Privacy Policy

Last updated: August 2026

Polycarpos Philippou & Associates LLC ("Philippou Law Firm", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our services, or otherwise interact with us.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Processing of Personal Data (Protection of the Individual) Law of 2018 (Law 125(I)/2018) of Cyprus, and all other applicable data protection legislation.

1. Information We Collect

We may collect and process the following categories of personal data:

1.1 Information You Provide Directly

  • Identity information: Full name, date of birth, nationality, passport or ID number
  • Contact information: Email address, telephone number, postal address
  • Professional information: Company name, job title, business address
  • Financial information: Bank account details, billing information (when required for our services)
  • Legal matter details: Information relevant to your legal case or inquiry
  • Communication records: Correspondence between you and our firm, including emails and messages submitted through our website contact form

1.2 Information Collected Automatically

  • Technical data: IP address, browser type and version, operating system, device type
  • Usage data: Pages visited, time spent on pages, referring website, click patterns
  • Cookie data: Information collected through cookies and similar tracking technologies (see Section 6 below)

2. How We Use Your Information

We use your personal data for the following purposes:

  • Providing legal services: To deliver the legal advice and representation you have engaged us for
  • Responding to inquiries: To reply to your questions, requests, or feedback submitted via our website, email, or phone
  • Client management: To manage our relationship with you, including billing, invoicing, and account administration
  • Legal obligations: To comply with legal and regulatory requirements, including anti-money laundering (AML) and know-your-client (KYC) obligations
  • Improving our services: To analyze website usage and improve the content, functionality, and user experience of our website
  • Marketing communications: To send you newsletters, legal updates, and event invitations (only with your explicit consent, which you may withdraw at any time)
  • Recruitment: To process job applications and manage the recruitment process

3. Legal Basis for Processing

We process your personal data on one or more of the following legal bases under the GDPR:

  • Contractual necessity (Article 6(1)(b)): Processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract
  • Legal obligation (Article 6(1)(c)): Processing is necessary to comply with a legal obligation to which we are subject
  • Legitimate interests (Article 6(1)(f)): Processing is necessary for our legitimate interests, provided that such interests are not overridden by your fundamental rights and freedoms
  • Consent (Article 6(1)(a)): Where you have given your explicit consent to the processing of your personal data for one or more specific purposes

4. Data Sharing and Transfers

We may share your personal data with the following categories of recipients:

  • Professional advisors: Barristers, expert witnesses, and other professionals engaged in connection with your legal matter
  • Regulatory authorities: Courts, government agencies, and regulatory bodies where required by law
  • Website and enquiry providers: Vercel provides website hosting, private lead-record storage and website analytics; Resend delivers enquiry emails; HubSpot provides CRM and embedded-form services; and an administrator-configured webhook or recipient mailbox may receive an enquiry. Each provider processes only the data needed for its configured service and may act as our processor or as an independent controller for limited service operations, as described in its own privacy terms
  • Correspondent law firms: Where your matter requires the involvement of lawyers in other jurisdictions

We do not sell your personal data to third parties. If we need to transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place.

5. Data Retention

We retain personal data only for as long as necessary for the purpose collected. Website enquiries are kept for the time reasonably needed to respond, assess a potential engagement, establish or defend legal claims, and meet applicable professional or legal obligations. If an enquiry becomes a client matter, the client-file and AML/KYC periods below may apply:

  • Client files: Retained for a minimum of 7 years after the conclusion of the matter
  • AML/KYC records: Retained for a minimum of 5 years after the end of the business relationship
  • Marketing data: Retained until you withdraw your consent or unsubscribe
  • Website analytics: Vercel Web Analytics supplies aggregated, non-identifying reporting; dashboard availability follows the reporting window configured for the Vercel plan. Data from any separately consented analytics service follows that service's configured retention period
  • Recruitment data: Retained for up to 12 months after the conclusion of the recruitment process

6. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience.

We use the following types of cookies:

  • Strictly necessary cookies: Essential for the website to function properly
  • Performance cookies: Help us understand how visitors interact with our website
  • Functional cookies: Remember your preferences and settings

You can accept or reject optional cookies when our consent banner appears. The current banner does not include a reopen-settings control after you choose; to change your choice later, clear this site's cookies and site storage in your browser, reload the page, and choose again. You can also use your browser's cookie controls.

7. Your Rights

Under the GDPR and applicable Cyprus data protection law, you have the following rights:

  • Right of access (Article 15)
  • Right to rectification (Article 16)
  • Right to erasure (Article 17)
  • Right to restriction (Article 18)
  • Right to data portability (Article 20)
  • Right to object (Article 21)
  • Right to withdraw consent
  • Right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus (www.dataprotection.gov.cy)

To exercise any of these rights, please contact us using the details provided in Section 9 below.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data.

9. Contact Information for Data Queries

  • By email: enquiries@philippoulaw.com
  • By phone: +357 26 822 122
  • Privacy enquiries by post: Onisiforou Center, Corner of Neof. Nikolaides Ave & Theod. Kolokotronis Str, 2nd & 3rd Floor, 8011 Paphos, Cyprus

10. Updates to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page.

11. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Cyprus.