Website Privacy & Cookie Notice

INTRODUCTION

Wolters Kluwer N.V. along with its various affiliated businesses (collectively, “Wolters Kluwer”, “we”, “us” or “our”) wants to inform you about the ways we process your personal information. In this Privacy & Cookie Notice we explain what personal information we collect, use and disclose. This is our global Privacy & Cookie Notice. If you are a resident in California, Quebec or Canada you can find particular information that applies to your location below.

Personal information means any data relating to an individual who can be identified, directly or indirectly, based on that information. This may include information such as names, contact details, (online) identification data, online identifiers or other characteristics specific to that individual. It does not include information that is considered anonymous, de-identified, or aggregated by applicable law, unless otherwise provided under applicable law.

This Privacy & Cookie Notice applies when you visit our websites, solutions and other services, including events and web chat communications, that refer or display a link to this notice (“Services”). This Privacy & Cookie Notice may be supplemented or replaced by additional privacy statements or terms provided to you from time to time.

WHO WE ARE

Wolters Kluwer is a global organization consisting of many companies worldwide. Our corporate web pages contain information about our headquarters, Wolters Kluwer N.V., and its various affiliates or subsidiaries, depending on the web pages you visit. Personal information provided to, or collected by, Wolters Kluwer via our corporate web pages is controlled by Wolters Kluwer N.V., P.O. Box 1030, 2400 BA, Alphen aan den Rijn, The Netherlands, under certain circumstances jointly with one of its affiliates or subsidiaries. As an example, the data relating to the use of a product-specific web page may be used by both Wolters Kluwer N.V. and the Wolters Kluwer affiliate or subsidiary offering the relevant product. The associated processing of personal data takes place on the basis of a controller-controller/joint controller arrangement (where applicable) between Wolters Kluwer N.V. and its relevant affiliates and subsidiaries. Under this arrangement, Wolters Kluwer N.V. will at all times be available for data subjects to address any concerns or questions and / or allow them to exercise their rights under their local applicable data protection laws regarding their personal information. Some product-specific web pages may contain communication features that are specific to the Wolters Kluwer affiliate or subsidiary behind the product associated with that web page, such as contact forms and web chat features. The controller of personal information collected through such communication features is the party identified therein.

We are committed to safeguarding the personal information of our customers, users, employees and other stakeholders, while helping our customers, employees, investors and society create a deeper impact and make the right decisions.

If you wish to contact us in relation to questions regarding your personal information, including the identities of the specific data controllers that have processed your personal information under this privacy policy, we refer you to the ‘HOW YOU CAN CONTACT US’ section below.

WHAT PERSONAL INFORMATION DO WE COLLECT?

The type of personal information we collect depends on your relationship with us and the Services we deliver to you. To that end, we may collect the following personal information about you:

• Name and contact details, such as, first and last name, email address, postal address, telephone number
• Work-related information, such as, job title and other employment or education information
• Account credentials, such as, passwords and other security information for authentication and access
• Financial information, such as, bank account, credit and debit card numbers for processing of payments
• Usage information, such as, behavioral information about how you navigate within our Services and which elements of our Services you use the most and information regarding the goods and/or services you wish to order, wish list, preferences, interest, etc.
• Computer, device and connection information, such as, IP address, browser type and version and location, advertising identifiers, cookie or tracker identifiers and related information
• Audio and visual information, such as your voice and image as captured in photographs, video, or audio recordings if you attend our events (online or in person) or leave us a message. Where required by applicable law, we will obtain your consent prior to recording.
• Any other information shared by you through our websites, apps, eStores, and other products and services, including web chat communications.

If you visit our premises, we may capture CCTV footage, for security and safety purposes. CCTV recordings are used to protect our staff, visitors, and property, and are processed in accordance with applicable data protection laws.

If you are under 13 years of age, please do not use or access the Services. Wolters Kluwer does not knowingly collect or maintain personal information (as defined by the United States Children’s Online Privacy Protection Act) from persons under 13 years of age. If Wolters Kluwer learns that personal information of persons under 13 has been collected on or through the Services, we will take appropriate steps to delete this information.

