This Website hfw-gdpr.com is owned by Holman Fenwick Willan LLP (HFW), and operated on behalf of HFW by Upskill Online Limited trading as Olive Media (Olive) (together referred to as “we”, “our”, or “us”).

We care about your privacy. This Policy (together with our Website Terms of Use and any other documents referred to in it) explains how we collect and use your information. Please read it carefully.

If you have any questions about this Policy, or if you want to enforce your rights, please contact HFW’s Privacy Officer at justin.glenister@hfw.com or +44 (0)207 264 8223.

Privacy Policies


HFW is a limited liability partnership registered in England and Wales (with registered number OC343361) and is authorised and regulated by the Solicitors Regulation Authority. The firm’s registration number is 509977. HFW's registered office is Friary Court, 65 Crutched Friars, London EC3N 2AE. HFW is registered with the UK Information Commissioner's Office, with registration number Z1842662.

Olive is a limited company incorporated in Ireland with company number 470792, whose registered office is at Unit 5, Red Cow Business Park, Clondalkin, Dublin, D22 HC81. Olive is registered as a data controller with the UK Information Commissioner's Office, with registration number ZA313568. For the purpose of applicable data protection laws, HFW is the data controller of your Personal Information collected through this Website.

“Personal Information” in this Policy means "Personal Data" as defined in the EU General Data Protection Regulation 2016/679(EU). In summary, it means information that identifies you, whether directly or indirectly, including for example your name, gender, address, email address, phone number and any other information that you may voluntarily submit to us, as well as any online identifiers such as your clickstream data or IP address.

We collect Personal Information when you visit our Website, when you sign up for an account, when you fill in contact forms on our Website, when you email, call or write to us, or provide us with information in any other way, including by interacting with us via social media such as Facebook or Twitter.

We also collect information when you use our courses or apps, or if your company has provided your details to us to enable us to provide you with access to and use of our courses or apps.

Each time you visit the Website we may automatically gather the following information:

  1. technical information about your computer such as domain name, browser type and version, operating system and platform, IP address, cookie information and time zone setting; and
  2. information about your visit including the full Uniform Resource Locators (URL) clickstream to, through and from the Website (including date and time), what web pages you visited on the Website and how long you spend on each page, page interaction information (such as scrolling, clicks and mouse-overs), page response times, download errors, traffic data, location data, weblogs, history of resources accessed on the Website, methods used to browse away from the page and information on what websites you visited before accessing the Website.

  3. We also process the following kinds of personal information if you provide it to us, or if your company provides it to us:

  4. Information about you, including your name, job title, address, email and other contact details;
  5. Information about the company you are associated with;
  6. Information about your use of our mobile applications, including information about which pages you view.
  7. Information you provide to us during communications you have with us and with our staff, for example comments or queries about the courses we provide.

We use your Personal Information for the following purposes:

  1. To process and respond to requests, enquiries and complaints received by you, in accordance with our legitimate interest to provide you with a responsive service.
  2. To provide services and products requested and/or purchased by you. We do this as necessary in order to carry out a contract with you, or if our contract is with a company or individual other than you, for the purpose of our legitimate interest to operate a business which offers training courses.
  3. To communicate with you about services and/or products provided to you. We do this as necessary in order to carry out a contract with you, or if our contract is with a company or individual other than you, for our legitimate interest to operate a business which offers training courses.
  4. To update our records and for audit purposes, in accordance with our legitimate interest to operate a business which offers training courses.
  5. To prevent or detect fraud, in accordance with our legitimate interest to do so. Where legally required or where it is in our legitimate interest to do so, to comply with requests from law enforcement and regulatory authorities.
  6. To analyse trends and profiles, for our legitimate interest to aim to enhance, modify, personalise or otherwise improve our services and communications for the benefit of our customers.
  7. To carry out customer satisfaction research, for our legitimate interest to aim to enhance, modify, personalise or otherwise improve our services and communications for the benefit of our customers.
  8. To send you updates on data protection and privacy news and recommend products and services we believe will be of interest to you. If you become a customer we will use our legitimate interest to market to existing clients. If you make enquiries through the website and agree in the contact form to receiving email updates we will send you such updates on the grounds of your consent.
  9. To enable third parties to carry out any of the purposes set out above on our behalf. For this we use our legitimate interest to run our business as efficiently as possible.

The Personal Information we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) as it may be processed by staff or service providers outside the EEA who work for us.

We will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Policy, and that adequate measures are in place if the country in question is not deemed to provide the same level of protection for your data and rights as you would enjoy within the EEA.

For a list HFW's offices outside of the EEA please see HFW's website here: http://www.hfw.com/Our-Offices-and-Global-Work.

Personal data may on occasion be accessed by Olive's service providers located in India and Nepal. Contracts are in place with these service providers, incorporating the European Commission's approved model clauses, to ensure that any personal data involved is safe.

