Discover Insights

Harmonizing Global Compliance with Confidence in 2026

Privacy Policy

PRIVACY AND DATA PROTECTION AT UNITEDLEX
Updated 1 July 2026 – Version 4.1

This Privacy Statement reflects the UnitedLex commitment to provide best-in-class privacy and data protection.  

This Privacy Statement explains what information we collect about you, why and how we collect, use, process and store (hereto referred to as “process” or “processing”) this information so that we can deliver the best experience that we can.  

SCOPE

This Privacy Statement applies to UnitedLex Corporation and UnitedLex Professional Services, and all UnitedLex-owned websites, domains and services, and those of our wholly owned subsidiaries (“UnitedLex”), except where a privacy policy or statement specific to a particular UnitedLex service or program may supersede or supplement this Privacy Statement.  

This Privacy Statement outlines how we handle information relating to UnitedLex’s customers including those receiving outsourcing and other services, prospective customers, business partners, employees, former employees and job applicants, and any other individuals we engage with in the context of our business (‘you’, ‘your’). 

“Personal Information” or “Personally Identifiable Information” (PII) is any information that identifies a natural person or from which a natural person could be identified. This may include a name, address, telephone number, email address and other private personal attributes.  

In relation to your engagement with us or use of our services, communication with us, interaction with our website, visits to our offices or attendance to our events, among other activities further described within this Privacy Statement, we may process Personal Information relating to you.  This Privacy Statement summarizes our Personal Information processing practices and your related rights. 

From time-to-time UnitedLex may provide specific Privacy Statements which may take precedence over this Statement.  

This Privacy Statement also provides notice as set out in the requirements of certification to the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce, hereto collectively also referred to as the DPF, of which UnitedLex is a participant.  You will find further information on the DPF in the Data Privacy Framework section of this Privacy Statement.  

JURISDICTION 

This Privacy Statement applies to those jurisdictions in which UnitedLex operates across the world, including but not limited to USA, EU, UK, and India.  

In the development of UnitedLex’s privacy policies and standards, we respect and take into account the major privacy and data protection frameworks around the world and any amendments applied thereto from time-to-time. 

MULTIJURISDICTIONAL TERMINOLOGY 

For the purposes of this Notice: 

1.  “Controller” has the meaning given under the GDPR and UK GDPR.

  • For jurisdictions applying the CCPA/CPRA, references to “Controller” shall be interpreted as references to a “Business”.
  • For jurisdictions applying the India DPDP Act, references to “Controller” shall be interpreted as references to a “Data Fiduciary”.

2. “Processor” has the meaning given under the GDPR and UK GDPR. 

  • For jurisdictions applying the CCPA/CPRA, references to “Processor” shall be interpreted as references to a “Service Provider”.
  • For jurisdictions applying the India DPDP Act, references to “Processor” shall be interpreted as references to a “Data Processor”.

3.“Data Subject” has the meaning given under the GDPR and UK GDPR. 

  • For jurisdictions applying the CCPA/CPRA, references to “Data Subject” shall be interpreted as references to a “Consumer”.
  • For jurisdictions applying the India DPDP Act, references to a “Data Subject” shall be interpreted as references to a “Data Principal”.

4. “Personal Data” shall be interpreted consistently with the scope of personal information defined under the GDPR/UK GDPR, CCPA/CPRA, and the DPDP Act, depending on the jurisdiction in which the individual resides. 

5. Where this document refers to rights of the ‘Data Subject’, this refers to the rights granted to individuals under the relevant local law, including Data Subject rights under the GDPR/UK GDPR, Consumer rights under the CCPA/CPRA, and Data Principal rights under the DPDP Act. 

CONTROLLER

Where applicable UnitedLex is considered the controller of personal data. Our headquarters are located in Kansas, USA. We also have offices in Europe and India. 