HOW WE COLLECT PERSONAL INFORMATION

We and our third-party service providers may collect personal information from the following sources:

• Direct interactions, such as when you register for our Services, make a purchase, or communicate with us, including through our web chat features
• Data from third parties, such as information on third-party websites or other information you may have made publicly available, or information provided by third party sources, including but not limited to government entities and data resellers
• Automated tracking technologies, such as information automatically collected about your interaction with our Services and websites using various technologies such as cookies, web logs and beacons and internet tags

HOW WE USE YOUR PERSONAL INFORMATION

Personal information is used for the purposes for which it has been collected and might be further used for statutory or other legitimate purposes only. As an example, if you make use of our service contact form or web chat features on our website, we will use the information you provided in the first place to respond to your service request. We might further use that information to improve the quality of our customer service process.

Lawfulness of the processing is one of the main principles relating to the processing of your personal information - we apply the following legal processing grounds (as permitted under applicable data protection laws) where the applicable data protection laws require us to have a ground in place:

• processing is necessary for the performance of a contract, or in order to take steps prior to entering into a contract;
• processing is necessary for the purposes of our legitimate interests or legitimate use as permitted under applicable data protection laws - for example, to improve the quality of our products and Services;
• processing is necessary for compliance with a legal obligation to which we are subject, or that is otherwise lawful under the applicable data protection laws;
• with your given consent.

Depending on how you interact with us and the Service, we may use your personal information for the following purposes:

• Administering our relationship with you and our business, such as providing and managing your access to and use of our Services. This processing is necessary for the performance of a contract;
• Developing and improving our new and existing products and Services, such as inviting you to participate in surveys or analyzing website traffic to optimize our websites or to personalize your experience with our Services. This processing is necessary for the purposes of our legitimate interests;
• Marketing and advertising, such as customer segmentation, providing you with marketing or advertising communications that we think you may be interested in. This processing is with your given consent or for our legitimate interests;
• Recruiting, such as assessing job applicants. This processing is in order to take steps prior to entering into a contract or with your given consent;
• Providing online communities, such as making chat rooms, web chats, forums, message boards, or news groups available to you. This processing is necessary for the performance of a contract or our legitimate interests. Please remember that any information disclosed in chat rooms, forums, message boards, and other online groups is public. We encourage you to exercise caution when disclosing personal information in these forums, as this information is made available to other users. Do not disclose information in these public forums that might be considered confidential or proprietary or that you do not wish to be publicly available or that you are prohibited from disclosing.
• Other general business support purposes, including but not limited to procurement, financial and fiscal management, risk and compliance management, and external reporting. This processing is necessary for compliance with a legal obligation to which we are subject, or that is otherwise lawful under the applicable data protection laws or for our legitimate interests.

SHARING YOUR PERSONAL INFORMATION

To be able to provide you the best possible Services and further our business operations, we may share certain information internally or with selected third parties. There might also be a certain statutory or legal obligation that we believe in good faith requires us to disclose your personal information externally. Categories of parties we might share data with include:

• other Wolters Kluwer affiliates or subsidiaries, e.g. for customer data management or providing underpinning technology to support the Services we are delivering;
• our service providers, e.g. for managing or hosting services and/or underpinning technology for the Services we are providing;
• our business partners and advertisers, e.g. if you have purchased or expressed interest in a product or service, or have been delivered or viewed an advertisement, of such a business partner, interacted with them or otherwise authorized the sharing of your personal information with such a business partner;
• subscribing, accrediting or professional organizations, e.g. for providing utilization information to organizations that provide you with access to our Services and/or sharing tracking and redeeming credits for professional accreditation;
• organizations involved in business transfers, e.g. to a purchaser or successor entity in the event of a sale or any other corporate transaction involving some or all of our business;
• other parties, e.g. as needed for external audits, compliance, risk management, corporate development and/or corporate governance related matters;
• governmental authorities, regulators and other third parties, in response to a legal request, court orders and/or as otherwise necessary to comply with applicable law.

