Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to personal data collected through this website (the "Website"), operated by [Insert Firm Legal Name] under the name anakondaa (the "firm", "we", "us"). It does not apply to personal data the firm processes in the course of an active representation, which is instead addressed in the applicable Engagement Agreement and any separate client-facing privacy notice.

As built and delivered, the Website does not use analytics services, advertising or tracking cookies, or third-party embedded content by default, and loads no third-party scripts. If the firm later adds such functionality, this Policy should be updated accordingly before that functionality goes live.

2. Data Controller

The entity responsible for determining the purposes and means of processing personal data collected through the Website is:

3. Categories of Personal Data

Depending on how you interact with the Website, the firm may collect the following categories of personal data:

• Contact details you provide when you send an inquiry, such as your name, email address, and telephone number.
• Inquiry content, meaning the information you choose to include describing your situation or question.
• Technical data that may be generated by ordinary web server operation, such as IP address, browser type, and access timestamps, to the extent the firm's hosting provider logs this information. [Confirm actual hosting/server log practices].
• Any other personal data you choose to submit in a message, subject to Section 17.

The Website does not, by default, use cookies to collect analytics or advertising data, and does not embed third-party trackers. See Section 11.

Where you correspond with the firm by email or telephone rather than through the Website directly, that correspondence is also handled in accordance with the principles in this Policy, even though it does not pass through the Website itself, because it relates to the same underlying inquiry process described here.

4. Sources of Personal Data

The firm collects personal data primarily directly from you, when you contact the firm through the Website, by email, or by telephone. The firm does not, as part of this Website, purchase or obtain personal data about you from third-party data brokers.

5. Purposes of Processing

Personal data collected through the Website may be used to:

• respond to your inquiry and communicate with you about a potential engagement;
• conduct conflict-of-interest checks as described in our homepage and in Section 5 of our Website Terms of Use;
• comply with applicable legal, regulatory, and professional obligations, including client identification and anti-money-laundering requirements described in Section 15 of the Website Terms of Use;
• maintain the security and proper functioning of the Website;
• where you become a Client, as further described in the applicable Engagement Agreement.

6. Potential Legal Bases

Where data protection laws such as the GDPR apply, the firm anticipates that processing described in this Policy would typically rely on one or more of the following potential legal bases, to be confirmed for each purpose by qualified counsel:

• Legitimate interests, such as responding to inquiries and operating the Website securely, balanced against your rights and interests;
• Compliance with a legal obligation, such as client identification, anti-money-laundering, or sanctions screening requirements described in Section 15 of the Website Terms of Use;
• Performance of, or steps prior to entering into, a contract, once an Engagement Agreement is contemplated or in place;
• Consent, where the firm relies on it for a specific, defined purpose, which you may withdraw at any time.

This section describes potential bases only and does not itself confirm which basis applies to a given processing activity; that determination should be made and documented by the firm with the benefit of jurisdiction-specific legal advice.

7. Recipients of Personal Data

The firm may share personal data with:

• lawyers and staff within the firm who need the information to respond to your inquiry or provide Services;
• service providers that support the firm's operations, such as hosting or IT support providers, acting on the firm's instructions [Insert categories of vendors actually used, e.g., hosting provider, once confirmed];
• professional advisers, auditors, or regulators, where necessary and permitted;
• courts, tribunals, law enforcement, or other authorities, where required by Applicable Law or a valid legal process, as described in our Compliance and Law Enforcement Requests Policy.

The firm does not sell personal data. Any service provider that processes personal data on the firm's behalf is expected to be bound by contractual obligations to protect that data and to use it only for the purposes for which it was engaged, consistent with Applicable Law.

8. International Data Transfers

Personal data may be processed in a country other than the one from which it was submitted, including [Insert countries where data is processed or stored, once confirmed]. Where such transfers occur and are subject to data protection laws requiring a transfer safeguard, the firm intends to rely on an appropriate safeguard, such as an adequacy decision or standard contractual clauses, to be identified and documented by the firm with legal advice specific to its actual hosting and processing arrangements. No specific transfer safeguard is confirmed by this Policy.

