Privacy Notice
Effective date: 18 July 2026
Last reviewed: 18 July 2026
1. Who we are
Kleanthous & Platis LLC is a Cyprus law firm and the controller of the personal data described in this notice.
Company registration number: HE 441973
Address: 7 Florinis Street, Greg Tower, 2nd Floor, Office 202, 1065 Nicosia, Cyprus
General email: office@kleanthousplatis.com
Privacy enquiries: dpo@kleanthousplatis.com
2. What this notice covers
This notice explains how we collect and use personal data when you visit our website, contact us, ask us to consider a matter, become a client, deal with us in connection with a client's matter, apply for work or otherwise interact with the firm.
Legal professional privilege and our professional duties may restrict what information we can disclose in response to a request.
3. Personal data we collect
Depending on the circumstances, we may collect:
Identity and contact details, including name, address, email address and telephone number.
Information about a proposed or existing legal matter, including the parties, facts, documents, correspondence, deadlines and financial value.
Identification, source of funds and other information required for conflict, client due diligence, anti-money laundering and sanctions checks.
Financial information, including billing and payment details.
Employment, family, property, corporate or other information relevant to the work we are asked to undertake.
Special category data, criminal offence data and information about children where it is relevant and lawful to process it for a legal matter.
Recruitment information, including a curriculum vitae, qualifications, work history and references.
Website and device information, including IP address, browser type, pages viewed and cookie choices.
Records of communications with us.
Please do not send extensive confidential or highly sensitive documents before we confirm that we are able to consider the matter.
4. How we obtain personal data
We may receive personal data directly from you; from a client, employer, company, authorised representative or another person involved in a matter; from courts, public authorities, counterparties, witnesses, experts and professional advisers; from public registers and other lawful sources; through our website and communications; and from service providers that assist with identity checks, technology, security, billing or administration.
5. Why we use personal data
We use personal data where necessary to take steps at your request before entering into a contract, to perform our contract with a client, to comply with legal and regulatory duties, for the establishment, exercise or defence of legal claims, and for our legitimate interests in operating and protecting the firm, managing matters, preventing fraud, maintaining records and responding to enquiries.
We may process information to protect vital interests where necessary. We rely on consent where consent is the appropriate legal basis. Consent may be withdrawn at any time without affecting earlier lawful processing.
6. Enquiries and conflict checks
Sending an enquiry does not create a lawyer-client relationship. We use the information provided to consider the enquiry, identify relevant parties, conduct conflict and regulatory checks and decide whether we can accept instructions.
We may retain a limited record of an enquiry and the parties involved even if we do not accept the matter. This helps us comply with professional duties and identify future conflicts.
7. Who may receive personal data
Where necessary and lawful, personal data may be provided to courts, tribunals, regulators, law enforcement bodies and public authorities; counterparties and their lawyers; barristers, foreign lawyers, experts, translators, process servers, notaries and other professional advisers; banks, insurers, auditors, accountants and payment providers; technology, hosting, cybersecurity, communications and administrative providers; identity verification and screening providers; a successor to all or part of the firm's practice; and other recipients where you instruct us or the law permits or requires disclosure.
We do not sell personal data.
8. International transfers
Some recipients or technology providers may process personal data outside the European Economic Area. Where this occurs, we use a lawful transfer mechanism, such as an adequacy decision, approved contractual safeguards or another mechanism permitted by the GDPR. Information about an applicable safeguard may be requested using the contact details above, subject to confidentiality and legal restrictions.
9. Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, regulatory, professional, accounting and insurance requirements.
Retention periods vary according to the type of record and matter. Client files are normally retained for the period stated in the engagement arrangements or the firm's retention policy. Records connected with conflicts, anti-money laundering checks, complaints, claims or legal holds may be retained for longer where necessary.
10. Security
We use technical and organisational measures intended to protect personal data against accidental or unlawful loss, misuse, alteration, disclosure or access. Access is limited to people who need the information for their work and who are subject to confidentiality obligations.
No method of electronic transmission or storage is completely secure. Please contact us before sending particularly sensitive material so that an appropriate method can be agreed.
11. Your rights
Subject to the conditions and exemptions in applicable law, you may have the right to request access to your personal data, request correction or deletion, request restriction of processing, object to processing based on legitimate interests, receive personal data in a portable format where applicable, withdraw consent and lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.
To exercise a right, contact dpo@kleanthousplatis.com. We may request information needed to confirm identity and understand the request. Rights may be limited where disclosure would affect another person's rights, legal professional privilege, confidentiality, legal claims or a legal or professional obligation.
12. Cookies and similar technologies
The website uses strictly necessary technologies that support security, navigation, cookie choices and core website functions. Other technologies, including analytics or marketing technologies, are used only after the visitor makes the relevant choice through the cookie controls.
Visitors can accept cookies, manage choices by category, reject non-essential technologies through the management controls and reopen the settings to change or withdraw consent. Details of the technologies in use, their providers, purposes and duration are available through the cookie settings.
13. Other websites and services
The website may link to third-party websites or services. Their privacy practices are governed by their own notices. We are not responsible for third-party content or privacy practices.
14. Changes to this notice
We may update this notice to reflect changes in the law, our work or the website. The current version will show its effective date and last reviewed date at the top of the page.
15. Contact and complaints
For questions or requests about personal data, contact Kleanthous & Platis LLC at dpo@kleanthousplatis.com or at 7 Florinis Street, Greg Tower, 2nd Floor, Office 202, 1065 Nicosia, Cyprus.
You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus. We would appreciate the opportunity to consider your concern first.