Privacy Policy

Last updated: 2026-04-16

Draft document. Final legal review is pending; wording may change.

This Policy describes how the journal Law and Learning (“we”) processes personal data of users of lawandlearning.org.

Data controller

CF "Education for the Future" (eduftf.org), Ukraine. Privacy contact: [email protected].

What we collect

  • Email — for magic-link authentication and editorial correspondence
  • Name, ORCID, affiliation, and email of co-authors — when a manuscript is submitted
  • Manuscript files (PDF/DOCX) — for editorial processing
  • Review text, scores, and recommendations
  • Technical session data: IP, user-agent, TLS metadata, Cloudflare service logs

Why we process data

Editorial workflow (submission, peer review, decisions, publication), communication with authors and reviewers, abuse prevention, and infrastructure protection.

Legal basis

Processing is based on contract (manuscript submission), legitimate interest (sustaining the editorial process), and consent where applicable.

Retention

Published materials are retained indefinitely as part of the scholarly record. Data related to unpublished or rejected manuscripts is deleted within seven years.

Recipients

  • Microsoft Graph API — sending transactional email
  • Cloudflare — hosting, storage (D1 and R2, EEUR region), bot protection (Turnstile)
  • Crossref — DOI registration for published articles
  • ORCID — verifying author identifiers

Your rights

  • Obtain a copy of your personal data
  • Correct inaccurate data
  • Request deletion, where it does not conflict with the duty to preserve the scholarly record
  • Lodge a complaint with the competent data protection authority

To exercise rights, contact [email protected].

Cookies

A detailed list is available in our Cookies notice. →

Changes

Material changes will be announced on the site with an updated revision date.