9. Data Retention

The firm retains personal data collected through the Website only for as long as reasonably necessary for the purposes described in Section 5, taking into account:

• whether an engagement results from the inquiry, in which case retention will generally follow the firm's file retention practices and any applicable professional conduct rules governing client files;
• applicable statutory limitation periods and record-keeping obligations;
• the firm's legitimate interest in maintaining records of communications for legal and administrative purposes.

Where an inquiry does not lead to an engagement, the firm generally intends to retain the inquiry only for a period sufficient to address any follow-up questions and to maintain a record that a conflict check was performed, after which it is deleted or anonymized, subject to any shorter or longer period required by Applicable Law. Specific retention periods have not been fixed in this Policy and should be defined by the firm, with legal input, and reflected here as [Insert specific retention periods or retention criteria once determined].

10. Data Security

The firm intends to apply reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and the firm cannot guarantee absolute security. [Insert description of actual security measures once confirmed, e.g., access controls, encryption in transit].

If the firm becomes aware of a security incident affecting personal data collected through the Website that is likely to result in a risk to affected individuals, it intends to assess the incident and take appropriate steps, including notification to affected individuals or a relevant supervisory authority where required by Applicable Law. Specific incident-response procedures are an operational matter for the firm to document separately from this Policy.

11. Cookies and Similar Technologies

As delivered, this Website does not set analytics, advertising, or other non-essential cookies, and does not load third-party tracking scripts or embeds. If the Website uses any strictly necessary technical mechanism (for example, to remember a navigation menu state using only local browser storage), it does not transmit personal data to the firm or to any third party.

If the firm later introduces cookies or similar technologies, including analytics, this Policy and, where required by Applicable Law, an appropriate consent mechanism, must be updated before such technologies are activated.

12. Children's Privacy

The Website is intended for use by adults seeking information about legal services and is not directed to children. The firm does not knowingly collect personal data from children. If you believe a child has provided personal data through the Website, please contact us using the details in Section 19 so that it can be addressed, including deletion of that data where appropriate and not otherwise required to be retained under Applicable Law.

13. Your Rights

Depending on the data protection laws that apply to you, you may have some or all of the following rights in relation to your personal data:

• the right to be informed about how your data is processed;
• the right to access a copy of your personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure of your data in certain circumstances;
• the right to restrict or object to certain processing;
• the right to data portability, where applicable;
• the right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
• the right to lodge a complaint with a supervisory authority, as described in Section 16.

These rights may be subject to exceptions and limitations under Applicable Law, including, for example, exceptions that protect attorney–client privilege or the firm's ability to establish, exercise, or defend legal claims. To exercise a right, contact us using the details in Section 19. The firm intends to respond to a verified request within the timeframe required by Applicable Law and may need to request additional information to confirm your identity before acting on a request, in order to protect against unauthorized access to personal data. There is generally no charge for exercising these rights, although Applicable Law may permit a reasonable fee or refusal in the case of manifestly unfounded or excessive requests.

14. Automated Decision-Making

The firm does not use the personal data collected through the Website to make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects. If this changes in the future, the firm will update this Policy to describe the processing involved and, where required by Applicable Law, the safeguards and rights available to you in connection with it, before any such processing begins.

15. Privacy Contact

Questions or requests concerning this Privacy Policy or the firm's handling of your personal data can be directed to [insert-contact-email@example.com], or to the data protection officer identified in Section 2, if one has been appointed.

16. Complaints to a Supervisory Authority

If you believe the firm has not handled your personal data in accordance with Applicable Law, you may have the right to lodge a complaint with the data protection supervisory authority in your place of residence, place of work, or the place of the alleged infringement. The relevant authority for the firm's jurisdiction is [Insert name and contact details of the relevant data protection supervisory authority].

17. Information Submitted Before Engagement

As explained in Section 5 of our Website Terms of Use, no attorney–client relationship exists until a signed Engagement Agreement is in place. Personal data included in an inquiry submitted before that point is handled in accordance with this Privacy Policy; it may not carry the same confidentiality or privilege protections that apply to information shared during an active representation. Please avoid including highly sensitive information in an initial inquiry unless instructed to do so.

18. Changes to This Privacy Policy

The firm may update this Privacy Policy from time to time to reflect changes in its practices or in Applicable Law. The effective date at the top of this page indicates when it was last revised.

19. Contact

For any question about this Privacy Policy, please contact us at [insert-contact-email@example.com].