Our point of contact in each jurisdiction is as follows:

LocationOffice Address
USA11501 Outlook Street,
Suite 450, Overland Park,
KS 66211, USA
EU16a Dr G. M. Dimitrov Blvd.
Izgrev Distr., Sofia 23,
Bulgaria
UK42 New Broad Street
London EC2M 1JD
UK
INDIA1st Floor, Tower A, DLF Building No. 6 (SEZ)
W Block, Gurgaon, HR,
India 122002

Data subjects from USA, India and other jurisdictions can reach out to our Global Privacy Officer at privacy@unitedlex.com. 

For EU, UK and Swiss data subjects you may also contact our Global Privacy Officer, or directly send an email to our European Data Protection Officer at: dpo.europe@unitedlex.com 

PROCESSOR

In certain circumstances, UnitedLex may be a processor of personal data on behalf of a controller. In such cases, we will only process personal data based on the controller’s documented instructions, maintain confidentiality, implement appropriate technical and organisation security measures, and assist the controller in fulfilling data subject rights. Upon termination of services, we will delete or return personal data, unless retention is required by applicable law. We will also have a written contract (data processing agreement) in place with the controller outlining these terms.  

PROCESSING OF PERSONAL INFORMATION

The following table summarizes the different types of Personal Information that we may collect and/or process about you, either directly from you, or indirectly from other sources:  

Identification dataInformation about your identity, such as your name, signature, date and place of birth, nationality and National Identification and/or Social Security Number.
Verification dataPhotographic identification and verification such as copies of your passport, passport number, driver’s license, national identity card, address verification and utility bills.
Contact dataContact information such as your postal address, email address, phone number, fax number and other contact details.
Marketing and Communications dataInformation about your marketing preferences and communications. Personal data you provide to us in your communications with us.
Professional Information dataInformation about your education, qualifications, professional role and background. Information concerning professional bodies checks such as from FCA or foreign regulator. Information related to Companies Registration Office Searches, registers of Directors or Officers, and other public registers.
Sensitive or Special Category DataWhere applicable, information relating to Criminal Convictions and offences, health information (such as in the context of litigation documents or employment).
Device DataManufacturer and model, operating system, IP address, MAC address and unique identifiers of the device, browser used to access the website, and estimate of your location from your IP address.
Usage DataInformation about how you engage with our website such as the types of content that you view or actions you take on our website, and the time, frequency, and duration of your activities.
Video, Photo and AudioCCTV Images, pictures and videos in which you are present. Sound recordings of you, including transcriptions where appropriate.

UnitedLex may process Personal Information through a variety of means such as in writing or paper form, electronic means such as email and file transfer, chat and messaging systems, video and audio calls and meetings, technical and online forums, forms and tools including webinars hosted by UnitedLex, through hiring and employment processes, through the employment application process, and through verbal and virtual interactions with UnitedLex personnel.  

UnitedLex may receive, or be directed to collect, Personal Information from clients (which act as controller “data controller-client”) as part of UnitedLex’s provision of litigation support and other consulting services. In such instances, UnitedLex acts at the direction of the data controller-client, provided that such directions are not inconsistent with the DPF principles or other applicable law, regulation or corporate policy.   

In providing these services, UnitedLex may receive and process Personal Information relating to individuals located in the European Union, the United Kingdom, Switzerland, the United States, India, and other jurisdictions in which our clients operate. Where Personal Information relates to individuals in the EU, UK, or Switzerland, UnitedLex processes such data in accordance with the GDPR, the UK GDPR, and applicable Swiss data protection laws.  

Where Personal Information relates to individuals in the United States, UnitedLex processes such data in compliance with applicable U.S. federal and state privacy laws, including (where relevant) the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other state privacy statutes governing the collection, use, disclosure, and protection of Personal Information.  

Where Personal Information relates to individuals in India, all processing is undertaken in compliance with the Digital Personal Data Protection Act, 2023, including adherence to purpose limitation, data minimisation, and the implementation of reasonable security safeguards. UnitedLex will similarly apply the relevant privacy and data protection requirements of any other jurisdiction in which the Personal Information originates. 

