ADRGP
Privacy notice
How ADRGP collects, uses, stores and protects personal data.
Who is responsible
ADRGP is the data controller for personal data collected through this website. Contact the privacy desk at [email protected].
What we collect
- Applications: name, email, phone, country, city, professional role, practice areas, statement, access requirements and consent records.
- Directory profiles: only the fields an approved member chooses to publish.
- Enquiries and data requests: name, email, message and request type.
- Subscriptions: email address, consent and source.
- Technical data: a hashed IP address for rate limiting and audit, and an essential session cookie. We do not run advertising or third-party analytics.
Why we use it
- To review and administer membership applications and renewals — contract and legitimate interests.
- To publish a profile you have consented to publish — consent, which you can withdraw at any time.
- To answer enquiries and data requests — legitimate interests and legal obligation.
- To send briefings where you opted in — consent.
- To keep the service secure and prevent abuse — legitimate interests.
Who can see it
Only authorised ADRGP staff and processors acting on our instructions. We do not sell personal data. Public directory fields are visible to anyone; everything else is restricted.
How long we keep it
Applications that do not proceed are kept for up to 24 months for audit and re-application, then deleted or anonymised. Approved member records are kept while membership is active and for a reasonable period afterwards for verification. Consent records are kept as long as needed to demonstrate compliance.
International transfers
The service is hosted on infrastructure selected by ADRGP. Where a processor is outside your country, we use appropriate safeguards and publish processor details on request.
Your rights
You have the right to access, correct, delete, restrict, object to processing, and receive your data in a portable format. Use the data rights form. You may also complain to your national data protection authority.
Security
Access is role-based, passwords are hashed, forms are CSRF-protected, and administrative actions are audited. No online service can be guaranteed completely secure; report concerns to the privacy desk.