What Data We Collect

We collect personal data necessary to provide professional legal services, to operate the website and to comply with legal obligations. Collection methods include direct submission by users, automatic technical collection and third-party sources where permitted.

Data You Provide Directly

When you engage our services, request information or communicate with us, you may provide the following categories of personal data:

• Identity and contact information (name, email address, telephone number, company name)
• Business and professional details (position, company registration, industry sector and business ID)
• Transactional and billing information (invoices, payment confirmations, billing address)
• Case and engagement materials (contracts, technical documentation, project descriptions, code samples where relevant)
• Communications and correspondence provided by you (emails, messages, meeting notes)
• Consents and preferences provided for marketing or service notifications

Data Collected Automatically

When you use our website or interact with digital services, certain technical data is collected automatically to support functionality, security and analytics:

• Device and browser information (type, version, operating system)
• IP address and approximate location derived from network data
• Usage logs and interaction data (pages visited, time on site, click events)
• Cookies and similar tracking technologies to remember preferences and measure performance
• Error and diagnostic data when an application or page fails
• Analytics identifiers used by analytics platforms to improve site functionality

Data from Third-Party Sources

We may supplement data you provide with information obtained from trusted third parties to perform services and comply with obligations:

• Payment processors and banks for transaction verification
• Professional service providers and advisors engaged to support a client matter
• Publicly available registries and corporate databases for identity and business verification

Legal Bases for Processing

We rely on appropriate legal bases for processing personal data. These bases are selected according to the nature of the processing activity and applicable law.

• Performance of a contract: processing necessary to provide legal services and fulfill contractual obligations with clients
• Consent: where you have given a clear, freely given consent for specific purposes such as marketing communications
• Legal obligation: processing required to comply with statutory duties, professional regulations or court orders
• Legitimate interests: processing necessary for business operations, security, fraud prevention and management of client relationships, balanced against individual rights

Cookies and Similar Technologies

We use cookies and similar technologies to ensure the website functions correctly, to analyze usage and to remember preferences. Cookies help us deliver a stable and secure experience.

Types of cookies used include session cookies, persistent cookies, and third-party cookies provided by analytics and performance services.

Categories: strictly necessary (site operation), functional (preferences), performance/analytics (usage measurement) and marketing (where applicable and only with consent).

You can manage cookie preferences via your browser settings or through available consent controls on the site. Disabling certain cookies may affect site functionality.

Cookie Policy

When We Share Your Data

We share personal data only when necessary for the operation of services, with contractual partners, or when legally required. Recipients are bound to process data in accordance with this policy and applicable law.

• Service providers and sub-contractors engaged to deliver or support our legal services (hosting, IT, document management)
• Payment processors and business institutions for billing and transactional purposes
• Professional advisors and auditors engaged under confidentiality obligations
• Regulatory bodies, courts or law enforcement when required by law or to respond to legal claims
• Prospective buyers, supporter or advisors if there is a corporate transaction involving our business, subject to confidentiality and legal safeguards
• Analytics and performance service providers to improve website and service delivery under appropriate data processing terms

International Data Transfers

Personal data may be transferred to and processed in jurisdictions outside the country where you reside, including locations where our service providers operate. When transfers occur, we take steps to ensure an adequate level of protection for personal data.

Safeguards for international transfers may include standard contractual clauses, data processing agreements with approved protections, and technical measures such as encryption to protect data in transit and at rest.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this policy, to meet legal and regulatory obligations, and to maintain records consistent with professional standards.

Account and client files are retained for the duration of the engagement plus a reasonable archival period determined by legal and regulatory requirements and professional best practice.

Communications and case notes are retained for periods aligned with client matter lifecycle and applicable retention schedules, then archived or securely deleted.

System logs and technical monitoring data are retained for operational and security reasons for defined periods and are subject to secure deletion policies.

On termination of services or when data is no longer necessary, we securely delete or anonymize personal data except where retention is required by law or for legitimate business purposes such as dispute resolution.

Security of Personal Data

We implement technical and organizational measures proportionate to the risks associated with processing activities. Measures include administrative policies, encrypted communications, access controls, regular security reviews and staff training to protect data confidentiality and integrity.

• Encryption of data in transit using industry-standard protocols and encryption of sensitive data at rest where appropriate
• Role-based access controls, multi-factor authentication for privileged systems and least-privilege principles for staff access
• Regular vulnerability assessments, patching practices and incident response procedures to detect and address security events

Your Privacy Rights

Depending on applicable law, individuals may have rights in relation to their personal data. We provide mechanisms to exercise those rights and will respond in accordance with legal requirements.

• Right to access personal data we hold about you and details of processing
• Right to request correction of inaccurate or incomplete personal data
• Right to request deletion of personal data where processing is no longer necessary and no legal basis to retain it exists
• Right to request restriction of processing in certain circumstances
• Right to data portability where processing is based on consent or contract and technically feasible
• Right to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent at any time for processing activities based on consent, without affecting processing prior to withdrawal
• Right to lodge a complaint with a relevant data protection authority if you consider your rights have been infringed

How to Exercise Your Rights

If you wish to exercise your data rights, including access, correction, deletion, or portability, submit a request describing the specific information you need. We will verify your identity and process the request in accordance with applicable law and our internal policies. Requests should include: your full name, email address used with exvoramiify, a description of the records sought, and a copy of an ID when required for verification.

[email protected]

We aim to acknowledge receipt of privacy rights requests promptly and to complete routine requests within a reasonable time frame. Complex requests may require additional time for verification and review; we will communicate any expected extension and the reasons for it. If more information is needed to process your request, we will ask for it and pause the timeline until we receive a response.

Marketing Communications

We may send service-related notices, administrative messages and, where you have opted in, relevant newsletters about legal developments for the IT sector. Marketing communications are limited to information that helps clients manage legal risk, regulatory compliance and commercial transactions in technology and software industries.

To stop receiving promotional emails, follow the unsubscribe link included in the message or contact our privacy team at [email protected]. We will process unsubscribe requests promptly; service-related communications, such as contractual or billing notices, cannot be unsubscribed.

Children's Information

exvoramiify does not knowingly collect personal data from minors for client intake or legal services. If we learn that we have collected personal data from a child without appropriate consent where required by law, we will take steps to delete the data unless retention is necessary for compliance or legal obligations.

Third-Party Links and Services

Our website may contain links to third-party sites or services operated by partners, regulators or technology providers. These third parties maintain their own privacy practices and are responsible for their compliance. We recommend reviewing third-party privacy notices before providing personal information.