Privacy Policy

1. Introduction

smartlegal Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website smartlegal.world or use our digital learning platform services.

We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws. Our registered office is located at Grafton Street 92, Galway, H62 3188, Ireland.

2. Data We Collect

We may collect and process the following types of personal data about you through various means including when you register for our services, contact us, or use our platform. The data we collect includes:

• Identity Information: First name, last name, username, and similar identifiers
• Contact Information: Email address, telephone number, postal address
• Technical Information: IP address, browser type, device information, operating system
• Usage Information: Information about how you use our website and services
• Profile Information: Professional background, learning preferences, course progress
• Communication Information: Records of correspondence when you contact us

3. How We Use Your Information

We use the personal data we collect for various purposes. How we use your information depends on which services you use and how you interact with us. We use your data to:

• Provide, maintain, and improve our digital learning platform and services
• Process your registration and manage your account
• Deliver course content and track your learning progress
• Communicate with you about our services, updates, and promotional offers
• Respond to your enquiries and provide customer support
• Ensure the security and integrity of our platform
• Comply with legal obligations and resolve disputes
• Conduct analytics to improve our services and user experience

4. Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

5. Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases:

• Contract Performance: To provide our services and fulfil our contractual obligations
• Legitimate Interests: To improve our services, ensure security, and conduct business operations
• Consent: For marketing communications and certain cookies (where required)
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With service providers who assist us in operating our platform and delivering services
• When required by law, regulation, or legal process
• To protect our rights, property, or safety, or that of our users
• In connection with a business transaction such as a merger or acquisition
• With your explicit consent for specific purposes

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. The data retention periods vary depending on the type of information and the purpose for which it is processed. Generally, we retain account information for the duration of your relationship with us plus a reasonable period thereafter to comply with legal obligations.

9. Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to certain types of processing, including direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the contact information provided below.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, please note that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Supervisory Authority

If you believe we have not handled your personal data in accordance with applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority. In Ireland, this is the Data Protection Commission (DPC).