Privacy policy
What we collect, why, for how long, and what you can ask us to do about it.
This policy explains what personal data this website collects, why, on what legal basis, how long it is kept and what rights you have. It is written to be read rather than to be survived.
Last updated: 9 August 2026.
1. Who is the controller
The controller of personal data collected through itlex.pro is ITLEX LTD, a company registered in England and Wales under number 17044071, registered office Suite 418, 37 St. Andrews Street, Norwich NR2 4TP, United Kingdom.
Legal services in Ukraine are provided by Attorneys-at-Law Bureau «Stoichev and Partners», EDRPOU 41551972, 17-V Hryhoriia Skovorody St., Kyiv 04070, Ukraine. Where an engagement is handled by the Ukrainian practice, that entity acts as controller for the client file and advocate professional secrecy applies to it.
For any question about this policy or about your data, write to info@itlex.pro or call +44 7405 121015.
2. What data we collect
Data you give us
- Enquiry form: name, email address, optionally a Telegram handle or phone number, optionally a company name or website, and the description of your matter.
- Context of the enquiry: the page URL the form was sent from, the site language, the referring page and any campaign parameters in the link you arrived through. This tells us where enquiries come from.
- Direct correspondence: anything you send by email, phone or Telegram.
Data collected automatically
- Server logs kept by our hosting provider, including IP address, browser type and the time of the request. These exist to keep the site running and secure.
- Analytics, but only if you consent. See section 5.
3. Why we process it, and on what basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and discussing possible engagement | Steps taken at your request prior to entering a contract, and our legitimate interest in responding to people who contact us |
| Providing legal services once engaged | Performance of a contract; compliance with professional and legal obligations applicable to advocates |
| Meeting anti-money-laundering and record-keeping obligations | Compliance with a legal obligation |
| Keeping the website secure and available | Legitimate interest in the security of our systems |
| Understanding how the site is used | Your consent, which you may withdraw at any time |
4. Cookies
This site sets no advertising cookies and no third-party tracking cookies. What exists is:
- A consent record stored in your browser's local storage so that we do not ask you the same question on every page. It contains only your choice and no identifier.
- Google Analytics cookies, which are loaded only after you select “Accept analytics”. Until then the analytics script is not requested and no analytics cookies exist. If you choose “Necessary only”, nothing further is set.
To change your choice, clear this site's data in your browser settings; the banner will appear again on your next visit.
5. Analytics
With consent we use Google Analytics 4 to see which pages are read and which are not. IP addresses are truncated, we do not use analytics data to identify individuals, and we do not run advertising or remarketing on this site. Google acts as our processor; data may be processed outside the European Economic Area under the safeguards Google provides for international transfers.
6. Who else sees your data
- Netlify, which hosts the website and receives form submissions.
- Our email and messaging providers, through which your enquiry reaches us.
- Google, for analytics, only where you have consented.
- Local counsel, translators or other professional advisers, only where an engagement requires it and only to the extent required.
- Authorities, where disclosure is legally required — noting that an advocate's professional secrecy applies to client information and is not set aside lightly.
We do not sell personal data and we do not share it for anyone else's marketing.
7. International transfers
The controller is established in the United Kingdom, which benefits from a European Commission adequacy decision, and the practice also operates from Ukraine, which the European Commission has likewise recognised as providing an adequate level of protection. Where processors operate outside the UK or the EEA, transfers rely on the mechanisms available under applicable law, including standard contractual clauses and the UK international data transfer addendum.
8. How long we keep it
- Enquiries that do not lead to engagement: up to 12 months, then deleted.
- Client files: for the duration of the engagement and afterwards for the period required by professional rules and anti-money-laundering legislation, which is generally at least five years from the end of the relationship.
- Server logs: as retained by our hosting provider, typically a short rolling period.
- Analytics data: retained according to the property's configured retention period.
9. Your rights
Subject to applicable law you may request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting the lawfulness of what came before.
To exercise any of these, write to info@itlex.pro. We respond within one month. If you are in the EEA and believe your rights have been breached, you may also complain to your national supervisory authority.
10. Security
The site is served over HTTPS and sends a strict content security policy. Access to enquiry data is limited to those who need it in order to respond. Client information is additionally protected by advocate professional secrecy under Ukrainian law.
11. Children
This site is directed at businesses and is not intended for anyone under 18. We do not knowingly collect data from children.
12. Changes
If this policy changes materially we will update the date above and, where the change affects how we use data you have already given us, tell you directly.