This policy explains what personal data The Student Lawyer collects, why, who we share it with, and what your rights are.
Who we are
The Student Lawyer is a legal-careers platform operated by AllAboutGroup Holdings Ltd (company number 06527117), registered office Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA. We are the data controller for the personal data described here.
You can contact us about your data at mydata@allaboutgroup.org.
What personal data we collect
Account details: your name, email address, password, and your phone number if you choose to give it.
Education and plans: the university or college you attend or attended, your academic stage, and the next step or course you are considering (for example the SQE, a paralegal role, or CILEX).
Path-fit quiz: if you take the quiz, we collect your answers and the readiness result we calculate from them.
Diversity information (special-category data): where you choose to provide it, and only with your separate explicit consent, we collect data such as ethnicity, gender, disability and whether you identify as LGBTQ+, and socio-economic background. This is internal-only and is described separately below.
Usage and device data: when you use the site we collect data about how it is used, including pages visited, engagement, your device, browser and operating system, and your IP address and approximate location. We build a summary of your engagement over time to understand and improve the platform.
How we collect it
Directly from you, when you register, take the quiz, or fill in a form.
Automatically, through cookies and similar technologies for analytics. Analytics only run after you consent through our cookie banner (see our Cookie Policy).
Why we use it, and our lawful basis
To run your account and send you The Weekly Edge and related updates: on the basis of the consent you give at registration.
To understand and improve the platform through analytics: on the basis of your consent to analytics cookies. We rely on our legitimate interests for keeping the site and your account secure.
To share your data with a named partner: only on the basis of your separate, explicit consent for that partner (see below).
To process any diversity information you provide: on the basis of your explicit consent under Article 9 of the UK GDPR.
The Weekly Edge and marketing
When you register you can consent to receive The Weekly Edge and marketing from us. Our newsletter is delivered using Beehiiv, an email platform. You can withdraw your consent at any time using the unsubscribe link in any email or by contacting us. Withdrawing does not affect anything we did before you withdrew.
Sharing your data with partners
We never share your personal data with a partner unless you have given separate, explicit consent for that named partner. At launch the only such partner is BPP University. Where you consent, we may share your basic details (such as name, email, phone, university and study stage) with BPP University so they can contact you about relevant courses by email, text or phone.
This consent is optional, is recorded with its date and exact wording, is kept separate from your newsletter consent and from any diversity data, and can be withdrawn at any time.
Diversity data
Any diversity information you choose to give is used internally only, in aggregate, to understand and improve access to the profession. It is never shared with any partner, and is never used to score, rank or profile you for any decision.
Service providers we use
We use a small number of trusted providers to run the platform, each only processing data as needed to provide its service:
Supabase, for secure hosting of your account data, authentication and our database (data held in the EU).
Beehiiv, to deliver The Weekly Edge newsletter.
PostHog, for product analytics (data held in the EU).
Google Analytics 4, for website analytics.
Google reCAPTCHA, to protect our forms from automated abuse.
Cookiebot, to manage your cookie consent.
Vercel, for website hosting and content delivery.
Where your data is stored, and international transfers
Your account data is stored with Supabase in the EU, and our product analytics with PostHog are held in the EU. Some providers (such as Google for Analytics and reCAPTCHA, and Beehiiv) are based in the United States.
Where personal data is transferred outside the UK or EEA, we rely on the safeguards approved under the UK GDPR, such as the UK International Data Transfer Agreement or Standard Contractual Clauses. You can contact us for more detail.
How long we keep it
We keep your account data for as long as your account is active, and we keep consent records for as long as we need them to evidence your consent. We delete or anonymise personal data when it is no longer needed.
Age restriction
You must be at least 13 years old to register with The Student Lawyer. If we become aware that someone under 13 has registered, we will remove their account and personal data.
Your rights
You have the right to access your data, to have it corrected or deleted, to object to or restrict processing, to data portability, and to withdraw consent at any time. You can also complain to the Information Commissioner (the ICO) at ico.org.uk.
How to exercise your rights
To exercise any of your rights, contact us at mydata@allaboutgroup.org, or by post at Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA.