1. Home
  2. Privacy Notice

Orrick Privacy Notice

Last Updated: June 29, 2026

Orrick are committed to safeguarding your personal information. This Privacy Notice sets out how we collect and process your personal information, and your rights in relation to your personal information.

Depending on how you interact with us, you should also review our supplementary privacy notices, including those relating to the processing of personal information in the context of recruitment, the operation of our website and other interactive features. These additional notices address specific processing activities and are available on our website and at other relevant points of collection, and are intended to be read alongside this Privacy Notice.

  • Orrick is a global law firm, comprising Orrick, Herrington & Sutcliffe LLP, a Californian limited liability partnership, along with other entities that are authorised to carry the name "Orrick" and/or are otherwise connected with it (together referred to as "Orrick", "we", "our", or "us"). You can find a list of Orrick entities under Affiliates.

    The identity of the data controller for the personal information we process concerning you, will depend on the particular Orrick entity you have instructed, or that is providing services to you, or communicating with you. To identify the relevant data controller, please refer to our list of Offices below.

    The General Data Protection Regulation (EU) 2016/679 ("EU GDPR"), requires organisations subject to its rules, but which are not established in the EU, to appoint a representative within the EU. This representative should be addressed on all issues related to the processing of your personal information. Similarly, the EU GDPR as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 ("UK GDPR") requires organisations not established in the UK to appoint a representative in the UK. Annex 1 lists the Orrick offices that have appointed a representative to comply with the EU and UK GDPR for relevant data processing activities.

  • As a global law firm, we are subject to a range of requirements under applicable data protection laws in the locations where we operate. We therefore provide additional information on how we process personal information for residents in certain locations. Please refer to the supplemental disclosure relevant to your location, which should be read alongside this Privacy Notice.

  • Information you provide to us

    We collect personal information about you when you access and use our websites, blogs, mobile sites, applications, widgets, and other interactive features or when you engage with our marketing and business development initiatives, such as when you register and attend an event organised or hosted by us (“Public Services”).

    We may also collect personal information about you when we provide legal services or market our legal services ("Legal Services") to you, your employer, or any other person that has authorised you to communicate with us regarding the provision of Legal Services.

    We collect your personal data when you voluntarily submit information directly to us when you access, use or receive Public Services or Legal Services. This can include information you provide to us when you submit an enquiry through our website, register for and/or attend an event, correspond with us by phone, email or otherwise, subscribe to our mailing lists, client alerts, newsletters or other forms of marketing communications, provide information requested by us to comply with our professional and legal obligations, or in connection with our provision of the Legal Services.

    If you choose not to provide personal information, we may not be able to provide some or all of the Public Services or Legal Services to you or respond to your other requests.

    When you use the Public Services, the categories of information we collect may include:

    • contact information;
    • business information;
    • employment information;
    • location information;
    • information provided by third parties; or
    • your comments and opinions that you express when you comment on a blog post, contact us by email, mail or phone.

    We use this information to operate, maintain and provide to you the features and functionality of the Public Services, to address your questions and concerns, to personalize your content so that it is relevant to the city or country you are using your device in, to contact you, including sending you news, alerts and marketing communications, and to help us develop new products and services.

    When you use Legal Services, the categories of information we collect may include:

    • identification information;
    • new business and compliance information;
    • instructions and information about you for the purpose of providing Legal Services; or
    • payment and transaction information.

    We use this information to provide you with the Legal Services in accordance with our agreements, to communicate with you, to comply with our professional or legal obligations and to facilitate our internal business operations.

    The table at Annex 2 further sets out the categories of personal information we collect about you when you use the Public Services and how (for which purpose) we use that information. The table also lists the legal basis which we rely on to process the personal information.

    The table at Annex 3 further sets out the categories of personal information we collect about you when you use the Legal Services and how (for which purpose) we use that information. The table also lists the legal basis which we rely on to process the personal information.

    Information we collect about you automatically

    We may also automatically collect personal information concerning your access and use of our websites, blogs, mobile sites, applications, widgets and other interactive features (the "Online Services") and information about the device you use to access the Online Services. For example, we may collect:

    • information about how you view the Online Services (e.g., the pages you view, the links you click);
    • information about your browser and usage patterns (e.g., your IP address, browser type and language); and
    • information about the device you use to access the Online Services (e.g., device identifier, device type, model and manufacturer).

