, supplier controls and incident-response procedures, depending on the nature and sensitivity of the information.

No security measure or method of transmission is perfect or impenetrable. Accordingly, UOLLB does not guarantee absolute or perfect security, and we cannot guarantee that personal information will never be accessed, disclosed, altered or destroyed through circumstances beyond our reasonable control. Nothing in this Privacy Policy excludes or limits any liability that cannot lawfully be excluded or limited.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing Services, maintaining accounts, processing transactions, complying with legal and accounting obligations, preventing fraud, resolving disputes, enforcing agreements, protecting intellectual property and establishing, exercising or defending legal claims.

Different categories of information may therefore be retained for different periods. Where information is no longer required and there is no lawful reason to retain it, we will seek to delete, anonymise or otherwise dispose of it in accordance with our applicable retention procedures.

25. Your Rights

Depending on where you live and which privacy laws apply to you, you may have some or all of the following rights in relation to your personal information: the right to request access to information we hold about you; the right to request correction of inaccurate information; the right to request deletion; the right to request restriction of processing; the right to object to certain processing; the right to data portability in certain circumstances; the right to withdraw consent where processing is based on consent; the right to object to direct marketing; and, where applicable, rights concerning automated decision-making and profiling.

These rights are not absolute and may be subject to legal exceptions, exemptions, identity-verification requirements and other limitations. UOLLB may retain information where required or permitted by law, including for legal claims, fraud prevention, security, accounting, tax, regulatory compliance and enforcement of agreements.

Under UK GDPR and EU GDPR, individuals may have rights including access, rectification, erasure, restriction, portability and objection in accordance with the conditions of the applicable law. The right to object to direct marketing is particularly important and applies where provided by applicable law.

If you wish to exercise a privacy right, please contact us using the contact details set out in this Privacy Policy. We may need to verify your identity before providing a substantive response. Where permitted by law, we may decline or limit requests that are manifestly unfounded, excessive, repetitive or otherwise subject to a lawful exemption.

For U.S. residents, additional rights may apply under state privacy laws. Depending on the state and applicable statutory requirements, these rights may include rights to know or access personal information, correct inaccurate information, delete personal information, obtain certain information in a portable format, opt out of certain sales or sharing, opt out of targeted advertising, limit certain uses of sensitive personal information, appeal certain decisions and exercise other rights provided by applicable state law.

For California residents, applicable California privacy law, including the California Consumer Privacy Act as amended, may provide additional rights concerning access, correction, deletion, sale or sharing of personal information, cross-context behavioural advertising, sensitive personal information and privacy preference signals. Where a valid opt-out preference signal such as Global Privacy Control is legally required to be recognised, UOLLB will process it in accordance with applicable law. California law also contains specific requirements governing opt-out requests and the information that a business may require from consumers exercising those rights.

UOLLB will not unlawfully discriminate against an individual for exercising a privacy right.

Where applicable law permits an authorised agent to submit a request on your behalf, we may require appropriate evidence of that authority and may require you to verify your identity directly with us.

26. Complaints

If you have a complaint or concern about how UOLLB processes your personal information, please contact us using the contact details set out below. We will consider the complaint and take reasonable steps to investigate and respond.

If you are located in the United Kingdom and remain dissatisfied, you may have the right to complain to the Information Commissioner's Office ("ICO"). If you are located in the European Economic Area and EU GDPR applies, you may have the right to lodge a complaint with the relevant data-protection supervisory authority. Depending on the U.S. state in which you reside, you may also have the right to contact the applicable state attorney general or privacy regulator.

Nothing in this Privacy Policy prevents you from exercising a statutory right to complain directly to a competent supervisory authority or regulator.

27. International Users

Please note that UOLLB may transfer, store and process personal information outside the country in which you live. Personal information may be processed by UOLLB personnel and by third-party service providers, contractors and business partners located in the United Kingdom, European Economic Area, United States and other countries in which such processing is lawful and necessary for our business.

Where UK GDPR or EU GDPR applies, UOLLB will comply with applicable requirements governing restricted international transfers. Depending on the circumstances, this may include reliance on an applicable adequacy decision, EU Standard Contractual Clauses, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another lawful transfer mechanism. Where required, UOLLB will undertake the applicable transfer assessment and implement appropriate supplementary measures.

If UOLLB is legally required to appoint a representative in the United Kingdom or European Union because of the scope of its processing activities, the relevant representative's details will be provided in this Privacy Policy.

By using the Site and Services, you acknowledge that international processing may occur where permitted by applicable law. However, nothing in this Privacy Policy is intended to constitute a waiver of mandatory data-protection rights or to replace any safeguard or transfer mechanism required by applicable law.

28. Direct Marketing and Your Choices

You may unsubscribe from promotional email communications at any time by using the unsubscribe mechanism contained in the relevant communication or by contacting us.

