Privacy Policy

1. Identification of the Controller

Your personal data is collected and processed by The Neurolaw Lab, (hereafter “we”, “us” or “our”).

The Neurolaw Lab is an educational platform dedicated to bridging the gap between neuroscience, emerging technologies, and law. In the context of delivering our services—such as educational content, curriculum partnerships, event participation, and online engagement—we may process personal data of natural persons (hereinafter “data subject”, “you”, or “your”).

We are committed to processing your personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and all other applicable data protection laws.

2. Scope of this Privacy Statement

This Privacy Statement applies to the following data subjects:

Students and learners (secondary and higher education)
Educators and academic partners
Institutional clients and collaborators
Website visitors and newsletter subscribers
Event participants and workshop attendees

This document outlines how we collect, process, and protect your personal data, the legal bases we rely on, and your rights as a data subject.

3. Processing of Personal Data

We process your personal data for a variety of purposes, depending on how you interact with The Neurolaw Lab. When you enroll in one of our courses or access our online education platform, we collect and process your name, email address, institutional affiliation, and your progress within the course. This is necessary for us to provide the educational services you have requested and to fulfill our contractual obligations.

If you reach out to us via our website, email, or at events, we may process your name, contact details, and the content of your message. This allows us to respond to your request and is based either on our legitimate interest or the performance of a contract.

When you subscribe to our newsletter or sign up to receive updates, we collect your name, email address, and areas of interest. If you are not yet a customer, we process this data based on your consent. If you are an existing user of our services, we may contact you under our legitimate interest in accordance with ePrivacy rules.

We may also collect feedback about your experience to evaluate and improve our services. This is based on our legitimate interest in ensuring educational quality and engagement. For events or workshops, we collect registration information such as your name, email address, institutional affiliation, and any dietary or accessibility needs. If photos or recordings are made, we will request your consent in advance.

Finally, when engaging in academic partnerships or institutional collaborations, we may collect and store professional contact details, job titles, and records of correspondence to facilitate joint educational initiatives. This is necessary for the performance of our collaborative agreements.

In all cases, we only process personal data that is relevant and necessary for the purpose at hand, in compliance with applicable data protection laws.

4. Your Rights as a Data Subject

In accordance with applicable law, you may exercise the following rights:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data in certain cases
Objection: Object to processing based on legitimate interest or for direct marketing
Withdrawal of Consent: Withdraw previously given consent at any time
Restriction: Request restricted processing in specific situations
Data Portability: Receive your data in a structured, machine-readable format

To exercise these rights, contact us at privacy@theneurolawlab.com. We will respond within the timelines required by law.

5. Disclosure to Third Parties

We do not sell or disclose your personal data, except:

To service providers assisting with our platform (e.g. cloud storage, learning software) under data processing agreements
To academic partners when delivering co-hosted educational activities, with appropriate safeguards
Where required by law or legal proceedings

6. International Transfers of Personal Data

We primarily store and process your data within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure it is protected through adequacy decisions or standard contractual clauses approved by the European Commission.

7. Retention of Your Personal Data

We retain personal data only as long as necessary for the purposes described:

Course data is retained for the duration of the educational offering and up to 5 years for certification and record-keeping
Contact and communication data is stored for up to 3 years after last interaction unless otherwise required
Event data (including images) is retained based on your consent and may be deleted upon request
Marketing data is retained until you unsubscribe or withdraw consent

For detailed retention policies, please contact us.

8. Contact Us

For questions or to exercise your rights, contact:
Email: privacy@theneurolawlab.com

9. Updates to This Privacy Statement

We may update this Privacy Statement from time to time. The latest version will always be available on our website. Significant changes will be communicated directly to you when required by law.

Last updated: 29 June 2025