Privacy Policy
Last updated: June 2026
1. Who We Are
The London International Arbitration Court (“LIACourt”, “we”, “us”, “our”) is the data controller responsible for the personal data collected through this website and our online case management portal at liacourt.org.uk.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:
Email: contact@liacourt.org.uk Website: liacourt.org.uk
2. The Data We Collect
Depending on how you use our website and portal, we may collect and process the following categories of personal data:
2.1 Account and identity data
- Full name, username, and password (stored in encrypted form)
- Email address
- Profile photograph (if uploaded)
2.2 Professional and biographical data
- Professional role, specialisation, and qualifications
- Bar number or professional registration reference (where applicable)
- Nationality, languages spoken
- Telephone number
- Professional biography
2.3 Case and proceedings data
- Submissions, statements of claim and defence, and all documents filed in proceedings
- Internal messages exchanged via the portal
- Timeline events and case activity records
- Hearing notes and decisions issued in proceedings to which you are a party or representative
2.4 Technical and usage data
- IP address and browser type
- Pages visited and time spent on the portal
- Login timestamps and session activity
- Device type and operating system
2.5 Communications data
- Emails sent to or received from LIACourt
- Support enquiries and correspondence
3. How We Collect Your Data
We collect personal data in the following ways:
- Directly from you — when you register an account, complete a dispute resolution request form, upload documents, send messages via the portal, or contact us by email.
- Automatically — when you use the portal, we log technical data such as your IP address, session activity, and access times for security and audit purposes.
- From other parties to proceedings — where you are a Respondent or legal representative, your details may be submitted by the Claimant as part of the Notice of Arbitration or Mediation.
4. Why We Process Your Data — Legal Basis
We process your personal data on the following legal grounds under the UK General Data Protection Regulation (UK GDPR):
| Purpose | Legal Basis |
|---|---|
| Managing your account and providing portal access | Performance of a contract (Article 6(1)(b)) |
| Administering arbitration, mediation, and hybrid proceedings | Performance of a contract; legitimate interests |
| Sending case notifications and procedural communications | Performance of a contract |
| Maintaining security, preventing fraud, and keeping audit logs | Legitimate interests (Article 6(1)(f)) |
| Sending service-related emails (e.g. case updates, 2FA codes) | Performance of a contract |
| Complying with legal and regulatory obligations | Legal obligation (Article 6(1)(c)) |
| Improving our services and platform (anonymised analytics) | Legitimate interests |
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
5. How We Use Your Data
We use the personal data we collect to:
- Create and manage your portal account, including two-factor authentication;
- Administer and manage any proceedings you are involved in;
- Communicate with you about case progress, deadlines, hearings, and decisions;
- Notify you of new documents, messages, or events in your case;
- Generate case reports and export documents as requested;
- Maintain a secure, complete audit log of all actions taken within the portal;
- Comply with our legal obligations under English law;
- Protect the security and integrity of the portal and our systems;
- Improve the portal’s functionality and user experience (using anonymised data only).
6. Who We Share Your Data With
6.1 Parties to proceedings. In the course of administering proceedings, relevant personal data (such as names, contact details, submitted documents, and decisions) is shared with other parties, their legal representatives, and the appointed arbitrators or mediators. This is inherent to the nature of dispute resolution proceedings.
6.2 Appointed neutrals. Arbitrators and mediators appointed to a case will have access to all case documents, participant details, and communications for that case via the portal.
6.3 Service providers. We may share data with trusted third-party providers who assist us in operating the platform (such as hosting, email delivery, and IT support). These providers are bound by data processing agreements and may only use data as directed by LIACourt.
6.4 Legal and regulatory bodies. We may disclose personal data to courts, regulators, or law enforcement agencies where required to do so by law, court order, or regulatory obligation.
6.5 No sale of data. We do not sell, rent, or trade personal data to any third party for marketing or commercial purposes.
7. International Data Transfers
LIACourt is based in the United Kingdom. If any service providers or system components we use are located outside the UK or the European Economic Area (EEA), we ensure that appropriate safeguards are in place (such as UK International Data Transfer Agreements or Standard Contractual Clauses) before transferring data, in accordance with UK GDPR requirements.
8. How Long We Keep Your Data
We retain personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Our standard retention periods are as follows:
| Data Type | Retention Period |
|---|---|
| Account data (active users) | For the duration of your account |
| Account data (inactive accounts) | 3 years after last login, then deleted |
| Case and proceedings data | 10 years from the date of the final award or settlement |
| Audit log records | 7 years |
| Email correspondence | 5 years |
| Technical/server logs | 12 months |
Longer retention may apply where required by law, ongoing legal proceedings, or contractual obligation.
9. Your Rights Under UK GDPR
As a data subject under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
9.1 Right of access — You may request a copy of the personal data we hold about you (a Subject Access Request).
9.2 Right to rectification — You may ask us to correct inaccurate or incomplete personal data.
9.3 Right to erasure (“right to be forgotten”) — You may ask us to delete your personal data in certain circumstances, for example where the data is no longer necessary for the purpose it was collected. Note: this right may be limited where we are required to retain data by law or for the administration of ongoing proceedings.
9.4 Right to restriction of processing — You may ask us to temporarily stop processing your data in certain circumstances, for example while the accuracy of the data is being contested.
9.5 Right to data portability — You may request that we provide your personal data in a structured, commonly used, machine-readable format so you can transfer it to another organisation.
9.6 Right to object — You may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
9.7 Rights related to automated decision-making — You have the right not to be subject to solely automated decisions that produce legal or significant effects. LIACourt does not carry out such automated decision-making.
To exercise any of these rights, please contact us at contact@liacourt.org.uk with your request. We will respond within one calendar month. We may need to verify your identity before processing your request.
10. Security
LIACourt takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure, including:
- Encrypted storage of passwords and sensitive data;
- Two-factor authentication (2FA) for all portal accounts;
- HTTPS/TLS encryption for all data in transit;
- Role-based access controls — users can only access case data relevant to their role;
- Full audit logging of all access and actions within the portal;
- Regular security reviews of the platform.
While we take all reasonable steps to protect your data, no system is completely secure. If you suspect any security breach involving your account, please notify us immediately at contact@liacourt.org.uk.
11. Cookies
Our website uses essential cookies necessary for the platform to function (such as session management and security tokens). We do not use advertising or tracking cookies.
12. Children’s Data
The LIACourt platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor’s data has been submitted to the platform, please contact us at contact@liacourt.org.uk and we will take immediate steps to remove it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the platform, or applicable law. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this Policy periodically. For significant changes, we will notify registered users by email.
14. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data:
London International Arbitration Court Email: contact@liacourt.org.uk Website: liacourt.org.uk