Privacy Policy

1. Our commitment

Legal English Plus respects the privacy of customers, visitors, institutional contacts, newsletter subscribers, authors, administrators and support users. This Privacy Policy explains the categories of personal data we process, why we process them, how long we retain them, the parties with whom they may be shared and the choices available to individuals.

2. Personal data we collect

We may collect identity and contact data such as name, email address, organisation, role, country, phone number and billing details; account data such as password hash, verification status, login times and session history; transaction data such as order number, product, price, currency, payment status, payment-provider references and refund status; technical data such as IP address, browser, device, security events and download history; learning data such as reading progress, bookmarks, notes, quiz attempts and certificates; communications data such as support tickets, reviews, institutional enquiries and newsletter preferences; and compliance data such as policy acceptance, privacy requests, audit records and suspected misuse investigations.

We do not intentionally store full payment-card details. Payment information is entered into the secure environment of the selected payment provider. We retain only the references and status information required to reconcile and support the transaction.

3. Why we use personal data

We process data to create and secure accounts; complete purchases; generate personalised PDFs; deliver downloads; issue receipts and invoices; provide customer support; maintain reading and learning features; administer institutional licences; detect fraud and unauthorised distribution; comply with tax, accounting and legal obligations; improve publications and user experience; communicate essential service information; and, with appropriate permission, send educational or promotional communications.

4. Personalised watermarking and content protection

A purchased PDF may display the buyer’s name, email address, order number and purchase date on every page. A unique fingerprint may also be embedded in the file record. Watermarking is used to fulfil the licensed purchase, discourage unauthorised redistribution, identify the correct customer copy, resolve support issues and protect intellectual property. Access to watermark records is restricted to authorised personnel and is logged where appropriate.

5. Legal bases and consent

Depending on the applicable law and context, processing may be necessary to perform a contract, comply with a legal obligation, protect legitimate interests such as security and copyright enforcement, establish or defend legal claims, protect vital interests, or act on consent. Where consent is used, it may be withdrawn for future processing without affecting processing already lawfully completed.

6. Sharing and service providers

We may share limited information with payment processors, hosting and infrastructure providers, email delivery providers, analytics and security providers, professional advisers, auditors, regulators and authorities where legally required. Service providers are expected to process data only for authorised purposes and to apply suitable security measures. We do not sell personal data to advertisers.

7. International transfers

Some service providers may operate in another country. Where personal data is transferred internationally, we will use a lawful transfer mechanism and proportionate safeguards appropriate to the jurisdiction and the nature of the information.

8. Retention

Account and transaction records are retained for as long as necessary to provide access, comply with financial and legal obligations, handle disputes and protect intellectual property. Support tickets are retained according to their relevance and sensitivity. Marketing preferences are retained until withdrawal and for a limited suppression period so that an unsubscribe request can be honoured. Security logs are retained for a proportionate period based on risk. When data is no longer required, it is deleted, anonymised or securely archived.

9. Security

Measures include encrypted transport, secure password hashing, least-privilege administration, rate limiting, audit logs, private file storage, expiring download tokens, restricted database access, backups and monitoring. No method is completely risk-free, but we review controls and respond to credible incidents.

10. Your rights

Subject to applicable law, you may request access, correction, export, deletion, restriction, objection, consent withdrawal or information about a decision affecting you. We may need to verify identity and may retain limited information where required by law, necessary to complete a contract, or needed to establish or defend legal claims. Requests can be submitted from the customer account or through the Contact page.

11. Children

The platform is intended for adults and older learners engaged in legal study or professional development. It is not directed to young children. Institutional customers responsible for minors must ensure appropriate authority, notices and safeguards.

12. Updates and contact

The current version and effective date appear on this page. Material changes may be announced through the website, account or email. Privacy questions and requests may be submitted to the privacy contact shown on the Contact page.