Privacy Policy

Last updated: 23 June 2026

George A. Vasiliou LLC respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website, contact us, submit an enquiry, complete a lead form, interact with our online advertising, or otherwise communicate with our law firm.

This Privacy Policy applies to the website of George A. Vasiliou LLC at https://www.gvasilioulaw.com and to any related online forms, contact forms, Google Ads lead forms, consultation request forms, email communications, and digital advertising activities operated by or on behalf of the firm.

1. Data Controller

For the purposes of the EU General Data Protection Regulation, George A. Vasiliou LLC is the data controller of the personal data processed through this website and related enquiry channels.

Controller: George A. Vasiliou LLC
Address: Archiepiskopou Makarios III Avenue 22, Makaria Center, 4th Floor, Office 402, 6017 Larnaca, Cyprus
Email: info@gvasilioulaw.com
Telephone: +357 24622265
Website: https://www.gvasilioulaw.com

For privacy-related requests, you may contact us at: info@gvasilioulaw.com.

2. Personal Data We May Collect

We may collect and process the following categories of personal data:

A. Information you provide directly

When you complete a contact form, consultation request form, Google Ads lead form, or otherwise communicate with us, we may collect:

• Full name;
• Email address;
• Telephone number;
• Company name, where applicable;
• Subject of enquiry;
• Information you choose to include in your message;
• Preferred method of contact;
• Any documents or details voluntarily submitted by you.

You should avoid submitting sensitive, confidential, privileged, or excessive information through website forms unless expressly requested by the firm.

B. Enquiry and matter-related information

Where your enquiry relates to a legal matter, we may process information necessary to assess your request, conduct conflict checks, respond to your enquiry, arrange a consultation, and determine whether the firm may act for you.

Submitting an enquiry through the website does not, by itself, create a lawyer-client relationship.

C. Technical and usage data

When you visit our website, we may collect certain technical information, including:

• IP address;
• Browser type and version;
• Device type;
• Operating system;
• Pages visited;
• Time and date of visit;
• Referring website or advertisement;
• Approximate location derived from technical data;
• Cookie identifiers and similar tracking technologies, subject to your cookie preferences.

D. Advertising and analytics data

Where permitted by law and subject to your consent where required, we may process data relating to your interaction with our online advertising, including:

• Ad clicks;
• Website visits after clicking an advertisement;
• Form submissions;
• Calls or enquiries generated through campaigns;
• Conversion tracking data;
• Remarketing or audience data;
• Aggregated campaign performance data.

This may involve tools such as Google Ads, Google Analytics, Google Tag Manager, Google lead form assets, or similar advertising and analytics technologies.

3. How We Collect Personal Data

We may collect personal data through:

• Website contact forms;
• Consultation request forms;
• Google Ads lead forms;
• Email communications;
• Telephone calls;
• Direct messages or other communication channels;
• Cookies and similar technologies;
• Analytics and advertising platforms;
• Documents or information voluntarily provided by you.

4. Purposes of Processing

We may use your personal data for the following purposes:

• To respond to your enquiry;
• To contact you regarding a consultation or request for legal services;
• To assess whether the firm may assist you;
• To conduct preliminary conflict checks;
• To manage client intake and administrative records;
• To provide legal services where a formal engagement is established;
• To comply with legal, regulatory, professional, accounting, anti-money laundering, and record-keeping obligations;
• To operate, secure, and improve our website;
• To measure the performance of our advertising campaigns;
• To manage Google Ads, website analytics, conversion tracking, and lead generation activities;
• To protect the rights, interests, and security of the firm, its clients, and website users.

5. Lawful Bases for Processing

We process personal data only where we have a lawful basis to do so. Depending on the context, the lawful bases may include:

A. Consent

We may rely on your consent where you:

• Submit a lead form;
• Agree to be contacted;
• Accept analytics or marketing cookies;
• Consent to receive marketing communications, where applicable.

You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

B. Steps prior to entering into a contract

Where you contact us to request legal services, we may process your personal data in order to respond to your enquiry, assess your request, and take steps prior to entering into a formal engagement.

C. Performance of a contract

Where you become a client, we may process personal data as necessary to provide legal services under the relevant engagement terms.

D. Legal obligation

We may process personal data to comply with applicable legal, regulatory, accounting, tax, professional conduct, anti-money laundering, and court-related obligations.

