CILEx Group Privacy Statement

CILEx Group Privacy Statement

The Chartered Institute of Legal Executives group of companies (CILEx) is committed to protecting the privacy of all personal data obtained about individuals through, but not limited to, personal contact, email enquiries, newsletter sign up forms, event registrations, and membership forms.

Our aim is to safeguard the security and privacy of your personal data whilst providing all the information you need to successfully complete any application or request for information. By providing personal data to CILEx, you indicate your consent to the collection and use of such personal data in accordance with this Privacy Statement.

This Privacy Statement expands on the information provided in CILEx’s Privacy Notice.


A. Who we are and how to contact us
B. How and why we obtain personal data
C. The personal data we collect, how we collect it and where is it stored
D. Sharing personal data
E. Automated decision-making
F. How long do we keep your personal data
G. Your rights
H. Reviewing the Privacy Statement

A. Who we are and how to contact us

The Chartered Institute of Legal Executives (CILEx) is the professional association and governing body for Chartered Legal Executive lawyers, other legal practitioners and paralegals.  CILEx is incorporated by Royal Charter (RC000850).  Our registered address is: Kempston Manor, Kempston, Bedford MK42 7AB.

CILEx is an Awarding Organisation and is required to share personal data with OfQual. Qualification Wales and the CCEA. The Chartered Institute is the controller in relation to the personal data it holds and the processing activities outlined below. This means that CILEx decides why and how the personal data it holds is processed and where it delegates the handing of that data to other companies within the CILEx Group on its behalf, those companies act as processors.

If you have any questions about this Privacy Statement, you can get in contact by writing to:

The Group Privacy Officer, The Chartered Institute of Legal Executives, Kempston Manor, Kempston, Bedford MK42 7AB


CILEx uses cookies to give you a better experience on our websites

B. How and why we obtain personal data

CILEx only processes personal data where we have a lawful basis to do so.  This will depend on the activity we collect it for e.g. to provide membership services.  In some instances, there may be more than one lawful basis for which we process your personal data.

The lawful bases which are relevant to CILEx are as follows:

CILEx processes personal data where you have given consent for us to do so.  This includes, but is not limited to, newsletters, surveys, consultations, events, products, services and sending you marketing communications. In relation to marketing communications, you always have the right to withdraw your consent. 

Legal obligations
CILEx processes personal data which is necessary for compliance with legal obligations to which CILEx is subject. (e.g. the supply of regulatory information to OfQual or DofE; regulation as an Approved Regulator under the Legal Services Act 2007 in the public interest such as the maintenance of the CILEx Authorised Practitioners Directory). This also includes, but is not limited to, providing personal data to regulators, law enforcement bodies, and statutory bodies.

Legitimate interest
CILEx processes personal data which is necessary for the pursuit of its legitimate interests as a professional awarding association, governing body and pursuing our objectives.  This includes, but is not limited to, responding to general enquiries, supporting our members, asking our members about member services they would like to receive in the future, and researching the ongoing relevance of our member services.

The law allows us to do so provided the processing is fair, balanced and does not unduly impact your rights.

We may also rely on a third party’s legitimate interests, such as when an organisation has requested information or services from us, and your legitimate interests – which may be the case in some of the examples given above (such as where you have made an enquiry).

How we process personal data 
CILEx collects and processes personal data. Your personal data, however provided to us, will be used for the purposes specified in this Privacy Statement or otherwise notified to you. In particular, we may use your personal data: 

  • to provide you with services, products or information you have requested (including membership services and to enrol you on courses);
  • to regulate our members and administer examinations and applications, and administer membership and manage employer accounts, in accordance with any related statutory or regulatory obligations. This may include background checks and employer references;
  • to provide further information about our work, services, activities or products;
  • to answer your questions/requests and communicate with you in general;
  • to manage relationships with our members, with employers and other stakeholders and those who engage with our services and publications; 
  • to further our organisational aims in general; 
  • to analyse and improve our work, services, activities, products or information (including our website), or for our internal records;
  • to report on the impact and effectiveness of our work;
  • to run/administer our websites, keep them safe and secure and ensure that content is presented in the most effective manner for you and for your device; 
  • to register and administer your participation in events;
  • to process your application for a job or volunteer role with us when you apply through our job vacancies page (including to conduct background checks and employer references); 
  • for training and/or quality control;
  • to audit and/or administer our accounts;
  • to satisfy legal obligations which are binding on us, for example in relation to regulatory, government and/ or law enforcement bodies with whom we may work (for example requirements relating to the payment of tax or anti-money laundering);
  • for the prevention of fraud or misuse of services; and/or
  • for the establishment, defence and/or enforcement of legal claims.

