ABC Chambers Solutions is committed to protecting the privacy and security of your personal information.
This privacy notice explains how we collect and use personal information in connection with our online training services, in accordance with the UK General Data Protection Regulation (UK GDPR) and other data protection legislation.
ABC Chambers Solutions LLP is a limited liability partnership registered in England and Wales (registration number OC385785). Our registered office is 32 The Barons, Thorley, Bishop’s Stortford, Hertfordshire CM23 4HR, and our correspondence address is Aviation House, 125 Kingsway, London WC2B 6NH.
This notice applies to:
- Members, pupils and staff of chambers and other organisations who use our online training (“training users”).
- Individuals who buy a training licence directly from us.
- Contacts at chambers and other organisations who buy, or are interested in, our training (“chambers contacts”).
It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information
Our website address is: https://learn.abcllp.com
Our role:
When we provide training to a chambers or organisation, that chambers or organisation is the “data controller” for its training users’ information. This means it decides how that information is used, and we process it on its behalf, under its written instructions and our agreement with it.
ABC Chambers Solutions is the “data controller” for the information of individuals who buy a licence directly from us, and for the information of chambers contacts. We are required under data protection legislation to notify you of the information contained in this privacy notice.
Data protection principles:
We will comply with data protection law. This says that the personal information we hold about you must be:
- Used lawfully, fairly and in a transparent way.
- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
- Relevant to the purposes we have told you about and limited only to those purposes.
- Accurate and kept up to date.
- Kept only as long as necessary for the purposes we have told you about.
- Kept securely
The kind of information we hold about you:
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
Training users and individual licence holders
- Name, email address, chambers or organisation, and role (for example member, pupil or staff).
- Your username for the training portal.
- The courses assigned to you, your progress, completion dates and any assessment results.
- The certificates issued to you.
Chambers contacts
- Name, job title, chambers or organisation, work email address and telephone number.
- Our correspondence with you.
- Contract, invoicing and payment details for your chambers or organisation.
We do not ask for any “special category” (more sensitive) personal information, such as health information, in order to provide our training.
How is your personal information collected?
If you use our training through your chambers or organisation, your chambers gives us your name, email address and role so that we can set up your account. We then collect information about your progress as you use the training portal (learn.abcllp.com).
If you buy a licence directly from us, we collect your information from you when you sign up.
We collect chambers contacts’ information directly from you, through our website, or from publicly available sources such as chambers websites and LinkedIn.
Comments
When visitors leave comments via our feedback form, we collect data shown in the form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Cookies
As you interact with our website we collect technical data known as cookies. We use cookies to understand your preferences, trends and browsing actions. Cookies are stored on your device by websites, apps and advertisements. We may also receive technical data about you from third parties such as an analytic provider, eg. Google, Bing, outside the EU. Please see our Cookie Policy for full details of the first and third party cookies used by our website and associated plugins, social media and analytic sites.
How we use your personal information:
We use training users’ information to:
- Set up your account and give you access to the training.
- Record your progress and issue your certificates.
- Send completion reports to your chambers’ nominated contact.
- Where your chambers asks us to, remind you to complete outstanding courses, using wording agreed with your chambers.
- Help you with any problems accessing the training, including resetting your password.
We use chambers contacts’ information to:
- Provide our services, manage our agreement with your chambers and send invoices.
- Send you training reports and service updates.
- Tell you about our courses and services, where the law allows us to (see “Marketing” below).
We do not use training users’ records for recruitment or marketing purposes.
What is our lawful basis for processing your information?
Under data protection law, we are only allowed to process your personal information if we have a lawful basis to do so. The lawful bases we rely on are:
- Training users: your chambers or organisation, as data controller, decides the lawful basis for using your information, and we act on its instructions.
- Individual licence holders: performance of our contract with you.
- Chambers contacts: performance of our contract with your chambers, and our legitimate interests in running and developing our business.
- Marketing: our legitimate interests, or your consent where the law requires it.
