Scope
This notice covers personal data collected through this website. It does not cover data we hold about clients under an engagement, which is governed by the engagement letter and by our professional obligations.
We process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where it applies, the General Data Protection Regulation for visitors in the European Economic Area.
What we collect
What you send us. If you use the enquiry form, we receive your name, email address, any company name you give, and the message you write. If you arrive from the jurisdiction engine, we also receive the reference for that result — a short code representing the answers you selected, which contains nothing personal.
Analytics. We use Plausible Analytics, which is cookieless and does not collect or store personal data or cross-site identifiers. It records page views in aggregate. It does not build a profile of you.
Anti-abuse. The enquiry endpoint records the network address a submission came from, in memory and briefly, to limit repeated submissions. Where a challenge widget is enabled, its provider processes a token to distinguish people from automated traffic.
What we do not collect
We do not set advertising cookies. We do not use tracking pixels. We do not sell or share personal data with data brokers, and we do not use enquiry contents to market unrelated services.
What stays in your browser
The document checklist saves your progress in your browser's local storage. That data never reaches our servers and we cannot read it. Clearing your browser data clears it.
Why we process it
To reply to your enquiry, and to decide whether we can act for you. For a prospective client, that is a step taken at your request before entering a contract; for our own record-keeping, it is our legitimate interest in running the practice, which we consider not to be overridden by your interests.
How long we keep it
Enquiries that do not become engagements are kept only as long as needed to answer them and to run a conflict check, and then deleted.
Where an engagement follows, retention is governed by the engagement letter and by the record-keeping periods that apply to a legal practice and to anti-money laundering obligations.
Who else sees it
Our email provider, in order to deliver the message. Our hosting provider, in order to serve the site. Where a challenge widget is enabled, its provider.
We do not transfer personal data outside these arrangements, and we do not transfer it to any jurisdiction without an appropriate basis for doing so.
Your rights
You may ask what we hold about you, ask us to correct it, ask us to delete it, object to our processing it, or ask for a copy in a portable form. You may also complain to the relevant supervisory authority.
Some of these rights are limited where we are required to retain records by law or by professional obligation. Where that applies, we will say so.
Contact
Requests should be sent through the enquiry form. A dedicated contact address for data protection matters is [to be supplied].
Quellen
- To be reviewed by counsel before launch — Data protection, professional conduct and consumer wording all need sign-off