USE OF PERSONAL INFORMATION

These tables provide an overview of the various ways UnitedLex uses Personal Information. In general, we limit data processing to what is “reasonably necessary” for the disclosed purposes. Where a lawful basis is required in a specific jurisdiction this is called out in the tables. Some jurisdictions (such as the United States) do not require organisations to identify a “lawful basis” for processing Personal Information. For those jurisdictionsUnitedLex processes Personal Information in accordance with applicable privacy laws, including purposespecific disclosures, consumer rights, and restrictions on the sale or sharing of Personal Information. 

1. General 

Processing PurposeCategory of Personal InformationLawful Basis (Europe)Lawful Basis (India)
Corresponding with you in line with any requests you may have made, and providing support.Contact dataLegitimate interest: Allowing us to run our business and effectively correspond with you and allow us to troubleshoot issues.Consent or Legitimate Use as permitted under Section 7 of DPDP.
Internal and external audits and, where necessary, investigations.Identification data
Verification data
Contact data
Financial data
Marketing and Communications data

Legal or regulatory obligation (such as applicable statutory and internal audit requirements).

Legitimate Interests: pursuing our corporate and social responsibility objectives; managing and operating the affairs of the business.

Legal obligation to disclose data to the State.
Establishing, exercising or defending legal claims.Identification data
Verification data
Contact data
Financial data
Marketing and Communications data
Legitimate Interests: making and defending against legal claims.Compliance with orders or judgments.
Processing any subject rights exercised, including verification, reviewing and actioning a request.Identification data
Contact data
Financial data
Marketing and Communications data
Special Category / Other data
Legal or regulatory obligation (such as applicable Data Protection Legislation).Legal obligation under DPDP to respond to Data Principal requests.
Maintaining appropriate business records.Identification data
Verification data
Contact data
Financial data
Marketing and Communications data
Legal obligation (such as tax, corporate law, employment law).Consent.
Monitoring or Recording of Calls, Chats and Other Interactions.Contact Data
Video and Photo
Audio
Legitimate Interest: Ensuring a smooth operation of the Company’s activities. Consent where required.Consent.

2. Processing of Personal Data related to the services we provide to Clients (such as litigation or other consulting services)

Processing PurposeCategory of Personal InformationLawful Basis (Europe)Lawful Basis (India)
Establishing your identity, and providing our services to you.Identification data
Verification data
Contact data
Other publicly available information about directors of a company

Performance of our contract with you; or for the purposes of entering into a contract with you.

Legitimate interests: to administer the client relationship.

Consent or Legitimate use (including performance of contract with Data Principal).
To respond to or evaluate any queries or complaints in relation to our dealings with your organization.Identification data
Contact data
Legal Data
Legitimate interests: to manage the Advisor-Advisee relationship; identifying ways to improve and expand business.Consent or Legitimate Use.
Complying with our legislative and regulatory obligations in connection with our dealings with your organization and only insofar as required by law.Identification data
Verification data
Contact data
Financial data
Special Category / Other data
Legal or regulatory obligation (such as Fraud and Tax Evasion laws, etc.).Legal obligation to disclose data to the State or Legitimate Use (including compliance with legal judgments).
Fulfilling your Transaction request.Contact Data
Legal Data

Performance of our contract with you or for the purposes of entering into a contract with you.

Legitimate interests: to administer the client relationship.

Consent.
For direct marketing purposes (that is, providing information on products and services) or for quality control, business and statistical analysis, market research, tracking fees and costs, customer service, training, and related purposes.Identification data
Contact data
Shareholder data
Marketing and Communications data
Legitimate interests: identifying ways to improve and expand business; receiving feedback. Consent where opt-in is required for direct marketing.Consent.

3. Providing Services in the Social Computing Environment 

Processing PurposeCategory of Personal InformationLawful Basis (Europe)Lawful Basis (India)
Create an account for our Social Computing toolsContact Data
Identification Data
Legitimate interest: register users on the Company’s platform.Voluntary Provision of Data.

4. Recruitment 

Processing PurposeCategory of Personal InformationLawful Basis (Europe)Lawful Basis (India)
Informing prospective candidates of new job openings, whether through employee referral or our network of candidates.Identification data
Contact data
Professional Information data
Any information you may wish to disclose in your CV
Legitimate Interest: to allow the Company to search for the best talent.Consent (for any outreach communication).
Voluntary Provision of Data.
Receiving your CV through an external recruitment software / our website, and processing your applications to:

– determine terms of employment with us;

– issue you with a contract and manage the recruitment process.