    We use this information to present our Online Service to you on your device, determine news, alerts and other products and services that may be of interest to you for marketing purposes, and monitor and improve our Online Services and business.

    The table at Annex 4 further sets out the categories of personal information we collect about you automatically and how, and for which purpose, we use that information. The table also lists the legal basis which we rely on to process the personal information.

  • We may also process your personal information when you apply for a position with us, or otherwise provide information in relation to a role or work placement at Orrick. Please see our Global Recruitment Privacy Notice for information about how we process your personal information when you participate in our recruitment processes.

  • As required in accordance with how we use it, we will share your personal information with the following:

    • Service providers and advisors: third party vendors and other service providers that perform services for us, on our behalf, which may include providing mailing or email services, tax and accounting services, payments processing, data enhancement services, fraud prevention, web hosting, or providing analytic services.
    • Affiliates: other affiliates of Orrick, Herrington & Sutcliffe LLP, so that they can provide you with legal updates, information and marketing messages about products or services that may interest you.
    • The public: when you use our Public Services, content and information that you post on message boards, blogs or other services on our website, or that you allow us to make public, may be available to other visitors to our websites and to the general public. When you use our Legal Services, to the extent you have given us consent to do so, we may also share your name and the company you work for together with comments and feedback on our Legal Services.
    • Legal directories and referees: when you use our Legal Services, we may share your contact details and limited information about the Legal Services provided to you or the client with legal directories or other promotional publications or communications, in order to promote our Legal Services. We will only share your personal information in this way to the extent that you have given us your consent to do so.
    • Law enforcement, regulators and other parties: for purposes required by law or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) comply with legal process; (c) respond to requests from public or government authorities, including public or government authorities outside your country of residence; (d) enforce the terms of our agreement (being, as applicable, our Terms of Use Agreement for Public Services or the terms of our client engagement letter for Legal Services) and pursue available remedies or limit the damages that we might sustain; (e) protect the security or integrity of the Public Services or Legal Services (as applicable); and/or (f) exercise or protect our rights, privacy, safety or that of our affiliates, clients, you or others.

  • Retention periods

    We will store your personal information for no longer than necessary for the purposes set out in Annexes 2, 3 and 4, and in accordance with our legal obligations and legitimate business interests.

    Security

    We implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, change or damage.

    International Transfers of your Personal Information

    As an international legal practice, our affiliates and service providers are located around the world. The personal information we collect may therefore be transferred to and stored in countries outside of the jurisdiction you are in. Any international transfers of your personal information are made pursuant to appropriate safeguards, such as standard data protection clauses adopted by the European Commission or in accordance with applicable laws. If you wish to enquire further about these safeguards used, please contact us using the details set out at the end of this Privacy Notice.

  • From time to time, we may send you legal updates, alerts, news and mailings relating to seminars or events that we think may be of interest to you.

    Most messages we send will be by email. For some messages, we may use personal information we collect about you to help us determine the most relevant marketing information to share with you.

    If you are in the EEA, we will only send you marketing messages if you have given us your consent to do so. If you do not want to receive messages from us, you will be able to inform us of your wishes when we first collect your contact details or by refusing or withdrawing your consent. You can also change your preferences at a later date by clicking on the unsubscribe or Manage Email Preferences link at the bottom of our messages, or by emailing us at [email protected].

    Please note that if you do opt-out of or do not grant consent to receiving marketing related messages from us, we may still send you non-marketing messages, such as communications relating to the provision of Legal Services.

    Your personal information may also be shared with any affiliates of Orrick, Herrington & Sutcliffe LLP, who may also use this information for the same purposes outlined in this Privacy Notice.

  • If you are resident in the EEA or the UK, or if you are receiving Public Services or Legal Services from, or otherwise engaging with an Orrick affiliate in the EEA or the UK, under applicable laws you have the following rights in respect of your personal information that we control:

    • Right of access: you have the right to access and obtain a copy of your personal information.
    • Right of portability: you have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.
    • Right to rectification: you have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
    • Right to erasure: you have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
    • Right to restriction: you have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
    • Right to object: you have a right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.

    If you are resident in France, you also have the right to set guidelines for the retention and communication of your personal information after your death.