Where you object to direct marketing, we will respect that objection in accordance with applicable law. We may retain limited information necessary to ensure that your marketing preference is respected and that we do not inadvertently send further promotional communications.

Opting out of marketing will not prevent UOLLB from sending essential communications relating to purchases, accounts, security, transactions, customer support, legal obligations, changes to Services or other non-promotional matters.

29. Fraud, Security and Protection of UOLLB

UOLLB may collect, retain and use personal information where reasonably necessary to detect, investigate and prevent fraud, payment abuse, chargebacks, unauthorised access, account misuse, unauthorised sharing of digital products, piracy, intellectual-property infringement, attempts to circumvent security measures, misuse of promotional offers and other unlawful or prohibited activities.

Such processing may be necessary to protect UOLLB, our customers, our Services and our intellectual property, to comply with applicable legal obligations, to establish, exercise or defend legal claims, or where otherwise permitted by applicable law.

Because UOLLB provides digital law notes and educational materials, we may also process information concerning account access, downloads or other usage activity where reasonably necessary to authenticate legitimate customers, protect our digital products, investigate suspected unauthorised distribution and enforce applicable licence and usage restrictions.

30. Data Breaches and Security Incidents

UOLLB maintains procedures intended to identify, investigate, contain and respond to personal-data and information-security incidents.

Where applicable law requires notification of a personal-data breach to a regulator or affected individuals, UOLLB will assess the incident and make the notifications required by law within the applicable statutory timeframe.

Where UK GDPR applies, certain personal-data breaches must generally be reported to the ICO without undue delay and, where feasible, within 72 hours after becoming aware of the breach where the applicable reporting threshold is met. Where a breach presents a high risk to affected individuals, notification to those individuals may also be required. U.S. state laws may impose separate breach-notification requirements depending on the nature of the incident and the individuals affected.

UOLLB does not guarantee that a security incident will never occur. However, we will take reasonable steps appropriate to the circumstances to investigate and respond to incidents and to comply with applicable legal obligations.

31. Data Retention and Deletion Requests

If you request deletion of your personal information, UOLLB will consider the request in accordance with applicable law.

Deletion may not be immediate or absolute where UOLLB is legally required or permitted to retain information, including for tax and accounting purposes, fraud prevention, security, dispute resolution, legal claims, regulatory compliance, contractual enforcement or other lawful purposes.

Where appropriate, information may instead be anonymised, restricted or securely retained for the relevant lawful period.

32. Automated Decision-Making and Profiling

UOLLB may use automated technologies for purposes including fraud prevention, security, analytics, advertising measurement, website personalisation and operational purposes.

We do not intend to make solely automated decisions producing legal or similarly significant effects on individuals unless permitted by applicable law and subject to any safeguards or rights required by that law.

Where applicable law provides rights concerning automated decision-making or profiling, those rights will apply in accordance with the relevant legal requirements.

33. Sensitive and Special Category Information

UOLLB does not ordinarily require sensitive or special-category personal information in order for you to purchase or use ordinary UOLLB law notes and educational materials.

You should therefore avoid providing health information, biometric information, racial or ethnic information, religious or philosophical beliefs, political opinions, information concerning sex life or sexual orientation, genetic information, criminal-conviction information or other sensitive information unless specifically necessary and lawfully requested.

Where UOLLB processes special-category or sensitive personal information, it will do so only where permitted by applicable law and where an appropriate legal condition or exemption applies.

34. Account Security

If you create an account with UOLLB, you are responsible for maintaining the confidentiality of your username, password and other account credentials.

You should not share your account credentials with other individuals unless expressly permitted by the applicable Terms and Conditions. You should use appropriate security measures, including a strong and unique password, and should notify UOLLB promptly if you believe that your account has been compromised.

UOLLB may take reasonable measures to protect accounts and may suspend, restrict or investigate an account where there is a reasonable basis to suspect fraud, unauthorised access, security abuse or other prohibited activity, subject always to applicable law.

35. Records of Consent and Privacy Preferences

Where UOLLB relies on consent, we may retain records demonstrating the consent provided, including the date, time, method, information presented and relevant processing purpose.

We may also retain records of withdrawals of consent, marketing opt-outs, cookie preferences, privacy requests and other choices so that we can demonstrate compliance and respect your preferences.

Where consent is withdrawn, UOLLB will cease the relevant consent-based processing where required, although information may continue to be processed where another lawful basis applies or where retention is otherwise permitted by law.

36. Third-Party Service Providers and Processors

UOLLB may appoint third-party service providers to process personal information on our behalf.

Such providers may include website hosts, cloud-storage providers, payment processors, email providers, customer-support platforms, analytics providers, advertising providers, cybersecurity providers, fraud-prevention providers and other technology or professional service providers.

Where required by applicable law, UOLLB will seek to impose appropriate contractual, confidentiality and security obligations on processors and service providers.