Identification data
Contact data
Professional Information data
Any information you may wish to disclose in your CV
To enter into / performance of a contract.Consent or Voluntary Provision of Data.
Ascertain if you may be a suitable candidate for any of the open positions we have.Identification data
Contact data
Professional Information data
Any information you may wish to disclose in your CV
Legitimate interest: Assessing the suitability of CVs submitted to us by you.Legitimate Use (employment related purpose) or consent where required.
Considering and responding to any queries you may submit.Any information you may provide in your submissionLegitimate interest: Considering and responding to any requests, comments, etc. submitted to us by you.Consent.

 

5. Website Visitor 

Processing PurposeCategory of Personal InformationLawful Basis (Europe)Lawful Basis (India)
We use necessary and essential cookies to ensure our website functions and runs smoothly.Device Information
Usage Information
Legitimate interest: To allow us to run our website.Legitimate Uses
We use performance and analytics cookies to comprehend how visitors interact with our website.Usage InformationLegitimate Interest: To allow us to understand areas of our website that might need improvement. Consent: for analytics purposes.Consent.
We use Marketing cookies to ensure that relevant advertisements are shown.Usage InformationConsent where opt-in is required for direct marketing.Consent.

6. Visitors to our premises, and attendees to events 

Processing PurposeCategory of Personal InformationLawful Basis (Europe)Lawful Basis (India)
Keeping a record of visitors within our premises by using a logbook.Identification DataLegitimate Interest: Ensuring premises security.Legitimate Use (for security and safety purposes)
Using closed-circuit television (CCTV) to assist in the investigation of security incidents and to promote and protect the health and safety of individuals.Video and PhotoLegitimate Interest: Ensuring premises security.Legitimate Use (Clear notice of CCTV monitoring is displayed).
Taking attendance at events.Identification DataLegitimate Interest: Ensuring attendees are checked in to events.Legitimate Use (necessary for event administration).
Where there is expression of interest in our services, keep a record of your contact details.Contact DataLegitimate interests: identifying ways to improve and expand business; receiving feedback. Consent where opt-in is required for direct marketing.Consent

7.  Special Category or Sensitive Data 

Processing PurposeCategory of Personal InformationLawful Basis (Europe)Lawful Basis (India)
Litigation SupportInformation relating to Criminal Convictions and offences, health informationEstablishment, exercise or defence of legal claims. Criminal data processed under GDPR Art. 10 with appropriate safeguards.Legitimate Use or Consent or Legal obligation to disclose data to the State.
EmploymentHealth InformationEmployment LawLegitimate Use (employment related purpose) or consent where required.

SHARING OF PERSONAL INFORMATION

UnitedLex will not sell, rent or lease your Personal Information to others.  

As a global organization with business processes and technical systems that cross borders, UnitedLex may share information about you within UnitedLex and transfer it to countries where we do business in accordance with this Privacy Statement.  

Our Privacy Statement and our internal policies and practices are designed to provide a globally consistent level of protection for Personal Information all over the world. Even in countries whose laws provide for less protection for your information, UnitedLex will handle and protect your information in the manner described in this Privacy Statement.  

To support its global business operations and deliver its services effectively, UnitedLex may share personal information with trusted service providers and business partners located in various countries. These third parties assist with a range of functions, including but not limited to IT services and infrastructure support, cloud storage providers, human resources and recruitment platforms, payroll and benefits administrators, legal and compliance consultants, marketing and analytics providers, and professional advisors. UnitedLex ensures that such transfers are governed by appropriate contractual and legal safeguards, including data processing agreements and, where applicable, international data transfer mechanisms such as the EU-U.S. Data Privacy Framework (DPF), Standard Contractual Clauses (SCCs), or equivalent measures under applicable data protection laws. 

It is UnitedLex’s practice to require such service providers and business partners to handle Personal Information and other confidential information in a manner consistent with our policies.  