    If you wish to exercise one of these rights, please contact us at [email protected]. You may also review and edit certain personal information you have submitted to us through the Public Services by clicking on the Manage Email Preferences link at the bottom of our messages.

    Residents in other jurisdictions may also have similar rights to the above. Please refer to the Region Specific Disclosures, if applicable, or contact us at [email protected] if you would like to exercise one of these rights, and we will comply with any request to the extent required under applicable law.

  • If you have any concerns about how we have processed your personal information, you can raise them directly with our Data Privacy Office at [email protected]. If, after doing so, the matter remains unresolved, you can make a complaint about the way we process your personal information to our Data Protection Officer at [email protected]. You also have the right to lodge a complaint with your local data protection authority. If you reside in the EU, you can find contact details for your data protection authority at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. If you reside in the UK, you can address your complaint to the Information Commissioner’s Office.  

  • We permit third-party online advertising networks, social media companies and other third-party services to collect information about your use of our Online Services over time so that they may play or display personalized or interest-based ads on our Online Services, on other websites, apps or services you may use, and on other devices you may use. Typically, though not always, the information used for interest-based advertising is collected through cookies or similar data collection technologies. We and our third-party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics and market research. Depending on your location as detected from your IP address, we present you with a cookie banner through which you can exercise certain control over the use of cookies on the Online Services. As an alternative, or if the cookie banner is not displaying, you may exercise control by following the opt-out instructions below.

    We also may use certain forms of display advertising and other advanced features through Google Universal Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, the DoubleClick Campaign Manager Integration, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Online Services. You may opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences. You can learn more about Google’s practices with Google Analytics by visiting Google’s privacy policy at https://policies.google.com/technologies/partner-sites. You can also view Google’s currently available opt-out options at https://tools.google.com/dlpage/gaoptout.

    We support the self-regulatory principles for online behavioural advertising (“Principles”) published by the Digital Advertising Alliance (“DAA”). This means that we allow you to exercise choice regarding the collection of information about your online activities over time and across third-party websites for online interest-based advertising purposes. More information about these Principles can be found at https://youradchoices.com/. If you want to opt out of receiving online interest-based advertisements on your internet browser from advertisers and third parties that participate in the DAA program and perform advertising-related services for us and our partners, please follow the instructions:

    When you elect to opt-out through these sites, they will place an opt-out cookie on your device indicating that you do not want to receive interest-based advertisements. Opt-out cookies only work on the internet browser and device they are downloaded onto. If you want to opt out of interest-based advertisements across all your browsers and devices, you will need to opt out on each browser on each device you actively use. If you delete cookies on your device generally, you will need to opt out again. And some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt-out again.

    If you want to opt out of receiving online interest-based advertisements on mobile apps, please follow the instructions at https://youradchoices.com/appchoices.

    Please note that when you opt-out of receiving interest-based advertisements, this does not mean you will no longer see advertisements from us or on our Online Services. It means that the online ads that you do see from DAA program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third-party opt-out options or programs or the accuracy of their statements regarding their programs. In addition, third parties may still use cookies to collect information about your use of our Online Services, including for analytics and fraud prevention as well as any other purpose permitted under the DAA’s Principles.

  • Our Public Services and Legal Services are not directed at persons under 16 and we do not knowingly collect personal information from children under 16. If you become aware that your child has provided us with personal information without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate any account your child has created with us.

  • We may update this Privacy Notice from time to time, and you should review this page periodically. When we change this Privacy Notice in a material way, we will update the "Last Updated" date at the top of this Privacy Notice. Changes to this Privacy Notice are effective when they are posted on this page.

  • If we need to provide you with information about something, whether for legal, marketing or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on the Online Services. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this Privacy Notice.

    • Orrick, Herrington & Sutcliffe (Europe) LLP, a limited liability partnership incorporated in England and Wales.
    • Orrick, Herrington & Sutcliffe (UK) LLP, a limited liability partnership incorporated in England and Wales.
    • OHS Secretaries Limited, a private limited company incorporated in England and Wales.
    • Orrick Tokyo Law Offices, a joint venture between Orrick Tokyo Law Offices and the Firm.
    • BLX Group LLC (formerly known as Bond Logistix LLC), a Delaware limited liability company.
    • The Orrick, Herrington & Sutcliffe Foundation, a registered Section 501(c)(3) public charity.
    • Orrick, Herrington & Sutcliffe (Singapore) Pte. Ltd, a Singapore private limited company.