Third-party providers may also process certain information independently where they act as separate controllers or businesses rather than solely as UOLLB's processor or service provider. Their own privacy policies may therefore apply to their independent processing.

37. Legal Requests and Law Enforcement

UOLLB may disclose personal information where reasonably necessary or legally required to comply with court orders, legal processes, regulatory requirements, lawful requests from government authorities or law-enforcement bodies, or other applicable legal obligations.

Where permitted by law, UOLLB may take reasonable steps to challenge, narrow or otherwise respond appropriately to requests that it considers invalid, unlawful or excessively broad.

UOLLB may also disclose information where reasonably necessary to protect its rights, property, customers, employees, systems or Services, investigate fraud or unlawful activity, or establish, exercise or defend legal claims.

38. Professional Advisers

UOLLB may disclose relevant personal information to lawyers, accountants, auditors, insurers, financial advisers, consultants, cybersecurity professionals and other professional advisers where reasonably necessary for legal, financial, regulatory, insurance, compliance, security, business or dispute-resolution purposes.

Such disclosures will be limited to information reasonably necessary for the relevant purpose where required by applicable law.

39. Accuracy of Information

UOLLB seeks to maintain accurate personal information where reasonably necessary for the purposes for which the information is used.

You should notify us if information you have provided to us changes or is inaccurate. Where applicable law gives you a right to request correction or rectification, you may exercise that right by contacting us.

40. Data Minimisation

UOLLB seeks to collect and process personal information that is reasonably necessary for legitimate business, contractual, legal, security or other lawful purposes.

You are not required to provide information merely because it is described in this Privacy Policy. However, if information is necessary to complete a transaction, establish an account, provide a requested Service, process a payment, comply with a legal obligation or protect the security of our Services, refusing to provide the information may prevent us from providing the relevant Service.

41. No Guarantee of Absolute Security

Although UOLLB takes reasonable steps to protect personal information, no organisation can guarantee that information systems, communications networks, websites, cloud services or storage systems will be completely secure.

To the maximum extent permitted by applicable law, UOLLB does not guarantee that unauthorised access, security incidents, data loss, cyberattacks or other security events will never occur.

Nothing in this Privacy Policy is intended to exclude liability or obligations that cannot lawfully be excluded or limited.

42. Your Responsibility When Using Third-party Services

Where you choose to use a third-party service, payment method, social-media platform, external application or website linked through our Services, you acknowledge that the relevant third party may collect and process information independently.

UOLLB is not responsible for the privacy practices of independent third parties that are outside our control. You should review the privacy notice of the relevant third party before providing information.

43. Severability

If any provision of this Privacy Policy is determined to be unlawful, invalid or unenforceable under applicable law, that provision shall be interpreted or limited to the minimum extent necessary to make it lawful and enforceable where legally possible.

The remaining provisions of this Privacy Policy shall continue in full force and effect to the extent permitted by applicable law.

44. No Waiver of Mandatory Rights

Nothing in this Privacy Policy is intended to exclude, restrict, waive or limit any mandatory right or protection available to you under applicable privacy, data-protection, electronic-communications or consumer law.

Where applicable law provides you with rights or protections that are greater than those described in this Privacy Policy, the applicable law will prevail to the extent of the inconsistency.

45. Complaints and Supervisory Authorities

If you have concerns regarding our handling of your personal information, please contact UOLLB first so that we have an opportunity to investigate and address your concern.

If you are located in the United Kingdom, you may have the right to lodge a complaint with the Information Commissioner's Office. If you are located in the European Economic Area and EU GDPR applies, you may have the right to lodge a complaint with the data-protection supervisory authority in the relevant Member State. Depending on where you live in the United States, you may also have rights to contact the relevant state regulator or attorney general.

Nothing in this Privacy Policy prevents you from exercising your statutory right to complain to an applicable regulator.

46. How to Contact Us

If you have questions regarding this Privacy Policy, wish to exercise a privacy right, wish to submit a privacy request or have a complaint concerning our handling of personal information, you may contact us using the details below.

Legal Entity: Top Venture Ltd

Registered Office: 128 City Road, London EC1V 2NX, United Kingdom

Email: law@uollb.com

Where submitting a privacy-rights request by email, you may use the subject line "PRIVACY REQUEST" so that your request can be directed to the appropriate person or department.

We may request information reasonably necessary to verify your identity before processing certain requests. We will handle valid requests within the timeframe required by applicable law.

47. Final Notice

UOLLB is committed to protecting personal information and handling it responsibly and transparently while preserving UOLLB's legitimate interests in operating, protecting and developing its business.

This Privacy Policy is intended to provide information concerning UOLLB's privacy practices and does not create rights or obligations beyond those required by applicable law or expressly provided under an agreement between you and UOLLB.

Where mandatory privacy or data-protection law conflicts with a provision of this Privacy Policy, the mandatory legal requirement will prevail.