Whenever we share personal information internally or with third parties in other countries, we have appropriate safeguards in place in accordance with the applicable data protection laws, including as applicable the EU Model clauses or other transfer safeguard specified in the applicable data protection laws such as binding corporate rules, a mutual agreement or derogations. As required under the applicable law, third parties are required to use appropriate safeguards to protect personal information in their possession.

FOR HOW LONG WE RETAIN YOUR PERSONAL INFORMATION

Your personal information will be processed to the extent necessary for the performance of our obligations, to comply with legal obligations, and for the time necessary to achieve the purposes for which the information is collected, in accordance with our data retention policies and the applicable data protection laws. When we no longer need your personal information, we will take all reasonable steps to remove it from our systems and records or take steps to keep it in a format where it no longer identifies an individual, for example by anonymisation.

HOW WE PROTECT YOUR PERSONAL INFORMATION

We have put in place an internal framework of policies and reasonable security standards across all our businesses to keep your data safe. In addition, we limit access to personal information by our employees, business partners, service providers and third-party service providers to a ‘need-to-know’ basis. More specifically and in accordance with the law, we take appropriate technical and organizational measures (policies and procedures, IT security and others) to ensure the confidentiality and integrity of your personal information and the way it is processed.

While we endeavor to protect our systems, sites, applications and information against unauthorized access, use, modification and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others.

You also have an important role in protecting personal information. You should not share any username, password or other authentication data provided to you with anyone, and we recommend that you do not re-use passwords across more than one website or application. It is important to renew your passwords regularly. If you have any reason to believe that your username or password has been compromised, please contact us as detailed below.

WHAT ARE YOUR RIGHTS

As a global organization, we operate in different jurisdictions which grant individuals different levels of protection in relation to the processing of personal information. We will honor your rights under the applicable law. To the extent provided under your local applicable data protection laws, including the European data protection laws as applicable, your rights may include the following:

• Right of access (‘an overview of your personal information’): the right to get an overview/summary of your personal information that we process and/or confirm that we have personal information about you.
• Right to rectification (‘correct your personal information’): if your personal information is inaccurate or incomplete, the right to ask us to rectify, update or complete your personal information.
• Right to erasure (‘right to be forgotten’): the right to request that we delete your personal information to the extent permitted by the applicable law. In certain circumstances, it may not be possible for us to accept your request; for example, when the processing is necessary to comply with a legal obligation, or if the processing is necessary for the performance of a contract. In some cases, your personal information is necessary in order to provide the Services and if you do not provide such information to us then you may be precluded from accessing and using the Services or using certain Services features.
• Right to data portability (‘transfer your personal information’): the right to ask us to transfer your personal information directly to you. This applies to certain personal information if processed by automated means and with your consent, or based on a contract you have with us. On your request, and where technically feasible, we will transfer your personal information to another party of your choice.
• Right to restrict processing: the right to request that we restrict or stop the processing of your personal information held by us for a certain period of time, or for an indefinite period. In certain circumstances, it may not be possible for us to accept your request; for example, when the processing is necessary to comply with a legal obligation, or if we can demonstrate compelling legitimate grounds otherwise.
• Right to object: the right to object to the processing of your personal information. The reasons for an objection should relate to your particular situation, and be related to processing based on the legitimate interest condition. We will then no longer process the personal information, unless we can demonstrate compelling reasons otherwise. In certain circumstances, you have the unconditional right to object; for instance, in the context of direct marketing activities.
• Withdrawal of Consent: the right to withdraw your consent to the processing of your personal information at any time; for instance, after you consented to us keeping you informed about our Services, you have the right to withdraw this consent at any time. Withdrawal of your consent will not affect the lawfulness of the processing of your personal data prior to the withdrawal.

To exercise your rights (if applicable) and/or for any other questions about the handling of your personal information, we refer you to the ‘HOW YOU CAN CONTACT US’ section below.

