Privacy Policy

Ellinas Law (“we”, “us”, “our”) is a law firm based in Nicosia, Cyprus, regulated by the Cyprus Bar Association. We are the data controller responsible for the personal data you share with us through this website. Our contact details are at the end of this policy.

When you submit an enquiry through our website, we collect:

• Your name, email address and phone number;
• The practice area or subject of your enquiry, and any details you choose to share in the message field;
• Whether you have asked to book an introductory call and your preferred timing;
• Your consent to be contacted, and the date and source page of your submission.

We may also collect limited technical information (such as your browser type and general usage data) to operate and secure the site.

We use your personal data to:

• Respond to your enquiry and arrange any call or consultation you request;
• Assess and, where appropriate, provide the legal services you are interested in;
• Carry out client onboarding and any legal or regulatory checks required of us;
• Maintain our records and improve the operation of our website.

Under the EU General Data Protection Regulation (GDPR) and Cyprus data protection law, we rely on: your consent (which you give when submitting the enquiry form and may withdraw at any time); our legitimate interest in responding to enquiries and running our practice; the performance of a contract where we go on to act for you; and compliance with our legal obligations, including anti-money-laundering and professional conduct rules.

We do not sell your personal data. We share it only with trusted service providers who help us run the website and manage enquiries (for example, our cloud hosting and database provider), each bound to protect it, and with authorities or third parties where we are required to do so by law or professional regulation.

Where personal data is processed outside the European Economic Area by our service providers, we ensure it is protected by appropriate safeguards, such as the European Commission’s standard contractual clauses.

We keep enquiry data for as long as necessary to deal with your enquiry and, where you become a client, for the period required by law and our professional obligations. If you do not become a client, we delete or anonymise your enquiry data once it is no longer needed.

Subject to the conditions in the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, or its processing restricted;
• object to processing, and to data portability;
• withdraw your consent at any time, without affecting earlier processing.

To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Enquiries submitted through this site are transmitted over an encrypted connection.

Our website uses only the cookies and similar technologies necessary for it to function and to remember your display preferences. We do not use them to build advertising profiles.

We may update this policy from time to time. The date below shows when it was last revised; please check back periodically for the current version.