C. The personal data we collect, how we collect it and where is it stored

CILEx is committed to respecting the personal data you supply to us. The personal data we collect will be relevant to the purposes for which it is to be used and we will do our utmost to ensure that such personal data will be accurate, complete and kept up to date. Whenever personal data is obtained from you, you will have access to information explaining how that personal data will be used. 

The personal data we collect
CILEx may collect, store and otherwise process the following kinds of personal data:

  • name and contact details including postal address, telephone number, email address and emergency contact details;
  • date of birth
  • gender; ethnicity, whether you have a disability or any other protected characteristics (particularly related to where reasonable adjustments or access arrangements may be needed) and any information relating to a background check;
  • financial information, such as bank details and/or credit/debit card details;
  • information about your computer/mobile device and your visits to and use of this website, including, for example, your IP address and geographical location;
  • unique candidate identifiers/unique learner numbers;
  • examination results and the information about your membership and your interactions with CILEx; and
  • details of your qualifications/experience.

How we collect personal data

  • When you give it to any part of the CILEx Group of companies directly
    • For example, personal data that you give to us when you communicate with us by email, phone or letter, such as when you apply to and become a member; complete a CILEx survey, report a problem or sign-up to receive our communications.
  • When we obtain it indirectly
    • For example, your personal data, provided by you to an accredited centre, may be shared with us by training/learning providers after you enrol for a course or submit your apprenticeship application form in relation to which we provide the relevant qualification (as CILEx acts as an end-point assessor for paralegal and chartered legal executive apprenticeships), and we may also conduct background checks and obtain employer references, or receive your personal data from dependent applicants to the Benevolent Fund (see below). 
    • Very often, your personal data will have been provided to us by your employer at your request or with your agreement with them.
  • When it is available publicly
    • Your personal data may be available to us from external publicly available sources. For example, depending on your privacy settings for social media services, we may access personal data from those accounts or services.
  • When you visit our website
    • When you visit our website, we automatically collect the following types of personal data;
    • Technical information, including the internet protocol (IP) address used to connect your device to the internet, browser type and version, time zone setting, browser plug-in types and versions and operating systems and platforms.

Information about your visit to the websites, including the uniform resource locator (URL) clickstream to, through and from the website (including date and time), services you viewed or searched for, page response times, download errors, length of visits to certain pages, referral sources, page interaction information (such as scrolling and clicks) and methods used to browse away from the page.  We collect and use your personal data by using cookies on our website – please see our Cookie Notice.

In general, we may combine your personal data from these different sources set out in a-d above, for the purposes set out in this Statement.

CILEx Benevolent Fund
In order to be a Qualifying Member and be eligible for financial assistance from the CILEx Benevolent Fund (the Fund), an individual must have been a member for a year and live in England or Wales or have been a dependant of such a (ex) member. 

To check the eligibility of applications to the Fund, certain necessary personal data of (ex) members is collected and retained in the form of name, address, CILEx membership number, telephone number, email address, financial details, and personal documentary evidence.  This information is recorded on CILEx’s CRM system.

This personal data is provided by you. Your application and accompanying documentation is forwarded to Auriga Services Ltd who administers the application process on behalf of the Fund. This relationship is subject to a contract between Auriga Services Ltd. and CILEx which itself contains safeguards around management of personal data.

Note that your information may be shared with us and processed in this manner in the future if you are such a (ex) member.

Where you lodge a complaint, your personal data will be used to correspond with you.  Depending on your connection with CILEx, we will determine if the complaint is recorded on our CRM system e.g. you are a member of CILEx, or if it is only held in hardcopy format.  Your complaint will be retained for three years after resolution, in line with CILEx’s Archive, Retention and Destruction Policy. To exercise your rights please see section G of this Privacy Statement.

Access to your personal data 
We take reasonable steps to ensure that the  personal data we hold will be accurate and up to date. You can check the personal data that we hold about you if you are a member on MyCILEx. Alternatively, you can ask us to check by e-mailing us at: or writing to the Group Privacy Officer, The Chartered Institute of Legal Executives, Kempston Manor, Kempston, Bedford MK42 7AB.

Users 16 and under
We do not knowingly collect or solicit personal data from anyone aged 16 or under or knowingly allow such persons to provide us with their personal data without parent or guardian consent. If you are aged 16 or under, please get the permission of your parent or guardian before using our website or providing any personal data to us. In the event that we learn that we have collected personal data from anybody aged 16 or under and we do not have the consent of a parent or guardian, we will delete that personal data as quickly as possible. If you believe that we might have any personal data from or about anyone aged 16 or under without the consent of a parent or guardian, please contact the Group Privacy Officer by email to or writing to the Group Privacy Officer, The Chartered Institute of Legal Executives, Kempston Manor, Kempston, Bedford MK42 7AB 

Storage of data
Personal data collected by the CILEx Group is stored on a secure IT systems. This personal data can generally be accessed throughout the CILEx Group of companies except where it is unsuitable to do so, in which case appropriate measures are put in place to ensure personal data can only be accessed by those with a need to know.