E. Legitimate interests

We may process personal data where necessary for our legitimate interests, provided that such interests are not overridden by your rights and freedoms. These interests may include:

• Managing enquiries;
• Protecting the website and firm systems;
• Maintaining business records;
• Improving website functionality;
• Measuring non-intrusive campaign performance;
• Defending or establishing legal claims.

6. Google Ads, Lead Forms, Analytics and Conversion Tracking

We may use Google Ads and related tools to promote our legal services online. This may include search advertising, conversion tracking, call tracking, website analytics, remarketing, and Google lead form assets.

Where you submit your details through a Google lead form, the information you provide may be made available to us through Google’s advertising platform so that we may respond to your enquiry.

Where conversion tracking or analytics tools are used, Google or other service providers may process certain technical and interaction data, such as ad clicks, browser information, device data, cookie identifiers, and website actions.

We do not use advertising data to make automated decisions that produce legal or similarly significant effects concerning you.

Where required by law, analytics, remarketing, and marketing cookies will only be activated after you have provided consent through the website’s cookie banner or consent mechanism.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies. Cookies may be:

A. Strictly necessary cookies

These are required for the website to function properly and cannot usually be disabled through our systems.

B. Analytics cookies

These help us understand how visitors use the website, which pages are visited, and how the website performs.

C. Advertising and conversion cookies

These may help us measure the effectiveness of advertising campaigns, record conversions, avoid irrelevant repetition, and, where used, support remarketing.

You may manage or withdraw your cookie preferences through the website cookie banner or cookie settings tool, where available. You may also control cookies through your browser settings.

8. Marketing Communications

We do not send marketing communications unless we have a lawful basis to do so.

Where we ask for your consent to receive updates or marketing communications, you may withdraw that consent at any time by contacting us or using the unsubscribe method provided in the communication.

Submitting a legal enquiry does not automatically subscribe you to marketing communications.

9. Who We May Share Personal Data With

We may share personal data only where necessary and lawful. Recipients may include:

• IT hosting and website support providers;
• Email, cloud, CRM, and communication service providers;
• Advertising and analytics providers, including Google, where applicable;
• Professional advisers, accountants, auditors, or insurers;
• Courts, public authorities, regulators, or law enforcement bodies where required;
• External counsel, experts, translators, consultants, or service providers where necessary for a legal matter and subject to appropriate safeguards;
• Parties involved in legal proceedings or transactions, where required for the provision of legal services.

We do not sell your personal data.

10. International Transfers

Some service providers, including technology, cloud, analytics, or advertising providers, may process data outside Cyprus or the European Economic Area.

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is protected in accordance with applicable data protection law, including the use of appropriate contractual safeguards where required.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, regulatory, professional, accounting, and reporting requirements. Indicatively:

• Website enquiry data may be retained for up to 12–24 months unless it becomes part of a client file;
• Google Ads lead form data may be retained for up to 12 months;
• Client matter files may be retained in accordance with applicable legal, professional, regulatory, and limitation-period requirements;
• Analytics data may be retained according to the settings of the relevant analytics platform;
• Cookie consent records may be retained for compliance purposes.

Retention periods may vary depending on the nature of the enquiry, the services provided, applicable limitation periods, legal obligations, and professional requirements.

12. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

However, no website, email system, online form, or internet transmission is completely secure. You should avoid sending highly confidential, privileged, or sensitive documents through general website forms unless the firm has specifically requested them through an appropriate secure channel.

13. Your Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data;
• Request correction of inaccurate or incomplete data;
• Request erasure of your personal data;
• Request restriction of processing;
• Object to processing based on legitimate interests;
• Withdraw consent where processing is based on consent;
• Request data portability, where applicable;
• Lodge a complaint with the competent supervisory authority.

To exercise your rights, please contact us at info@gvasilioulaw.com.

We may need to verify your identity before responding to a request.

14. Complaints

If you believe that your personal data has been processed unlawfully or that your data protection rights have been infringed, you may contact us first so that we may address your concern.

You also have the right to lodge a complaint with the competent supervisory authority in Cyprus:

Office of the Commissioner for Personal Data Protection
Website: www.dataprotection.gov.cy

15. Third-Party Websites

Our website may contain links to third-party websites, platforms, or resources. We are not responsible for the privacy practices, security, or content of third-party websites. You should review the privacy policy of any external website you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website functionality, advertising practices, legal obligations, or regulatory requirements.

The updated version will be published on this page with a revised “Last updated” date.