Privacy Policy

1. Introduction

This Privacy Policy explains how Diary of a Legal Academic (“we,” “us,” “our,” or “the website”) collects, uses, stores, and protects your personal data. We are committed to protecting your privacy and ensuring you have a positive experience on our website.

This policy applies to all users of diaryofalegalacademic.co.uk and is compliant with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant UK data protection laws.

2. Data Controller

Diary of a Legal Academic
Dr Nelson A. Agbor, AFHEA
Certified Human Rights Consultant
V. Lecturer, Birmingham City University

If you have any questions about this privacy policy or how we handle your data, please contact us at:
Email: nelson@diaryofalegalacademic.co.uk

3. Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so. Our lawful bases include:

• Consent: You have given us explicit consent (e.g., newsletter signup)
• Contractual Necessity: Processing is necessary to fulfil an agreement with you
• Legal Obligation: We are required by law to process your data
• Legitimate Interests: We have a legitimate business interest that does not override your rights
• Public Task: Processing is necessary in the public interest

4. What Data We Collect

4.1 Newsletter Subscribers

• Email address
• Name (optional)
• Preferences regarding content topics and frequency
• Engagement data (opens, clicks)

4.2 Contact Form Submissions

• Name
• Email address
• Subject matter
• Message content
• Any other information you choose to provide

4.3 Website Usage Data

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Referral source
• Device information
• Approximate location (country/region level only)

This data is collected through cookies, analytics tools (Google Analytics), and server logs.

4.4 Social Media

If you interact with us on social media platforms (Facebook, Twitter, LinkedIn), we may collect your public profile information, comments and messages you send us, and engagement metrics.

5. How We Use Your Data

5.1 Newsletter Delivery

• Sending you regular updates on legal scholarship and commentary
• Personalising content based on your preferences
• Monitoring engagement (opens, clicks)
• Improving newsletter content and frequency

5.2 Communication

• Responding to your enquiries
• Providing information you request
• Sending administrative updates

5.3 Website Improvement

• Analysing user behaviour and website performance
• Identifying technical issues
• Enhancing user experience
• Understanding traffic patterns

5.4 Legal and Compliance

• Complying with legal obligations
• Defending legal claims
• Ensuring website security

5.5 Legitimate Interests

• Marketing our services and content (where you have not opted out)
• Protecting against fraud and misuse
• Maintaining website security

6. Who We Share Your Data With

We do not sell your personal data to third parties. However, we may share your data with:

6.1 Service Providers

• Email marketing platforms (e.g., Mailchimp, ConvertKit)
• Analytics providers (Google Analytics)
• Website hosting providers
• Payment processors (if applicable)

These processors are contractually bound to process data only as instructed and to maintain appropriate security standards.

6.2 Legal Requirements

• Law enforcement (if legally required)
• Government authorities (if compelled by law)
• Courts or tribunals (if required by legal process)

6.3 Website Owners/Partners

• Birmingham City University (where Dr Agbor’s institutional affiliation is relevant)
• Other organisations only with your explicit consent

7. International Data Transfers

Most of your data is processed and stored in the United Kingdom. However, some service providers may be located outside the UK/EU. Where data is transferred internationally, we ensure:

• Adequate safeguards are in place (Standard Contractual Clauses, adequacy decisions)
• Compliance with UK GDPR requirements
• Your data protection rights are preserved

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

Newsletter Subscribers:

• Data retained while you remain subscribed
• Email addresses retained for 12 months after unsubscribe (for compliance purposes)
• Engagement data deleted after 12 months

Contact Form Submissions:

• Retained for 3 years (to respond to follow-up enquiries)
• Deleted after 3 years unless you request otherwise

Website Analytics:

• Retained for 24 months (Google Analytics default)
• Aggregated data retained indefinitely

Cookie Data:

• Session cookies deleted when you close your browser
• Persistent cookies retained for up to 12 months

If you request deletion, we will remove your data within 30 days unless we have a legal obligation to retain it.

9. Your Rights

Under UK GDPR, you have the following rights:

9.1 Right of Access

You can request a copy of the personal data we hold about you within 30 days of your request.