In the event that UnitedLex undergoes a corporate transaction, such as a merger, acquisition, sale of assets, reorganization, or other business transfer, it may be necessary to disclose or receive personal information as part of the due diligence process or the execution of the transaction. Any such sharing of personal data will be limited to what is relevant and necessary for the transaction and will be conducted in accordance with applicable data protection laws. UnitedLex will take appropriate steps to ensure that any recipient of the information is bound by confidentiality obligations and provides adequate safeguards for the protection of personal data, including through the use of data processing agreements or other legally recognized mechanisms. 

In certain circumstances, Personal Information may be subject to disclosure to government agencies pursuant to judicial proceeding, court order, law enforcement (including national security) or legal process. We may also share your information to protect the rights or property of UnitedLex, our business partners, suppliers or clients, and others when we have reasonable grounds to believe that such rights or property have been or could be affected.  

In the event UnitedLex does transfer personal information it receives under the DPF to third parties acting as agents of UnitedLex, UnitedLex shall:  

a) transfer such Personal Information only for limited and specified purposes, b) ascertain that the third-party agent is obligated to provide at least the same level of privacy protection as is required by the DPF principles,
c) take reasonable and appropriate steps to ensure that the third-party agent effectively processes the Personal Information transferred in a manner consistent with UnitedLex’s obligations under the DPF principles,  
d) require the third-party agent to notify UnitedLex if it makes a determination that it can no longer meet its obligation to provide the same of level of protection as required by the DPF principles,  
e) upon notice, including under point (d) above, take reasonable and appropriate steps to stop and remediate unauthorized processing, and  
f) provide a summary or a representative copy of the relevant privacy provisions of its contract with that third party agent to the Department upon request.   

UnitedLex shall be liable under the DPF if it transfers Personal Information received under the DPF to a third party and such third party processes the Personal Information in a manner inconsistent with the DPF principles, provided that UnitedLex shall not be liable if it can prove it was not responsible for the event giving rise to the applicable damage. 

INTERNATIONAL DATA TRANSFERS

UnitedLex recognizes and respects the varying national laws and obligations and their impact on cross-border data transfers. When transferring Personal Information outside of the country of collection for the purposes identified within this Privacy Statement, UnitedLex will do so in compliance with applicable law. If you are an EU/EEA/UK resident, more information on International Transfers can be found in the EU/EEA/UK Addendum.  

DATA PRIVACY FRAMEWORK

UnitedLex Corporation complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. UnitedLex Corporation has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. UnitedLex Corporation has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Statement and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.   

To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/ 

The following list sets out all U.S entities and subsidiaries of UnitedLex Corporation adhering to the principles of the DPF:  

  • UnitedLex Corporation 
  • UnitedLex Professional Services 

For a complete list of participants in the Data Privacy Framework (DPF) please visit  https://www.dataprivacyframework.gov/list 

As a result, UnitedLex is committed to applying the DPF principles to the processing of Personal Information of individuals in all countries but in particular, individuals residing in EU, Switzerland and UK. 

INFORMATION SECURITY, ACCURACY AND RETENTION

Ensuring the security, confidentiality, integrity and accuracy of Personal Information is a high priority for UnitedLex.  

We have implemented appropriate administrative, technical and physical safeguards to prevent unauthorized access, use or disclosure. We require the same high standard of information security and information management of any third parties we share your data with including through contractual obligations to implement security measures as per the data protection laws.  

UnitedLex has implemented technology, management processes and policies aimed to maintain data accuracy.  

UnitedLex retains personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted under applicable laws and regulations. Retention periods are determined based on legal obligations, contractual requirements, and legitimate business needs. Upon receiving a valid request from a data subject, UnitedLex will cease processing the individual’s personal information unless continued use is legally required—for example, to fulfil contractual obligations, comply with legal or regulatory requirements, resolve disputes, enforce agreements, or protect UnitedLex’s legal rights. Where applicable, data will be securely deleted or anonymized in accordance with our data retention policies and applicable legal standards. 

