What we collect
Basic identity (name, email, phone, nationality); case data (passport, civil-status certificates, criminal record, bank statements); for Golden Visa / banking — source-of-funds documents; lawyer-client communications; payment metadata.
Retention
To meet mandatory record-keeping under Greek and EU law (especially AML), we retain core case files for at least 5 years after completion.
Third-party processors
Email delivery (Resend); document uploads (UploadThing); payment processing (Stripe); database (self-hosted on our VPS); Google Analytics (only after you opt in).
Website analytics
Our primary analytics is built and run by us on our own server. It sets no cookies and stores no visitor IP — counting uses a one-way hash with a daily-rotating salt, so records cannot be linked across days. We additionally use Google Analytics, which loads only after you explicitly opt in. See the Cookie Policy for detail.
Your rights
Under GDPR you may access, correct, restrict processing or — within AML retention limits — request deletion. Submit requests via /contact; we respond within 30 days.