We may disclose your Personal Information to companies within our corporate group. We will not share Personal Information collected through our Website with unrelated third parties, except as provided in this Policy.

We may share Personal Information with companies that we contract with to perform services for us, such as assisting us with administering or troubleshooting our Website, assisting us with the design of our courses, assisting us with our mailing campaigns, providing us with electronic or physical storage services, or other relevant data processing activities. We will only share your information in these circumstances if it is necessary to do so in order for our service providers to perform the service for us. These companies are not authorised to keep or use your Personal Information for any other purpose.

We may disclose your Personal Information to selected third parties such as law enforcement agencies or our professional advisors if we are under a duty to do so in order to comply with any legal obligation, or in order to enforce or apply our Website Terms of Use or other related contracts with you or your company.

If we sell all or any part of our business, the parties which buy it may have access to your Personal Information.

We hold your Personal Information for as long as we need to for legitimate legal or business reasons, including to comply with any regulatory obligations. Personal Information collected through this Website may be kept as follows:

  • We employ the services of Google Analytics and Hotjar (the Analytics Companies). Further information concerning the nature of the services which they provide to us is set out in our Cookie Policy. The Analytics Companies keep anonymised information concerning your visits to the website on their servers, in accordance with their respective privacy policies here: https://www.google.com/intl/en/policies/privacy/ and https://www.hotjar.com/privacy.
  • Information you give us when you enquire about our courses, including for example your contact details and any questions you ask us, will be kept by HFW for one year if you do not purchase one of our courses, request to receive our email updates or otherwise instruct us to act for you;
  • If you decide to purchase one of our courses, indicate that you wish to receive email updates from us, or you ask us to provide you with legal advice we will keep your information for at least as long as our relationship with you is active, and for any further period as required by our retention policy.
If you would like more detailed information about our retention policy, please email us at justin.glenister@hfw.com, or use one of the other methods in the "Contact us" section below.

We aim to ensure that your Personal Information is secure. In order to prevent unauthorised access or disclosure, we have put in place appropriate physical, technical and organisational measures to safeguard and secure the Personal Information we collect. Our service providers are required to do the same.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Information once we receive it, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your Personal Information, we will use strict procedures and security features to try to prevent unauthorised access.

The Website uses cookies to distinguish you from other users of the Website. This helps us to provide you with a good experience when you browse the Website and also allows us to improve the Website. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy.

The Website may contain links to the websites of other companies and organisations which may be of interest ("Third Party Sites").

Once you have used these links to leave our Website, we do not have any control over how other companies use your Personal Information collected through such Third Party Sites. We cannot therefore be responsible or liable for the protection and privacy of any Personal Information which you provide whilst visiting them.

Third Party Sites are governed by their own privacy policies. Please be careful when accessing Third Party Sites and make sure that you check the applicable privacy policies.

You have the right to ask us not to process your Personal Information for marketing purposes.

You can exercise your right to prevent such processing by ticking certain boxes on the forms we use to collect your Personal Information, by clicking "unsubscribe" in any of our marketing emails to you, or by contacting our Privacy Officer at any time at: justin.glenister@hfw.com.

We will not sell to third parties your Personal Information collected through this Website.

You have the right to request details (and a copy of) the Personal Information we hold about you and to ask us to delete, restrict (stop using), correct (rectify) or transfer (port) your Personal Information. Our response to your requests may depend on which legal grounds we are using to process the data in question (see section 4 above). For more information about your rights under the General Data Protection Regulation please see the UK Information Commissioner's Office guidance here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights.

You can exercise your rights by sending us a written request using our contact form, or by contacting our Privacy Officer Justin Glenister: by email at justin.glenister@hfw.com;by telephone at +44 (0)207 264 8223; or by post at HFW, Friary Court, 65 Crutched Friars, London EC3N 2AE, United Kingdom.

With each request please include identification information (a copy of your passport or driving licence and a recent utility bill). Please be as specific as possible in your request about your requirements, so that we can respond to you as quickly as possible.

If you are unhappy with us, our service, or with the way that we treat your Personal Information please contact us. You also have the right to contact the UK data protection authority, the Information Commissioner's Office (ICO), or your local data protection authority if you are not based in the UK.

You can contact the ICO through its website at https://ico.org.uk/global/contact-us, or on its helpline on 0303 123 1113 (if calling from the UK) or +44 1625 545 745 (if calling from outside of the UK).

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate and feasible, notified to you by email.

Please check back frequently to see any updates or changes to our Privacy Policy.

If you have any questions or comments about this Policy, or if you wish to exercise your rights, please contact our Privacy Officer:

  • By email : justin.glenister@hfw.com
  • By telephone : +44 (0)207 264 8223
  • By post : Justin Glenister, HFW, Friary Court, 65 Crutched Friars, London EC3N 2AE, United Kingdom