  • Category of personal information

    How we use it (purpose of use)

    Legal basis for the processing

    Contact information

    Personal information, such as your name, phone number, address, email address.

    We use this information to deal with enquiries and complaints made by or about you relating to the Public Services.

    The processing is necessary for our legitimate interests, namely administering the Public Services and dealing with enquiries and complaints relating to the Public Services.

    We use this information to operate, maintain and provide to you the Public Services.

    The processing is necessary for our legitimate interests, namely administering the Public Services and dealing with enquiries and complaints relating to the Public Services.

    We use this information to communicate with you, including sending service-related communications.

    The processing is necessary for our legitimate interests, namely administering the Public Services and communicating with you in connection with the Public Services.

    We use this information to send you statements and invoices in relation to any agreement between us to provide you with any part of the Public Services.

    The processing is necessary for the performance of a contract and/or to take steps at your request prior to entering into a contract.

    We use this information to send you news, alerts and marketing communications in accordance with your preferences.

    If you are in the EEA, or if the relevant data controller using your personal information for this purpose is in the EEA, we will only process your personal information in this way to the extent that you have given us consent to do so.

    If neither you nor the data controller are in the EEA, the processing is necessary for our legitimate interests, namely for marketing purposes.

    Employment information

    Such as information about your employing entity, business unit, manager and management reporting structure, job title, function and the nature of your duties and responsibilities.

    We use this information to tailor content provided to you through our Public Services, including notifications, news, alerts and marketing communications.

    The processing is necessary for our legitimate interests, namely to tailor our Public Services to the user.

    We use this information to monitor and improve the Public Services.

    The processing is necessary for our legitimate interests, namely to improve our Public Services.

    Comments and opinions

    When you contact us directly, e.g. by email, phone, mail, when you post on message boards, blogs or complete an online form, we will record your comments and opinions.

    We use this information to address your questions, issues and concerns.

    The processing is necessary for our legitimate interests, namely administering the Public Service and dealing with enquiries and complaints relating to the Public Services.

    We use this information to improve our Public Services.

    The processing is necessary for our legitimate interests, namely to inform the development of new features of the Public Services and the improvement of the Public Services generally.

    We use this information to determine products and services that may be of interest to you.

    The processing is necessary for our legitimate interests, namely to inform our direct marketing.

    Location information

    Other than information you choose to provide to us, we do not collect information about your precise location. Your device’s IP address may help us determine an approximate location.

    We may use an approximate location to ensure content made available to you through our Public Services is relevant to the city or country you are using your device in.

    The processing is necessary for our legitimate interest, namely to tailor our Public Services to the user and to improve our service generally.

    Information provided by social networks you connect to the Public Service

    If you connect a social network, such as LinkedIn or Facebook, to our Public Services we will collect personal information from the social network in accordance with your privacy settings on that social network. The connected social network may provide us with information such as your name, Facebook ID, profile picture, network, gender, username, user ID, age or age range, language, country, friends list, follower list and any other information you have agreed it can share or that the social network provides to us.

    We will use the personal information provided to allow you to share content from our Public Services, or your experiences on our Public Services, with your friends, followers or contacts on the connected social network.

    The processing is necessary for our legitimate interest, namely to tailor our Public Services to the user and to improve our service generally.

    Preferences

    Preferences set for notifications, marketing communications and how our website is displayed.

    We use this information to provide notifications, send news, alerts and marketing communications and provide our Public Services in accordance with your choices.

    The processing is necessary for our legitimate interest, namely ensuring the user receives the correct marketing and other communications.

    We use this information to ensure that we comply with our legal obligation to send only those marketing communications to which you have consented.

    The processing is necessary for compliance with a legal obligation to which we are subject.

    Information provided by third parties

    From time to time, we may receive information about you from third parties and other users. We may obtain information from third parties to enhance or supplement our existing user information. We may also collect information about you that is publicly available.

    We may combine this information with the information we collect from you directly. We use this information to contact you, to send you advertising or promotional materials or to personalize the Public Services, to pre-populate forms, and to better understand the demographics of our users.