9.2 Right of Rectification

You can request correction of inaccurate or incomplete data.

9.3 Right of Erasure

You can request deletion of your data, subject to certain exceptions (legal obligations, legitimate interests).

9.4 Right to Restrict Processing

You can request that we limit how we use your data while we verify its accuracy or validity.

9.5 Right to Data Portability

You can request your data in a structured, commonly used, machine-readable format.

9.6 Right to Object

You can object to processing for marketing, profiling, or legitimate interests purposes.

9.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time (without affecting prior processing).

9.8 Rights Related to Automated Decision-Making

You have rights regarding decisions made by automated processes that significantly affect you.

To exercise any of these rights, please contact us at: nelson@diaryofalegalacademic.co.uk

We will respond within 30 days (extendable to 90 days for complex requests).

10. Unsubscribe from Newsletter

You can unsubscribe from our newsletter at any time by:

• Clicking the unsubscribe link in any email we send
• Emailing us at nelson@diaryofalegalacademic.co.uk
• Updating your preferences on our website

We will remove you from our mailing list within 10 business days.

11. Cookies and Tracking

11.1 What Are Cookies?

Cookies are small text files stored on your device that track your activity on our website.

11.2 Cookies We Use:

Essential Cookies (always active)

• Session management
• Security and fraud prevention
• User preferences (language, accessibility)

Analytics Cookies (with consent)

• Google Analytics (to understand traffic patterns)
• Third-party analytics tools
• Heatmaps and user behaviour tracking

Marketing Cookies (with consent)

• Retargeting/remarketing pixels
• Social media tracking
• Newsletter engagement tracking

11.3 Cookie Management

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, accept only certain types, or delete existing cookies.

Note: Disabling essential cookies may affect website functionality.

12. Security

We take data security seriously and implement appropriate technical and organisational measures:

• Encryption: Data in transit uses SSL/TLS encryption (HTTPS)
• Access Controls: Only authorised personnel access personal data
• Secure Storage: Data stored on secure, password-protected servers
• Regular Audits: Periodic security assessments
• Incident Response: Procedures for detecting and responding to data breaches

However, no system is completely secure. We cannot guarantee absolute security of your data.

13. Data Breach Notification

If we discover a data breach affecting your personal data, we will:

• Notify you without undue delay (within 30 days where feasible)
• Provide information about the breach and steps you can take
• Notify the UK Information Commissioner’s Office (ICO) if the breach poses high risk

14. Children’s Data

We do not intentionally collect personal data from children under 13. If we discover we have collected data from a child under 13, we will delete it immediately.

For children aged 13-18, we process data only with parental consent (or the consent of those with parental responsibility).

15. Third-Party Links

Our website may contain links to third-party websites. This privacy policy applies only to our website. We are not responsible for the privacy practices of external sites. Please review their privacy policies before providing personal data.

16. Marketing and Promotional Communications

16.1 Newsletter

You have given us consent to send newsletter updates. You can withdraw this consent at any time using the unsubscribe link in our emails.

16.2 Legitimate Interest Marketing

We may occasionally contact you about new content or services based on legitimate interests, unless you have opted out.

16.3 Opting Out

You can opt out of all marketing communications by:

• Clicking unsubscribe links in emails
• Emailing nelson@diaryofalegalacademic.co.uk
• Using your newsletter preference centre

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in data protection law, updates to our practices, or changes to third-party service providers.

We will notify you of material changes by:

• Email (for newsletter subscribers)
• Prominent notice on the website
• Posting the updated date at the top of this policy

Your continued use of the website after changes constitutes acceptance of the updated policy.

18. Data Protection Officer / Complaints

While we do not have a designated Data Protection Officer, you can direct data protection enquiries to: nelson@diaryofalegalacademic.co.uk

If you have a complaint about how we handle your data, you have the right to lodge a complaint with:

19. Contact Us

For questions about this Privacy Policy or to exercise your data rights:

Legal Information

This Privacy Policy is governed by:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations 2003 (as amended)
• UK Common Law

This policy is effective as of February 2026 and applies to all users of diaryofalegalacademic.co.uk.