No external person will have access to Group records except in circumstances outlined in the Privacy Notice and this Group Privacy Statement.

D. Sharing personal data

The personal data we collect will only be used for the purposes set out in this Statement or otherwise notified to you. We will not disclose your personal data to third-parties except as set out in this Statement, including where required to or permitted to by law (for example to regulators or to law enforcement agencies) by law or where those parties are conducting CILEx activities on our behalf, including with other entities in our Group - CILEx Professional; CILEx Regulation; CILEX Law School; CILEx Pro Bono Trust and CILEx Benevolent Fund. 

In circumstances, where we engage a service provider or Group entity to provide services to us, we ensure that personal data is only processed in a manner compliant with the relevant law, and subject to a formal data processing agreement, and only used for the purposes for which the personal data was originally collected. 

If we undergo a merger or reorganisation, in doing so we may acquire or transfer personal data as part of that transaction but your personal data would continue to be used for the same purpose.

You may choose not to receive CILEx marketing communications by writing to our Membership Department at: Kempston Manor, Kempston, Bedford, MK42 7AB or emailing us at

Sharing data with overseas accredited centres

Where a member is studying at an overseas CILEx accredited centre, that centre will share the member’s personal data with us in the form of name, membership number and name of examination. Examination results will be shared in return by us with the CILEx accredited centre. 

If you are taking CILEx exams, CILEx will share personal data with CILEx accredited centres, CILEx regulators i.e. Ofqual, Qualification Wales, CCEA, CILEx Regulation.  No other data is shared with third parties unless your permission has been given.

Education and Skills Funding Agency: If required to by regulation, CILEx will share some of the personal data you provide with the Education and Skills Funding Agency (ESFA) to verify your Unique Learner Number (ULN) and to update your Personal Learning Record (PLR).  In turn, the ESFA may share your ULN and PLR with other education related organisations.  For more information see the ESFA’s applicable privacy notice(s) and policies.

Financial information

CILEx does not store credit/debit card details nor share financial information with third parties.  However, when paying for goods/services online, CILEx uses a credit card processing company or a Direct Debit service to complete these transactions.  These companies do not retain, share, store or use personal data for any purposes other than to provide this service to CILEx.

Verification requests
CILEx may sometimes respond to verification requests of qualification or membership status from current or prospective employers, employment agencies, regulators or other third-party contacts.

E. Automated decision-making

When using our online membership application forms, an automated decision will be made when allocating you to the appropriate membership grade.  CILEx makes no other automated decisions.

F. How long do we keep your personal data

In general, CILEx only retains personal data for as long as necessary to fulfil the purposes for which it is being processed (including to comply with relevant legal or regulatory requirements, and/or to resolve legal disputes).

That length of time may vary depending on the reasons for which we are processing the personal data and whether we have a legal (for example under financial regulations) or contractual obligation to keep it for a certain amount of time.

Once the retention period has expired, personal data will be confidentially disposed of or permanently deleted. If you object to further contact from us, we will keep some basic information about you in order to avoid sending you unwanted communications in the future.

If before that date (i) your personal data is no longer required in connection with such purpose(s), (ii) we are no longer lawfully entitled to process it or (iii) you validly exercise your right of erasure, we will remove it from our records at the relevant time.

G. Your rights

You have the following rights:

  • access to your personal data 
  • have inaccurate personal data rectified
  • object to certain processing of your personal data

In certain circumstances, you might have the right to:

  • have your personal data erased
  • restrict the processing of your personal data
  • Data portability i.e. the right to have your personal data provided in a structured, commonly used and machine-readable format

To exercise any of the above rights or make a related complaint, please contact:
The Group Privacy Officer, The Chartered Institute of Legal Executives, Kempston Manor, Kempston, Bedford MK42 7AB


You also have the right to lodge a complaint with the Information Commissioner’s Office. Their contact details are:

Information Commissioner’s Office
Wycliffe House
Water Lane

Tel No: 0303 123 1113 (local rate) or 01625 545 745 (national rate)

H. Reviewing the Privacy Statement

CILEx will review and update this Privacy Statement from time to time, when changes to our processes or procedures and systems are made, if laws and regulations change or if new circumstances require it.  

If this Privacy Statement changes in any way, we will put an updated version on the website. Regular review of this page ensures that you are always aware of what personal data we collect, how we use it and under what circumstances.

CILEx will make reasonable efforts to contact and update those affected if the changes are significant in nature.

Correct as at: June 2018
Next formal review date: June 2019