    The processing is necessary for our legitimate interests, namely to tailor our Public Services to the user and to improve our service generally.

    All personal information set out above

    We will use all the personal information we collect to operate, maintain and provide to you the features and functionality of the Public Services, to communicate with you, to monitor and improve the Public Services and business, and to help us develop new products and services.

    The processing is necessary for our legitimate interest, namely to administer and improve the Public Services.

  • Category of personal information

    How we use it (purpose of use)

    Legal basis for the processing

    Contact information

    Personal information, such as your name, phone number, address, email address.

    We use this information to provide you or the client with Legal Services in accordance with our agreement with you, or in accordance with our agreement with the client.

    Where you are the client, the processing is necessary for the performance of a contract between you and us, and/or to take steps at your request prior to entering into a contract.

    Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Legal Services.

    We use this information to communicate with you in connection with the provision of Legal Services, including sending statements and invoices, and to deal with enquiries and complaints made by or about you relating to the Legal Services.

    Where you are the client, the processing is necessary for the performance of a contract between you and us, and/or to take steps at your request prior to entering into a contract.

    Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Legal Services and communicating with clients and other persons in connection with the provision of Legal Services.

    We may use this information to promote our Legal Services, such as disclosing your contact information to legal directories or other promotional publications or communications.

    We will only process your personal data in this way to the extent that you have given us your consent.

    Identification and compliance information

    such as proof of identity, address verification, professional and business affiliations, criminal convictions and adverse media.

    We use this information to verify the identification of individuals receiving the Legal Services.

    The processing is necessary for compliance with a legal obligation to which we are subject.

    We use this information to facilitate our internal business operations, including compliance with our professional obligations.

    The processing is necessary for our legitimate interests, namely preventing fraud and ensuring compliance with our professional obligations.

    Employment information

    Such as information about your employing entity, business unit, manager and management reporting structure, job title, the nature of your duties and responsibilities.

    We use this information to tailor and provide you or the client with Legal Services.

    Where you are the client, the processing is necessary for the performance of a contract between you and us, and/or to take steps at your request prior to entering into a contract.

    Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Legal Services.

    Instructions, comments and opinions

    When you contact us directly, e.g. by email, phone, mail or by completing a form, we will record your comments and opinions.

    We use this information to provide the Legal Services in accordance with our client's instructions and respond to your questions, issues and concerns.

    Where you are the client, the processing is necessary for the performance of a contract between you and us, and/or to take steps at your request prior to entering into a contract.

    Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Legal Services.

    We use this information to tailor the Legal Services to your or our client's requirements, deal with complaints made by or about you relating to the Legal Services and monitor and improve our Legal Services.

    The processing is necessary for our legitimate interests, namely communicating with clients, tailoring our Legal Services to clients and to improve our service generally, and for internal risk management purposes; the processing is also necessary for your legitimate interests and those of our clients, namely receiving the Legal Services.

    We may use this information to promote our Legal Services, such as disclosing your contact information to legal directories or other promotional publications or communications.

    We will only process your personal data in this way to the extent that you have given us your consent.

    Information about your legal matter

    Information regarding the issue or matter in respect of which we have been engaged to provide Legal Services may contain personal information about you.

    We use this information to provide the Legal Services in accordance with our client's instructions and to tailor the Legal Services to your or our client's requirements.

    Where you are the client, the processing is necessary for the performance of a contract between you and us, and/or to take steps at your request prior to entering into a contract.

    Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Legal Services.

    We may use this information to promote our Legal Services, such as disclosing your contact information to legal directories or other promotional publications or communications.

    We will only process your personal data in this way to the extent that you have given us your consent.

    Payment and transaction information

    Payment information, such as your credit card or bank account details, and other information such as date and time of your transaction.

    We use this information to facilitate transactions made in connection with the provision of the Legal Services.

    Where you are the client, the processing is necessary for the performance of a contract between you and us, and/or to take steps at your request prior to entering into a contract.

    Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Legal Services.

    We use this information to detect and prevent fraud.

    The processing is necessary for our legitimate interests, namely the detection and prevention of fraud.

    Location Information

    Information that you choose to provide to us, such as your address or business address, or country of residence.

    We may use this personal information to facilitate internal business operations, including fulfilling our legal requirements and professional obligations.

    The processing is necessary for our legitimate interest, namely to comply with our professional obligations.

