PRIVACY POLICY

Lacuna Law & Cyber

Effective Date: 14.04.2026

1. Introduction

Lacuna Law & Cyber (“we”, “our”, or “us”) is a boutique advisory firm operating at the intersection of law, cybersecurity, and digital risk. We are committed to protecting and respecting your privacy in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, engage our services, or contact us.

2. Data Controller

Lacuna Law & Cyber
Rr. “Ismail Qemali”, Ap. 5, Kati 7, Pallati Abissnet, Tiranë, Albania
Email: ilvana@lacunalawcyber.com
Phone: +355 69 207 0412

3. Personal Data We Collect

We may collect and process the following categories of personal data:

a. Information You Provide

  • Name (first and last name)

  • Email address

  • Phone number

  • Any information included in your message or inquiry

  • Information shared during consultations or engagement

b. Automatically Collected Data

  • IP address

  • Browser type and version

  • Device information

  • Pages visited and time spent on the website

  • Referring URLs

c. Professional & Client Data

In the course of providing legal and advisory services, we may process additional personal data necessary for:

  • Legal advice and representation

  • Regulatory compliance

  • Cyber incident response

  • Risk and governance advisory

4. Purpose of Processing

We process your personal data for the following purposes:

  • To respond to inquiries and communications

  • To provide legal, regulatory, and cyber advisory services

  • To manage client relationships

  • To comply with legal and regulatory obligations

  • To improve our website and services

  • To ensure the security of our systems and data

5. Legal Basis for Processing

We rely on the following legal bases under GDPR:

  • Performance of a contract (service delivery)

  • Legal obligation (compliance with applicable laws)

  • Legitimate interests (business operations, security, service improvement)

  • Consent (where explicitly required, e.g., contact forms or communications)

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your data only where necessary with:

  • Regulatory authorities (e.g., Data Protection Authorities)

  • Professional advisors (lawyers, auditors, consultants)

  • IT and service providers supporting our operations

  • Third parties where required by law or to protect legal rights

All third parties are required to respect the security and confidentiality of your data.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions

  • Other lawful transfer mechanisms under GDPR

8. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfill the purposes for which it was collected

  • Comply with legal, regulatory, and professional obligations

  • Resolve disputes and enforce agreements

Retention periods may vary depending on the nature of the engagement and applicable legal requirements.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

  • Secure data storage systems

  • Access controls and confidentiality measures

  • Encryption and cybersecurity safeguards

  • Legal privilege protections where applicable

10. Your Rights

Under applicable data protection laws, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time (where applicable)

To exercise your rights, please contact us at ilvana@lacunalawcyber.com.

11. Cookies and Website Tracking

Our website may use cookies and similar technologies to:

  • Improve user experience

  • Analyze website performance

  • Ensure functionality

You can control cookie preferences through your browser settings.

12. Confidentiality & Legal Privilege

As a legal advisory firm, communications and data shared with us may be subject to legal professional privilege and confidentiality obligations. We take all necessary measures to preserve and protect privileged information.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

14. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

15. Contact Us

If you have any questions regarding this Privacy Policy or how your data is handled, please contact:

Email: ilvana@lacunalawcyber.com
Phone: +355 69 207 0412

Lacuna Law & Cyber
Cybersecurity. Data Protection. Digital Regulation. Executive Risk Governance.