UnitedLex protects personal data by implementing appropriate technical and organizational measures (“TOMs”), which include, but are not limited to: data encryption in transit and at rest, access controls based on the principle of least privilege, multi-factor authentication, regular security audits and vulnerability assessments, employee training on data protection, secure software development practices, physical security controls at data centers, incident response procedures, and data backup and recovery protocols. 

YOUR RIGHTS WITH RESPECT TO YOUR PERSONAL INFORMATION

According to applicable laws, UnitedLex provides individuals with access to Personal Information and the ability to review and correct the data or ask for anonymization, blockage, or deletion, as applicable. To submit your access request, please contact the UnitedLex Global Privacy and Data Protection Office at privacy@unitedlex.com.  

For more information on your rights in Europe, USA and India please refer to the relevant addendums below.  

DISPUTE RESOLUTION, RECOURSE, ENFORCEMENT AND LIABILITY

UnitedLex is committed to resolve any complaints you may have in relation to your privacy and UnitedLex’s processing of your Personal Information. Please send any privacy related complaints or requests, including request for access to information to privacy@unitedlex.com. European individuals (those in the EU, EEA, UK and Switzerland) may also contact our European Data Protection Officer (DPO) at dpo.europe@unitedlex.com  

Where applicable, individuals may also reach out to their national privacy or data protection authorities and ask for their support or may utilize the dispute resolution procedures available to them under the Data Privacy Framework.  

Further, under certain circumstances, if your complaint pertaining to personal data transfers under the DPF have not been resolved to your satisfaction by any other complaints mechanism under the DPF, you have the possibility to invoke binding arbitration. For more information on this mechanism please visit the DPF website which you can find here Data Privacy Framework 

For the purpose of compliance with the DPF, the Federal Trade Commission has jurisdiction of UnitedLex.  

UnitedLex is committed to coordinating and collaborating with foreign regulators, such as EU, UK and Swiss data protection authorities.  

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, UnitedLex commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.  

CHILDREN’S PRIVACY

UnitedLex does not knowingly collect or use any Personal Information from children. We do not knowingly allow children communicate with us or engage us for services. While UnitedLex considers the receipt and collection of Personal Information from children to be highly unlikely, we take the privacy of children very seriously. UnitedLex applies the highest applicable standard (typically 16), subject to local legal variations. If you are a parent or legal guardian and become aware that your child has provided us with information, please contact us at privacy@unitedlex.com, and we will work with you to address this issue.  

COOKIES, WEB BEACONS AND OTHER TECHNOLOGIES

A cookie is a file containing a string of information that a web site saves on a visitor’s computer. The visitor’s browser provides this file to the web site operator each time the visitor returns to the information collecting website. When UnitedLex collects cookies or makes use of a browser’s local storage capabilities, they help UnitedLex identify visitors, their usage of the site, and their website access preferences. UnitedLex may also use information derived from cookies or local storage to personalize the visitor’s experience by directing the visitor to information marketing services that may be of interest to the visitor based on their previous website interactions. Visitors will be offered the opportunity to control cookie placement. Visitors who do not wish to have any cookies placed on their computers should set their browsers to refuse cookies before using UnitedLex’s website, with the drawback that certain features of the web site may not function properly without the aid of cookies.  

Some browsers provide the ability to communicate that they do not wish to be tracked while browsing the internet. California law requires companies disclose how do-not-track requests are treated. There is no commercially uniform definition of what “do-not-track” means or how “do-not-track” should be measured or evaluated. UnitedLex’s website does not recognize or respond to browser-initiated “do-not-track” signals. This does not impact website user’s cookie control, which can be managed as described in the previous paragraph.  

Pages on UnitedLex’s website may occasionally embed content from third party sites. UnitedLex’s website also allows for content to be shared through social networks but only at your request. Embedding and sharing content may result in additional cookies being set by those third-party sites. UnitedLex does not control the dissemination of third-party cookies. Please visit these third-party sites and review their privacy and cookie policies if you wish to learn more about their use of cookies and similar tools.  

If you have any additional questions about UnitedLex’s use of a particular cookie, please email privacy@unitedlex.com.  