    Information provided by third parties

    From time to time, we may receive information about you from clients or third parties. We may obtain information from third parties to enhance or supplement our existing information about you. We may also collect information about you that is publicly available.

    We may combine this information with the information we collect from you directly. We use this information to:

    • contact you; and
    • provide the Legal Services in accordance with our client's instructions.

    Where you are the client, the processing is necessary for the performance of a contract between you and us, and/or to take steps at your request prior to entering into a contract.

    Where you are not the client, the processing is necessary for our legitimate interests and those of our clients, namely administering the Legal Services.

    All personal information set out above

    We use this information to comply with any professional or legal obligation to which we may be subject, such as disclosure of information to comply with a court order or at the request of a regulator.

    The processing is necessary for compliance with a legal obligation to which we are subject.

    We use this information to facilitate our internal business operations that are put in place for compliance with our legal obligations.

    The processing is necessary for our legitimate interests, namely the detection and prevention of fraud and the fulfilment of professional obligations.

  • Category of personal information

    How we use it (purpose of use)

    Legal basis for the processing

    Information about how you access and use the Online Services

    For example, the website from which you came and the website to which you are going when you leave our website, how frequently you access the Online Services, the time you access the Online Services and how long you use them for, whether you open emails or click the links contained in emails, whether you access the Online Services from multiple devices, and other actions you take on the Online Services.

    We use this information to present our Online Services to you on your device.

    The processing is necessary for our legitimate interests, namely to tailor our Online Services to the user.

    We use this information to determine news, alerts and other products and services that may be of interest to you for marketing purposes.

    The processing is necessary for our legitimate interests, namely to inform our direct marketing.

    We use this information to monitor and improve our Online Services and business, and to help us develop new products and services.

    The processing is necessary for our legitimate interests, namely to improve our Online Services generally; to monitor and resolve issues; and for the detection and prevention of fraud.

    Information about your device

    We also collect information about the computer, tablet, smartphone or other electronic device you use to connect to our Online Services. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to our Online Services through the device, your Internet service provider or mobile network, your IP address and your device’s telephone number (if it has one).

    We use this information to present our Online Services to you on your device.

    The processing is necessary for our legitimate interests, namely to tailor our Online Services to the user.

    We use this information to determine news, alerts and other products and services that may be of interest to you for marketing purposes.

    The processing is necessary for our legitimate interests, namely to inform our direct marketing.

    We use this information to monitor and improve our Online Services and business, and to help us develop new products and services.

    The processing is necessary for our legitimate interests, namely to improve our Online Services generally; to monitor and resolve issues; and for the detection and prevention of fraud.

  • If you are a resident in China, the following additional provisions apply.

    LEGAL BASIS FOR PROCESSING YOUR PERSONAL INFORMATION

    We rely on one or more of the following legal bases under the Personal Information Protection Law (“PIPL”) to process your personal information:

    • where prior consent is obtained from you;
    • where it is necessary for the conclusion or performance of a contract to which you are a party;
    • where it is necessary for performing a statutory responsibility or statutory obligation;
    • where it is necessary for responding to a public health emergency, or for protecting the life or health of a natural person or property safety in an emergency;
    • where the personal information is processed within reasonable limits for activities such as news reporting and public oversight conducted in the public interest;
    • where your personal information, which has already been disclosed by you voluntarily or otherwise lawfully disclosed, is processed within reasonable limits in accordance with PIPL; and
    • any other circumstance as provided by law or administrative regulations.

    CHILDREN’S PRIVACY

    Personal information of minors under the age of 14 (“Minor(s)”) is considered “sensitive personal information” under the PIPL. Our Public Services and Legal Services are not directed at Minors and we do not knowingly collect personal information from Minors. If you are a Minor, do not provide us with any of your personal information. If you become aware that your Minor child has provided us with their personal information, without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate any account your child has created with us.

    MARKETING AND ADVERTISING

    We will only send you marketing messages if you have given us your consent to do so. If you do not want to receive messages from us, you will be able to inform us of your wishes when we first collect your contact details or by refusing or withdrawing your consent. You can also change your preferences at a later date by clicking on the unsubscribe link at the bottom of our messages, visiting our Marketing Preferences Center to adjusts your communication preferences, or by emailing us at [email protected].

