Privacy policy

What data we process

The website form and AI con­sul­ta­tion page may process your phone number, name, inquiry or chat-message text, tech­ni­cal request-sub­mis­sion details, UTM tags, session iden­ti­fiers, and basic server logs gen­er­at­ed while using the site.

The amount of data depends on the request type: a phone number is enough for a quick call­back; for a more de­tailed request, the user may vol­un­tar­i­ly add a name and de­scrip­tion, and for an AI con­sul­ta­tion, the sit­u­a­tion text and, op­tion­al­ly, a phone number to forward the request to a lawyer.

For an initial overview, do not send pass­port details, bank in­for­ma­tion, reg­is­tra­tion numbers, or other sen­si­tive iden­ti­fiers unless they are es­sen­tial to un­der­stand­ing the sub­stance of the request.

Purpose of processing

Per­son­al data is processed to receive and handle the request, contact the user, provide a free initial con­sul­ta­tion, gen­er­ate a pre­lim­i­nary AI re­sponse, assess the inquiry, and provide further case support.

If the user leaves a phone number after the AI con­sul­ta­tion, it may be used to forward the inquiry to a lawyer and for follow-up contact during busi­ness hours.

The AI re­sponse is in­for­ma­tion­al, may contain in­ac­cu­ra­cies, and is not an in­di­vid­ual legal po­si­tion or per­son­al con­sul­ta­tion with a lawyer.

Tech­ni­cal data and an­a­lyt­ics events may also be used to improve the website, assess ad­ver­tis­ing ef­fec­tive­ness, and prevent spam.

Purposes for processing and sharing data

Pro­cess­ing takes place because the user vol­un­tar­i­ly submits a request or mes­sages through the website and because the company has a le­git­i­mate in­ter­est in com­mu­ni­cat­ing with prospec­tive clients.

To process a request, data may be sent to an ex­ter­nal CRM; op­er­a­tion of the AI con­sul­ta­tion may also send data to a backend service and an ex­ter­nal AI provider that gen­er­ates a pre­lim­i­nary in­for­ma­tion­al re­sponse.

Data may also be processed by providers of hosting, network, an­a­lyt­ics, and other in­fra­struc­ture that sup­ports the website and pre­vents abuse.

Storage and protection

The Company takes rea­son­able or­ga­ni­za­tion­al and tech­ni­cal mea­sures to protect per­son­al data from unau­tho­rized access, al­ter­ation, loss, or dis­clo­sure.

Data re­ten­tion is de­ter­mined by the need to process an ap­pli­ca­tion or chat inquiry, com­mu­ni­cate with the client, meet legal oblig­a­tions, and conduct in­ter­nal quality control.

Form drafts and error diagnostics

Un­fin­ished form data is stored sep­a­rate­ly from first-party an­a­lyt­ics. Along­side the entered fields, a draft con­tains the page without URL pa­ra­me­ters, service topic, lan­guage and site version. A pro­tect­ed op­er­a­tional cookie links the draft to the browser; an enquiry iden­ti­fi­er in the tab allows it to con­tin­ue after nav­i­ga­tion or a reload.

Au­to­mat­ic contact trans­fer follows the un­fin­ished-form rules in the user agree­ment: 5 minutes after the last saved change when a valid phone number is present. The actual agree­ment check­box state is re­tained, in­clud­ing when it is unticked.

Error codes and stages, time, page, lan­guage, site version and op­er­a­tional iden­ti­fiers are stored sep­a­rate­ly to in­ves­ti­gate tech­ni­cal fail­ures. A form error may include a limited snap­shot of known fields and val­i­da­tion results. Pass­words, tokens, keys, cookies and ar­bi­trary headers are ex­clud­ed from these records. Contact details and enquiry text are not sent to first-party an­a­lyt­ics.

Un­fin­ished drafts without a phone number el­i­gi­ble for trans­fer are deleted after 24 hours without changes. Snap­shots of entered values are re­tained for up to 30 days and tech­ni­cal history for up to 90 days. Ac­cep­tance re­ceipts and records with an un­cer­tain de­liv­ery outcome are re­tained sep­a­rate­ly for ac­count­ing and du­pli­cate pre­ven­tion; these periods do not over­ride their re­ten­tion and rec­on­cil­i­a­tion.

Cookies and analytics

First-party site an­a­lyt­ics au­to­mat­i­cal­ly col­lects tech­ni­cal data about page use. This in­cludes views, nav­i­ga­tion, active time, tool use, and tech­ni­cal stages of forms and AI chat. Contact details, appeal text, AI chat mes­sages, and ar­bi­trary URL pa­ra­me­ters are not trans­mit­ted.

To improve site us­abil­i­ty, we also collect the ap­prox­i­mate device type, browser family and major version, op­er­at­ing system family, view­port width range, browser lan­guage, pointer type, and theme and reduced-motion pref­er­ences. Our an­a­lyt­ics does not store the full User-Agent, IP address, exact device model, or hard­ware spec­i­fi­ca­tions. These details are not used to create a device fin­ger­print.

The choice to enable or disable an­a­lyt­ics is stored in this browser. A random session iden­ti­fi­er is stored only in the tab, changes after 30 minutes of in­ac­tiv­i­ty and is not used to rec­og­nize a visitor across sites or later visits. When an­a­lyt­ics is enabled, the session iden­ti­fi­er may as­soc­iate a request with actions in that session without sending contact details to an­a­lyt­ics.

An­a­lyt­ics can be turned off using “An­a­lyt­ics set­tings” at the bottom of the page. This stops further col­lec­tion of browser be­hav­iour data and clears the queue and session iden­ti­fi­er in the tab. DNT or GPC signals turn off this col­lec­tion. An­a­lyt­ics set­tings do not affect the ability to submit a request.

First-party an­a­lyt­ics events are stored for up to 90 days, and daily sum­maries for up to 24 months. Re­gard­less of browser an­a­lyt­ics set­tings, the server records ac­cept­ed ap­pli­ca­tions without sending contact details or request text to an­a­lyt­ics. When browser an­a­lyt­ics is dis­abled, an ap­pli­ca­tion is not linked to actions in the tab. Ac­cep­tance is con­firmed only after a CRM re­sponse; a click or browser message alone does not mean the ap­pli­ca­tion was ac­cept­ed.

If GA4, Google Ads, or Meta Pixel is enabled, data about in­ter­ac­tions with the form may be trans­mit­ted to those plat­forms under their own poli­cies.

User rights

The user has the right to know the sources and pur­pos­es of per­son­al data pro­cess­ing, and to request cor­rec­tion, up­dat­ing, re­stric­tion of pro­cess­ing, or dele­tion of data in cases pro­vid­ed for by Ukrain­ian law.

Re­quests con­cern­ing per­son­al data may be sent to lvivokenevskogo@gmail.com or by post to the office address: 1 Okunevsko­ho St., Lviv.

Information about the data holder

Per­son­al data con­troller: LLC “LVIV LEGAL SE­CU­RI­TY,” Unified State Reg­is­ter code 46233512.

The Company may update this policy. The current version is always pub­lished on this page with the date of the latest update.