ONLINE ADVERTISING

UnitedLex sometimes makes use of third-party advertising systems to promote content on its website(s). These services will often make use of cookies and pixel tags to provide targeted advertisements based on your activities and interests. UnitedLex does not permit third parties to advertise on this site, but we do use external sites to advertise our products and services. Please visit these third-party sites for additional details regarding their privacy policies and practices.  

EXTERNAL LINKS

UnitedLex sites or services may provide links to third-party applications, products, services, or websites for your convenience and information. UnitedLex does not control those third-party sites or their privacy practices, which may differ from UnitedLex’s practices. We do not endorse or make any representations about third-party sites and privacy practices. The Personal Information you choose to provide to or that is collected by these third parties is not covered by this UnitedLex Privacy Statement. We encourage you to review the privacy policy of any site you interact with before allowing the collection and use of your Personal Information.  

We may also provide social media features that enable you to share information with your social networks and to interact with UnitedLex and its group companies on various social media sites. Your use of these features may result in the collection or sharing of information about you, depending on the feature. We encourage you to review the privacy policies and settings on the social media sites with which you interact to make sure you understand the information that may be collected, used, and shared by those sites.  

CHOICES AND PRIVACY PREFERENCES

Registration is not required to gain access to UnitedLex websites. However, UnitedLex may offer specific material and information where your subscription is required.  

In this scenario, UnitedLex may collect Personal Information from you including your name, phone number, email address, or other information you choose to provide at various times, for example, when you complete an online form or request or participate in an online community.  

You can make or change your choices about receiving either subscription or general communications at the data collection point, within your account preference settings or by using other methods, which are listed in this Privacy Statement. You may opt-out at any time using the links at the bottom of any email or by emailing UnitedLex’s Global Privacy and Data Protection Office at privacy@unitedlex.com.  

Please note, this option does not apply to communications primarily for the purpose of administering business relationships, including contracts, support, or other administrative and transactional notices where the primary purpose of these communications is not promotional in nature.  

UnitedLex will work in good faith with individuals whose personal information it receives under the DPF that are interested in exercising their right to choose whether their personal information (a) will be disclosed to a third party or (b) used for a purpose that is materially different – or in the case of sensitive information, different – than the purpose for which the personal information was originally collected or subsequently authorized. This may include UnitedLex facilitating communication between the individual and data controller-client from which UnitedLex received the personal information or sensitive information in question.  

In the limited situations where UnitedLex does independently collect personal information as a data controller, including but not limited to employment-related activities, it will offer individuals the opportunity to choose (specifically, opt out of) whether their personal information is (a) to be disclosed to a non-agent third party, or (b) to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. For sensitive information, UnitedLex will give individuals the opportunity to affirmatively and explicitly provide consent (specifically, opt in) to (a) the disclosure of the information to a third party or (b) the use of the information for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. UnitedLex will provide individuals with reasonable mechanisms to exercise their choices should requisite circumstances arise. Questions regarding this section should be directed to the contacts listed below (European Data Protection Officer and/or General Privacy and Data Protection Office).  

NOTIFICATION OF CHANGES AND UPDATES

We will post a notice at the top of this page notifying users when this Privacy Statement was last updated. If we are going to use your Personal Information in a manner different from that stated at the time of collection, we will notify you, and you will have, subject to legal and/or contractual provisions, a choice as to whether or not we can use your Personal Information in such a way.  

INQUIRIES AND CONTACT

We value your opinion, if you have any comments or question about this Privacy Statement, UnitedLex’s handling of your Personal Information, or a possible breach of your privacy you can send an email to the UnitedLex Global Privacy and Data Protection Office at privacy@unitedlex.com.   

European individuals may also contact our European Data Protection Officer (DPO) at dpo.europe@unitedlex.com and may also seek further information, guidance and advice from their local data protection authorities.  

We will treat your requests or complaints confidentially. Our representative will contact you within a reasonable time after receipt of your complaint (and in compliance with any relevant legislation) to address your concerns and outline options regarding how they may be resolved. We will aim to ensure that your complaint is resolved in timely and appropriate manner.