Privacy Policy

1. Introduction

This Privacy Policy explains how Crosswinds Legal Ltd collects, uses, stores, and protects your personal data when you visit our website or contact us through our online contact form.

We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Cyprus Processing of Personal Data (Protection of Individuals) Law of 2018 (Law 125(I)/2018), and other applicable data protection legislation.

2. Data Controller

The data controller responsible for your personal data is:

Crosswinds Legal Ltd

info@crosswindslegal.com

3. Personal Data

We Collect We may collect the following information:

Information you provide voluntarily

When you contact us through our website, we may collect:

Full name
Email address
Telephone number
Company name (if applicable)
Details of your enquiry
Any information you choose to provide to us

Information collected automatically

When you visit our website, we may collect:

IP address
Browser type and version
Device information
Date and time of access
Website usage information

4. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

Purpose

Responding to enquiries

Communicating with prospective clients

Providing legal services

Compliance with legal and regulatory obligations

Website administration and security

Legal Basis

Legitimate interests and pre-contractual steps

Legitimate interests

Contractual necessity

Legal obligation

Legitimate interests

5. Contact Form

The information submitted through our contact form is used solely to respond to your enquiry and assess whether we can assist you.

Submitting a contact form does not create a lawyer-client relationship.

Please do not submit highly confidential or sensitive information through the website contact form until we have formally agreed to act on your behalf.

6. Disclosure of Personal Data

We may disclose personal data where necessary to:

IT and website service providers
Professional advisers
Regulatory authorities
Courts and government authorities
Other parties where required by law

We do not sell personal data to third parties.

7. International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we will ensure that appropriate safeguards are implemented in accordance with GDPR requirements.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and protect our legal interests.

9. Your Rights

Under GDPR, you may have the right to:

Access your personal data
Correct inaccurate data
Request erasure of your data
Restrict processing
Object to processing
Request data portability
Withdraw consent where processing is based on consent

Requests may be submitted to:

Email: info@crosswindslegal.com

10. Complaints

You have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection if you believe your rights have been infringed.

11. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.