Your personal data will generally not be transferred outside the European Economic Area (“EEA”) or the UK (after the end of the Brexit transition period) other than where the transfer is necessary for the purposes of establishing, exercising or defending legal rights, obtaining legal advice, or in connection with any legal proceedings, or otherwise as permitted by law.
If we ever do transfer your personal data outside the EEA (or the UK once the Brexit transition period has ended), we will take appropriate steps to protect your information, including transferring it over a secure and encrypted service, and requesting the receiver not to share the information further.