Privacy policy

This policy is effective from 1 November 2026.

It explains how BidLegals processes the personal data of website visitors and of people who contact us through the website forms or subscribe to our newsletter. We process data in accordance with the Law of Ukraine “On Personal Data Protection” and the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

The controller of your personal data is BidLegals. For any questions about how we process your data, write to a.misiats@bidlegals.com.

What data we collect

We only receive the data you provide yourself through the website forms:

• Enquiry form: your name, company name, phone number or email, the service you select and the text of your message.
• Newsletter subscription: your email address.

When you visit the website, the server also automatically records technical data: IP address, browser type, and the date and time of the request. We need this data to keep the website secure and stable.

Please do not send sensitive data through the forms, such as information about health or criminal proceedings. We will discuss the details of your matter during the consultation.

Purposes and legal bases

• Responding to your enquiry and preparing a proposal. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Sending the newsletter. Legal basis: your consent (Art. 6(1)(a) GDPR).
• Website security, spam protection and keeping records of enquiries. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• Complying with legal obligations if you become our client. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

In Ukraine, we rely on the corresponding grounds set out in Article 11 of the Law of Ukraine “On Personal Data Protection”.

Providing your data is voluntary, but without contact details we cannot respond to your enquiry. We do not make automated decisions about you and do not carry out profiling.

How long we keep data

• Enquiries that did not lead to an engagement: up to 12 months after the last contact.
• Client data: for the term of the contract and for the periods required by law, including accounting and legal practice rules.
• Newsletter email address: until you unsubscribe or withdraw your consent.
• Server logs: no longer than 90 days, unless needed to investigate an incident.

When the retention period ends, the data is deleted or anonymised.

Who has access to your data

We do not sell personal data or share it with third parties for marketing. Access is limited to BidLegals staff who handle your request and to technical service providers acting on our instructions:

• the hosting provider whose servers run the website;
• the email service provider through which we receive enquiries and send emails;
• the messaging service through which our team may receive notifications about new enquiries.

If your project requires legal partners in other countries, we share your data with them only with your consent or at your request. We may also disclose data to public authorities where required by law.

International transfers

Our team works in Kyiv, Warsaw and Dubai, and our technical providers may process data in other countries. Where data is transferred outside the European Economic Area, we apply the safeguards provided for in the GDPR: a European Commission adequacy decision or standard contractual clauses. Transfers of data from Ukraine comply with Ukrainian law.

Your rights

You have the right to:

• know whether we process your data and obtain a copy of it;
• have inaccurate or incomplete data rectified;
• request the erasure of your data;
• restrict processing;
• object to processing based on our legitimate interest;
• receive your data in a structured, machine-readable format and transfer it to another controller;
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, write to a.misiats@bidlegals.com. We will respond within 30 days.

You may also lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights, the President of the Polish Personal Data Protection Office (UODO), or the supervisory authority of the EU country where you live or work.

Cookies

The website uses only technically necessary cookies: they keep forms secure, save your settings and enable protected areas of the website. These cookies do not require consent.

We do not use analytics or advertising cookies without your consent. If we introduce them, the website will ask for your permission first and this policy will be updated.

How we protect your data

We apply technical and organisational security measures: an encrypted connection (HTTPS), access to data limited to authorised staff, secure storage and timely software updates. Information we receive while providing legal assistance is kept confidential.

Changes to this policy

We may update this policy. The current version is always available on this page, with its effective date stated at the top.

Contact

For questions about personal data, write to a.misiats@bidlegals.com. BidLegals offices: Kyiv, Warsaw, Dubai.