Privacy Notice

Your information,
handled carefully.

Effective date: 12 August 2026

This notice explains how LegalCons collects and uses personal data when you visit this website, contact us or submit an inquiry. LegalCons, based in Cyprus, is the controller of that information.

1. Information we collect

We may collect your name, company or organisation, email address, telephone number, the contents of your inquiry and subsequent correspondence. We also receive limited technical information ordinarily generated when you use a website, such as device, browser, IP and security-log information.

2. Why we use it and our legal bases

We use inquiry information to review and respond to your request, communicate with you, perform conflict and scope checks, prepare a proposal and take steps you request before a possible engagement. Our legal bases are taking pre-contractual steps at your request and our legitimate interests in operating, securing and improving our consultancy and responding to genuine business inquiries. Where processing is required by law, we rely on the relevant legal obligation. We do not use inquiry details for unrelated marketing without an appropriate legal basis.

3. Sensitive and confidential information

Please do not submit special-category personal data, criminal-offence data, privileged material or other highly sensitive information through the website. Contacting LegalCons does not by itself establish a professional engagement or a duty to accept your matter. If sensitive information becomes necessary, we will agree an appropriate method for providing it.

4. Recipients and service providers

Access is limited to LegalCons and service providers that support website hosting, security, email and form delivery. The inquiry form is delivered using FormSubmit. Information may also be shared with professional advisers, competent authorities or qualified external associates where necessary, lawful and—where appropriate—agreed with you. We do not sell personal data.

5. International transfers

Some technology providers may process data outside the European Economic Area. Where this occurs, we take reasonable steps to use a lawful transfer mechanism, such as an adequacy decision or approved contractual safeguards, as applicable. You may contact us for information about the relevant safeguards.

6. Retention

Unsuccessful or preliminary inquiries are ordinarily retained for up to 24 months after the last meaningful communication, unless a shorter period is appropriate or longer retention is reasonably required for legal claims, compliance, fraud prevention or another legal obligation. If you become a client, information is retained in accordance with the engagement terms and applicable legal, tax and professional requirements. Security logs may be kept for shorter operational periods.

7. Your rights

Subject to the GDPR and applicable limitations, you may request access, correction, erasure, restriction or portability of your personal data, and may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. We may need to verify your identity before acting on a request.

8. Complaints

Please contact us first so we can try to resolve your concern. You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus or, where applicable, another competent supervisory authority.

9. Cookies and external links

This website does not intentionally use advertising or behavioural-tracking cookies. Essential technical storage may be used for security and basic operation. Links to external websites are governed by their own privacy practices.

10. Security and changes

We use proportionate organisational and technical measures intended to protect personal data, but no internet transmission is completely secure. We may update this notice when our practices, providers or legal obligations change; the effective date above will show the latest revision.