    Please note that if you do opt-out of or do not grant consent to receiving marketing related messages from us, we may still send you non-marketing messages, such as communications relating to the provision of Legal Services.

    STORING AND TRANSFERRING YOUR PERSONAL INFORMATION

    Retention periods

    Where a specific retention period is prescribed by applicable laws or regulations, we will retain your personal information for at least that period. If it is not possible to determine the specific retention period at the time of collection, we will determine the retention period based on reasonable criteria (for example, by reference to the duration of our contractual relationship with you, the statutory limitation periods, or applicable industry practices).

    International transfers of your personal information

    The personal information we collect may be transferred to and stored in countries outside of China. Any international transfers of your personal information are made in accordance with the requirements prescribed under the PIPL and other relevant China laws and regulations.

    For information on third party recipients of your personal information outside of China, please refer to the "Third Party Recipients of Your Personal Information" section above.

    If you require further information about the transfer of your personal information to recipients outside of China, or if you wish to contact any such recipient, please contact us at [email protected].

    YOUR RIGHTS

    If you are resident in China, or if you are receiving Public Services or Legal Services from, or otherwise engaging with an Orrick affiliate in China, under Chinese law you have the following rights in respect of your personal information that we hold:

    • Right to know and decide: you have the right to know and to decide about the processing of your personal information unless otherwise provided by laws and administrative regulations. You also have the right to request us to explain our rules on processing your personal information.
    • Right to restrict or object: you have the right to restrict or object to any processing of your personal information unless otherwise provided by laws and administrative regulations.
    • Right of access: you have the right to access or obtain a copy of your personal information unless we are obligated by law to keep certain information confidential.
    • Right to transfer: you have the right to transfer your personal information to another processor appointed by you, provided that the transfer meets the requirements set forth by the Cyberspace Administration of China (the “CAC”).
    • Right to rectify and supplement: you have the right to have your personal information rectified or supplemented where that personal information is inaccurate or incomplete.
    • Right to withdraw consent: where our processing of your personal information is based on your consent, you have the right to withdraw your consent at any time. However, this does not affect the lawfulness of the processing before your consent was withdrawn.
    • Right to erase: under any of the following circumstances, if we fail to erase your personal information, you have the right to request the erasure of your personal information: i) the purposes of processing have been achieved, or have failed to be achieved, or it is no longer necessary for achieving the purposes; ii) we have ceased to provide the products or services, or the retention period has expired; iii) you have withdrawn your consent; iv) we process your personal information in violation of any law, administrative regulation or agreement; or v) other circumstances provided by laws or administrative regulations. However, if we are obligated by laws or administrative regulations to retain your personal information for a longer period of time, or it is technically unfeasible to erase your personal information, we will retain your personal information with necessary security protection measures and will not otherwise process your personal information.

    In some cases, our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.

    Please also note that after an individual passed away, unless they had arranged otherwise before their death, their next of kin may, for their own lawful and legitimate interests, exercise the individual rights of the deceased to access, obtain a copy of, rectify or erase the personal information of the deceased.

    If you wish to exercise one of these rights, please contact us at [email protected]. You may also review and edit the personal information you have submitted to us through the Public Services by logging into your account at https://www.orrick.com/subscribe.

  • If you are resident in Singapore, or if you are receiving Public Services or Legal Services from, or otherwise engaging with an Orrick affiliate in Singapore, under Singapore law you have the following rights in respect of your personal information that we hold:

    • Right of access: you have the right to obtain:
      • your personal information that is in our possession or under our control; and
      • information about the ways in which that personal information has been or may have been used or disclosed by us within a year before the date of your request.
    • Right of correction: you have the right to correct an error or omission in the personal information we hold about you.
    • Right to withdraw consent: you have a right to withdraw consent in respect of the collection, use or disclosure of your personal information for any purpose by us. Upon withdrawal of such consent, we may not be able to provide some or all of the Public Services or Legal Services to you or respond to your other requests.
    • Right to portability: you have the right, in certain circumstances, to request the transfer of your personal information in our possession or under our control to another organisation in a structured, commonly used, machine-readable format.

    If you wish to exercise one of these rights, please contact us at [email protected]. You may also review and edit certain personal information you have submitted to us through the Public Services by clicking on the Manage Email Preferences link at the bottom of our messages.