If you feel we are unresponsive or disagree with our data privacy practices, you can also file a complaint with your local Data Protection Authority.

THE USE OF COOKIES AND INTEREST BASED ADVERTISING

Cookies are small text files, which might be stored on your computer or mobile device. Similar technologies may include pixels, beacons, tags, embedded scripts, social media plugins or other tracers or similar technologies. These tracking technologies are often used in conjunction with cookies but may be stored in a different manner.

We use cookies and similar tracking technologies (collectively referred to as “Cookies”) for several different purposes, including to optimize our websites, to facilitate website browsing and to analyze website traffic. Cookies may collect information to analyze personal browsing behavior, remember you and your preferences, personalize our Services, and to deliver and measure advertising (including interest-based advertising).

We may use Cookies belonging to one of the four categories listed below.

• Strictly Necessary Cookies - These are necessary for the website to function. They are usually set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, this may have an effect on the proper functioning of (parts of) the site.
• Functional Cookies - These enable the website to provide enhanced functionality, user experience and personalization, and may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, then some or all of these services may not function properly.
• Performance Cookies - these support analytic services that help us to improve our website’s functionality and user experience.
• Advertising Cookies - these can be applied to collect insights, to issue personalized content and advertising on our own and other websites.

If you do not want Cookies to be stored, most modern browsers allow you to select the appropriate options or preferences from the settings in your browser or you may select the appropriate preferences in the cookie-tool(s) provided on this Site and our other websites, where applicable.

Our website cookie consent management tool also allows you to manage your preferences for Cookie categories (except those that are strictly necessary). The tool will also provide an overview of all Cookies used under the categories described above. For additional information about Cookies and/or to change your Cookie consent preferences, please visit the Manage Cookie Preferences center.

LINKS TO OTHER WEBSITES

Our websites may contain links to other Wolters Kluwer or third-party websites, which may have privacy & cookie notices that differ from ours. We are not responsible for the collection, processing or disclosure of personal information collected through such other websites.

We are also not responsible for any information or content contained on such websites. Links to other websites are provided solely for convenience. Your usage and browsing on any such website is subject to that website’s own policies. Please review the privacy notices posted on other websites that you may access through our website.

Wolters Kluwer may provide you with additional or different privacy notices, in specific instances, on how your personal information is collected and used for a specific Service.

ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS

In addition to the information provided in this privacy policy, additional information for California residents can be found here.

ADDITIONAL INFORMATION FOR QUEBEC AND CANADIAN RESIDENTS

In addition to the information provided in this privacy policy, additional information for Quebec and Canadian residents can be found here.

HOW YOU CAN CONTACT US

If you have any questions about how we process your personal information or if you want to exercise one of your rights or submit a data protection complaint, you can contact us by using the INQUIRY AND OTHER REQUESTS form. We will respond to your request in accordance with applicable data protection laws and within the timeframes required under those laws.

If you feel we are unresponsive or disagree with our data privacy practices, you also have a right, depending on applicable law, to file a complaint with your local Data Protection Authority.

In response to a request, we might ask you to verify your identity if needed, and to provide information that helps us to understand your request better. If we do not grant your request, whether in whole or in part, we will explain why.

In some circumstances, certain individuals may designate an authorized agent to submit requests to exercise certain privacy rights on their behalf. To do so, you must provide that authorized agent written and signed permission to submit the request on your behalf and verify your own identity directly with us. Note that we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

If you are an authorized agent submitting a request on behalf of another person, you must provide a completed Authorized Agent Designation form indicating that you are authorized to act on that person’s behalf by submitting it through our Authorized Agent Designation page.

UPDATES TO THIS NOTICE

From time to time we may update this Privacy & Cookie Notice or any other specific privacy statement. When making changes to this Privacy & Cookie Notice, we will add a new date to this Privacy Statement. This version is effective as of June 2026.

Last Updated June 2026

Version 1.5, 2026