Privacy Policy 

Read the Facebook You Owe Us Privacy Policy below. is a website operated by Milberg London under instruction from Alvin Carpio.

Milberg London LLP is a limited liability partnership registered in England and Wales under company number OC430853 with its registered office at 1st Floor, Holborn Gate, 330 High Holborn, London, England, WC1V 7QT.

Milberg London is the law firm advising Alvin Carpio for the purpose of bringing a representative action against Facebook in respect of a number of historical purported data breaches. That action is referred to as the “Facebook Case” in this Notice. Alvin Carpio (who is sometimes known as “the Class Representative”) has given his permission for Milberg London LLP to act on his behalf for the purposes of collecting, storing and sharing information on this website. (In these terms Alvin Carpio and Milberg London LLP are referred to as “we” and “our”).

Our exact roles are further set out in these terms.

Milberg London are data controllers.

To contact us, please email

This Privacy Policy explains how, from time to time, we collect and use any Personal Data you provide to us, and how we safeguard the privacy of such information.

We want you to know that we respect the privacy of every user who visits our website and every user who makes an enquiry through our website. We set out below what information we learn about you when you visit the Website, what we do with that information, and how you can change the information we hold about you.
The information we collect

All users of this website must agree to our Terms of Use and confirm that they have read this Privacy Policy before using this Website.

You are encouraged to visit our website and engage with its published content. Where you submit an enquiry to us you may be asked to submit to us your name and e-mail address (together, these are types of Personal Data).

We have created this website for the purpose of bringing the Facebook Case. This Privacy Policy will be subject to change as the Facebook Case progresses. Please refer back to this notice for the most recent additions, which will be uploaded once changed.

You have the right to obtain from us access to the information that we hold on you, together with information as to whether Personal Information concerning you is being processed, what is being processed and where the Personal Information is being processed.

A description of this key information is below:

  • the purposes of the processing: to gather information about potential claimants wishing to withdraw from, or learn more about, the representative action being led by Alvin Carpio and to support those claims;
  • the categories of Personal Information concerned: names and email addresses;
  • the recipients or categories of recipient to whom the Personal Information have been or will be disclosed, in particular recipients in third countries or international organisations: the data will be shared with legal and other professional advisors in connection with the Facebook Case;
  • you have the right to request rectification or erasure of Personal Information or restriction of processing of Personal Information or to object to such processing;
  • you have the right to lodge a complaint with the UK’s Information Commissioner’s Office.

How we use your information
Your Personal Information will be used:

  • to communicate with you about the work we are doing on the Facebook Case; and
  • in the event of a successful decision granted by the Court, and upon your express permission, to service the needs of the Facebook Case. 

Disclosure of information
We want you to feel free to use and explore our Website without worrying about whether your visit will generate unwanted sales or marketing activity such as junk mail or spam. It will not.

Milberg London LLP are registered as data controllers under, and aim to comply with, the General Data Protection Regulation and domestic data protection and ePrivacy legislation in the United Kingdom. We will take all reasonable care to prevent any unauthorised access to and use of your Personal Information.

Our staff and those working for our agents and contractors have a responsibility to keep any submitted Personal Information confidential and will only use it for the purposes outlined above.

We may, when appropriate to do so, offer a facility for users to supply us with appropriate Personal Information through our website, for the purpose of informing you about ongoing developments to do with our work.

This information may include guidance from us, following a favourable decision by the Court, such as on how to proceed with a claim, or on how the data collection process takes, or took, place, for the purpose of our work in connection with the Facebook Case.

If you do not wish to receive information from Milberg London LLP or our associates or wish to delete Personal Information you have submitted through the Website, please send an email to us at

In future, we may be under a duty to disclose your Personal Information in order to comply with any legal obligation, or in order to enforce or apply our terms of use. If we are under such duty to disclose your Personal Information we reserve the right to do so.

If a third party acquires control of the business of Milberg London LLP, the Personal Information we hold about you for the continued purposes of the Facebook case may form part of that acquisition and be transferred to the purchaser.