Marketing
We may send chambers contacts information about our courses and services. You can ask us to stop at any time by using the unsubscribe link in any of our emails or by emailing us, and we will stop.
Change of purpose:
We will only use your personal information for the purposes for which we collected it. If we wish to use your information for a completely different purpose, we will contact you to gain your explicit consent, unless we can justify this new purpose is related to the original use.
Data sharing:
We do not sell your personal information or share it with anyone for their own purposes. We only share it where we need to in order to provide our services, or where the law requires us to.
The only people who may receive your personal information are:
- Your chambers or organisation, if you use our training through them (for example, completion reports).
- The service providers listed below, who process it on our behalf and only on our instructions.
- Regulators, law enforcement or other authorities, where we are legally required to share it.
Which third-party service providers process my personal information?
The following providers process personal information on our behalf for the following reasons:
LearnDash: learning management system that runs our online training portal (learn.abcllp.com); training accounts, course progress and completion records are stored on our secure website hosting.
Dropbox Sign: electronic signature service used to sign agreements; names, email addresses and signatures of signatories are processed.
Adobe: we send out electronic forms through this service; data will be sent via Adobe but will not be held with them.
Loxo: customer relationship management system used to manage our contacts at chambers and other organisations.
Mailchimp: provides mailing services, data may be processed in form of email addresses.
HubSpot: provides mailing services, data may be processed in form of email addresses.
QuickBooks: accounting software.
Canva: graphic design platform used to create marketing and training materials; personal information may be processed where it is included in these materials.
Transfers outside the UK:
Some of our service providers are based outside the UK, mainly in the United States. Where your personal information is transferred outside the UK, we make sure it is protected by the safeguards required by UK GDPR, such as UK adequacy regulations or approved contract terms.
How secure is my information with third-party service providers?
All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow them to use your personal data for their own purposes or to pass it on to anyone else. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
Data security:
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality. Details of these measures are available upon request.
We set a temporary password when your training account is created and ask you to change it when you first log in. Once you have changed it, your password is stored in a form we cannot read, so we cannot see it or log in as you, but we can reset it for you if you ask.
We have put in place procedures to deal with any suspected data security breach. Where a breach affects training users, we will notify your chambers or organisation without undue delay. Otherwise, we will notify you and any applicable regulator where we are legally required to do so.
Data retention:
How long will you use my information for?
Training users’ records are kept for the length of our agreement with your chambers or organisation and are then deleted or returned in line with that agreement.
For individual licence holders and chambers contacts, we will only retain your information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Details of retention periods are available from us at your request.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Rights of access, correction, erasure and restriction:
Your duty to inform us of changes
It is important that the personal information we hold about you is accurate and current. Please let us, or your chambers, know if your personal information changes.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
- Request access to your personal information
- Request correction of the personal information that we hold about you
- Request erasure of your personal information
- Object to processing of your personal information
- Request the restriction of processing of your personal information
- Request the transfer of your personal information to another party
If you want to exercise any of these rights, please put your request to us in writing. If you use our training through your chambers or organisation, you may also contact your chambers directly; if we receive your request, we will pass it to your chambers and help them respond.
No fee usually required:
You will not have to pay a fee to access your personal information. However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. We will respond within one month, or three months if your request is complex or involves other data subjects, and will advise of any extended time periods or why we cannot give you your data.
What we may need from you:
We may need to request specific information from you to help us confirm your identity and ensure your right to access information. This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
Right to withdraw consent:
Where you have given your consent to us using your personal information for a specific purpose, such as marketing, you have the right to withdraw it at any time. To withdraw your consent please contact us in writing, email us on [email protected] or call us. Once we have received your request your information will no longer be processed for that purpose, if we are legally able to.
Contact us:
For questions about your training account, please email [email protected].
We have appointed a Data Protection Officer (DPO) to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact the data protection officer - Bill Conner at [email protected]
You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues. https://ico.org.uk/make-a-complaint/
Changes to this privacy notice:
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
