Privacy Notice

This notice explained how P&V Law used information submitted through its accident-claims website and secure client portal.

Controller and contact

P&V Law was the controller of information submitted for an accident enquiry. Privacy questions and rights requests could be sent through the secure client portal by opening Messages.

Information collected

The portal collected sign-in identity information, name, mobile number, email address, claim communications, task progress, and documents that a client chose to upload. Uploaded files could include accident photographs, reports, receipts, medical information, and other evidence.

Purposes and legal grounds

Information was used to identify the client, respond to and assess an enquiry, communicate about the matter, preserve relevant evidence, prevent misuse, meet professional or legal obligations, and—after engagement—provide legal services. Depending on the circumstances, processing relied on steps requested before entering an engagement, performance of an engagement, legal obligations, legitimate interests in operating and protecting the service, or explicit consent where required for sensitive information.

Documents and sensitive information

Accident files could contain health, financial, or other sensitive information. Clients should upload only information relevant to their enquiry. Progress points measured file preparation only and were not used to make automated legal decisions.

Service providers and security

Authorised hosting, identity, database, and file-storage providers processed information only to operate the portal. Access was restricted to the signed-in client and authorised P&V Law personnel. Appropriate safeguards were used where a provider processed information outside the European Economic Area.

Retention

Enquiry information was kept only as long as reasonably necessary for assessment, communication, security, and record-keeping, subject to legal, regulatory, professional, insurance, limitation, and dispute-preservation obligations. The applicable period depended on whether the enquiry became an instructed matter and whether information had to be preserved.

Your rights

Subject to applicable law, clients could request access, correction, restriction, portability, objection, or deletion, and could withdraw consent where processing depended on consent. A client could also complain to the Cyprus Commissioner for Personal Data Protection.

Submitting information through the portal did not by itself create a lawyer–client relationship or guarantee that P&V Law would accept the matter.