Security of data
We will take into account the nature, scope, context and purposes of the processing of held personal data as well as the risks of varying likelihood and severity of protecting your rights and freedoms. We shall implement appropriate technical and organisational measures to ensure that the processing of your Personal Information is performed in accordance with the data protection legislation. Where necessary, these measures shall be reviewed and updated.

Any Personal Information you enter on our enquiry form is encrypted by the use of security systems with encryptions and firewalls, provided on a secure socket layer (SSL), to protect the confidentiality and integrity of your information from unauthorised access and disclosure.

If you have any questions about the security of our website please e-mail us at

The Data Protection Act 2018 and General Data Protection Regulation

We make every effort to ensure that our systems and procedures meet both the legal requirements and the best practice recommendations of the General Data Protection Regulation and the Data Protection Act 2018.

For more detail about your rights, the rules we have to adhere to in collecting and storing your information, and how you can check your data records visit

We process your data on the basis that it is in our legitimate interests to do so.

You have a right to receive a copy of the information we hold about you by sending your request:

Milberg London LLP to: 1st Floor, Holborn Gate, 330 High Holborn, London, England, WC1V 7QT.

Our registration details can be found in the Terms of Use section.

Links to other sites
If you use a link on this Website to take you to another website not managed by us, your privacy will not be protected in accordance with this policy. You will need to check that website’s own privacy statement.

We make no representations as to the accuracy or any other aspect of information contained in other websites.

Where we store your personal information

We store your information in hard copy and in electronic format. We use industry standard technical and organisational measures to protect information from the point of collection to the point of destruction.

We will only transfer personal data to a third party if it agrees to comply with those procedures and policies, or if it puts in place adequate measures itself. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Information, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

International transfers
To deliver services to you, it is sometimes necessary for us to transfer and store your personal data outside of the UK and the European Economic Area (“EEA”) as follows:

  • affiliated firms which are part of the Milberg brand;
  • our service providers located outside the EEA;
  • if you are based outside the EEA; and
  • where there is an international aspect to the matter which we have been instructed on. 

Where personal data is transferred to and stored outside the EEA, we take steps to provide appropriate safeguards to protect your personal data, including:

  • transferring your personal data to a country, territory, sector or international organisation which the European Commission has determined ensures an adequate level of protection, as permitted under Article 45(1) GDPR; or
  • entering into standard contractual clauses approved by the European Commission, obliging recipients to protect your personal data as permitted under Article 46(2)(c) GDPR.

In the absence of an adequacy decision or of appropriate safeguards as referenced immediately above, we will only transfer personal data to a third country where one of the following applies (as permitted under Article 49 GDPR):

  • the transfer is necessary for the performance of any contractual engagement with you;
  • the transfer is necessary for the establishment, exercise or defence of legal claims; or
  • you have provided explicit consent to the transfer.

If you want further information on the specific mechanism used by us when transferring your personal data out of the EEA, please contact us at

Data retention
We will retain any data we collect from you in relation to this website for a period of six years after the representative action has ended. After this period of time we will either permanently destroy any data we hold or ensure that it is placed outside of daily use by any third party.

Our Privacy Manager can be contacted via the email or by post to our office address, above. Complaints relating to the handling or processing of your personal data should be addressed to the Privacy Manager in the first instance.

You have the right to make a complaint at any time with a supervisory authority, in particular in the EU (or EEA) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner’s Office (“ICO”) who can be contacted at or telephone on 0303 123 1113. 

Changes to the privacy policy

We want you to be aware of the information we collect and how we use it at all times.

If we need to change our Privacy Policy we will post the changes on this page, and may place notices on other pages of the website to draw your attention to any change. If at any time you have provided us with your email address via an enquiry form we will send an email to that email address notifying you of any changes.



Register for email updates

I’d like to learn more about the representative action against Facebook and receive email updates on the claim’s progress.

Register for email updates

I’d like to learn more about the representative action against Facebook and receive email updates on the claim’s progress.