LEGAL

Privacy Policy

Data we collect

The firm collects limited personal data from three categories of individuals. From visitors to the website, we collect minimal analytics data necessary to operate the site and understand aggregate traffic patterns. From individuals who submit an inquiry through the contact form, we collect the name, organization, professional role, contact details, and the content of the message provided. From engaged clients, we collect operational matter information necessary to provide legal services, including documents and correspondence related to the mandate.

Why we collect it

Personal data is collected for purposes limited to responding to inquiries, providing and administering legal services, fulfilling regulatory and professional obligations, and protecting the security and integrity of our systems and communications. We do not collect personal data for marketing, profiling, or advertising purposes.

Legal basis for processing

For inquiries, the legal basis for processing is the consent of the individual submitting the inquiry, provided through the consent checkbox on the form. For engaged clients, the legal basis is the performance of the engagement contract. For security, fraud prevention, and system integrity, the legal basis is our legitimate interests in maintaining a secure and reliable practice. For retention obligations imposed by regulators, bar councils, or applicable law, the legal basis is compliance with a legal obligation.

Who we share data with

The firm does not sell personal data, and does not share personal data with third parties for marketing or advertising. Personal data is shared with external service providers only where necessary for service delivery, and only under written confidentiality and data-processing arrangements that require the service provider to protect the data to the same standard as the firm. Personal data may be disclosed where legally required, such as in response to a court order, a lawful regulatory request, or a professional obligation.

Data retention

Inquiry data is retained for a period of six months after the date of inquiry, after which it is deleted or anonymized unless a mandate has been opened. Engaged client matter data is retained for the period required by the regulatory retention rules of the relevant jurisdiction, which varies between five and ten years after the close of the matter. Website analytics data is retained in aggregated form only; individual identifiers are not stored beyond the operational lifetime of a session.

Your rights

Individuals whose personal data is held by the firm have the right to request access to that data; to request rectification of inaccurate data; to request erasure of data no longer required for the purpose for which it was collected; to object to processing based on legitimate interests; and to receive a portable copy of the data in structured form where technically feasible. Individuals also have the right to lodge a complaint with the supervisory authority of their jurisdiction — the relevant Data Protection Authority in the European Union, the Ukrainian Ombudsperson in Ukraine, or the relevant U.S. state authority where applicable.

International transfers

Because the firm operates through affiliated entities in the United States, Poland, and Ukraine, personal data may be transferred between these jurisdictions in the course of coordinating a mandate or administering the firm. Where such transfers occur, we implement appropriate safeguards, including the European Commission’s Standard Contractual Clauses for transfers outside the European Economic Area, and equivalent safeguards under the applicable Ukrainian framework.

Cookies and tracking

The firm’s website uses only essential cookies required for site functionality, such as maintaining session state. We do not use third-party tracking cookies, advertising cookies, or analytics cookies that identify individual visitors. No personal data is shared with advertising networks.

Contact for privacy inquiries

For any privacy-related inquiry, including requests to exercise the rights described above, please contact privacy@northlinecounsel.com. Inquiries will be answered within one month of receipt, or within an extended period if the request is complex, with notice of the extension.