Personal Data: EEA Terms

Personal Data: EEA Terms

If you are in the European Economic Area, and more generally in respect of our collection and processing of personal data that is subject to the General Data Protection Regulation (EU) 2016/679 (referred to herein as “GDPR”) or similar implementing legislation in the UK, we have set out below additional information about the different kinds of personal data about you that we may collect, use, store and transfer and how we collect such data.

Personal data collected on our website

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data includes name, username or similar identifier, marital status, title, date of birth and gender;
  • Contact Data includes address, email address and telephone numbers.
  • Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Website.
  • Usage Data includes information about how you use our website.
  • Marketing and Communications Data includes your preferences in receiving marketing information from us and our third parties and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with the Website Privacy Notice.

On the Website, we do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data) and we do not collect any information about criminal convictions and offences.

How is your personal data collected?

We use different methods to collect data from and about you, including through the methods set out below.

Direct interactions. You may give us your Identity Data and Contact Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

  • Use the “Contact Us” form on our website;
  • subscribe to receive publications;
  • request marketing information to be sent to you; or
  • give us some feedback.

Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our Cookie Policy for further details.

Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:

  • analytics providers who could be based inside or outside the US or EU;
  • advertising networks who could be based inside or outside the US or EU;
  • search information providers who could be based inside or outside the US or EU; and
  • Identity Data and Contact Data from public sources, data brokers or aggregators who could be based inside or outside the US or EU.


Please note that if you apply for a job with us through the careers page on our website, additional terms will apply to the processing of your personal data if outside the United States. Those additional terms will be notified to you on the careers page before you submit your personal information.


If you have any questions about how you use your data, please contact us at

If you believe that we have not complied with any of our obligations under data protection laws in the UK, please let us know. You have the right to lodge a complaint with the Information Commissioner’s Office (ICO). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.