Privacy Notice
Last updated: June 11, 2026
This Privacy Notice for LvLaw LTD ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Visit our website at lvlaw.io or any website of ours that links to this Privacy Notice
- Use Legal Consulting, our legal and tax consulting services
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at admin@lvlaw.io.
Summary of key points
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? We do not process sensitive personal information.
Do we collect any information from third parties? We do not collect any information from third parties.
How do we process your information? To provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process information for other purposes with your consent. We process information only when we have a valid legal reason.
In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.
How do we keep your information safe? We have organisational and technical processes and procedures in place, though no system can be guaranteed 100% secure.
What are your rights? Depending on your location, applicable privacy law may give you certain rights regarding your personal information.
How do you exercise your rights? The easiest way is by submitting a data subject access request, or by contacting us.
Table of contents
- What information do we collect?
- How do we process your information?
- What legal bases do we rely on to process your personal information?
- When and with whom do we share your personal information?
- Do we use cookies and other tracking technologies?
- How long do we keep your information?
- How do we keep your information safe?
- Do we collect information from minors?
- What are your privacy rights?
- Controls for do-not-track features
- Do United States residents have specific privacy rights?
- Partners and regulatory obligations
- Do we make updates to this notice?
- How can you contact us about this notice?
- How can you review, update, or delete the data we collect from you?
1. What information do we collect?Personal information you disclose to us
In short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. This may include:
- names
- phone numbers
- email addresses
- debit/credit card numbers
- billing addresses
Sensitive information. We do not process sensitive information.
Payment data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the associated security code. All payment data is handled and stored by Stripe. Their privacy notice is available at
https://stripe.com/en-pt/privacy.
All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.
Information automatically collected
In short: Some information, such as your IP address and/or browser and device characteristics, is collected automatically when you visit our Services.
This information does not reveal your specific identity but may include IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, usage information, and other technical information. It is primarily needed for security, operation, internal analytics, and reporting. We also collect information through cookies and similar technologies.
The information we collect includes:
- Log and usage data. Service-related, diagnostic, usage, and performance information our servers automatically collect (IP address, device information, browser type, activity in the Services, device event information).
- Device data. Information about the computer, phone, tablet, or other device you use (IP address or proxy server, device and application identification numbers, location, browser type, hardware model, ISP and/or mobile carrier, operating system, system configuration).
- Location data. Precise or imprecise device location. You can opt out by refusing access or disabling the Location setting on your device, though some Services aspects may then be unavailable.
Google API. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2. How do we process your information?
In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes only with your prior explicit consent.
We process your personal information for reasons including:
- To deliver and facilitate delivery of services to the user
- To respond to user inquiries / offer support
- To send administrative information about products, services, and changes to terms and policies
- To fulfil and manage your orders, payments, returns, and exchanges
- To enable user-to-user communications
- To request feedback
- To send marketing and promotional communications (in accordance with your preferences; you can opt out at any time)
- To deliver targeted advertising
- To protect our Services, including fraud monitoring and prevention
- To save or protect an individual's vital interest, such as to prevent harm
3. What legal bases do we rely on to process your information?
In short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law.
If you are located in the EU or UK
The GDPR and UK GDPR require us to explain the valid legal bases we rely on. These may be:
- Consent. You can withdraw consent at any time.
- Performance of a contract. To fulfil our contractual obligations to you, including providing Services.
- Legitimate interests. Where reasonably necessary to achieve our legitimate business interests, provided they do not override your interests and rights. For example, to: send information about special offers and discounts; develop and display personalised advertising; diagnose problems and/or prevent fraudulent activities; understand how users use our products and services to improve user experience.
- Legal obligations. Where necessary for compliance, such as cooperating with law enforcement or a regulatory agency, exercising or defending legal rights, or disclosing information as evidence in litigation.
- Vital interests. Where necessary to protect your vital interests or those of a third party.
In legal terms, we are generally the "data controller" of the personal information described here. This Notice does not apply to personal information we process as a "data processor" on behalf of our customers; in those cases the customer is the data controller.
If you are located in Canada
We may process your information with your express or implied consent. You can withdraw consent at any time. In some exceptional cases we may process without consent where legally permitted, including:
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions provided certain conditions are met
- If contained in a witness statement and necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse
- Where collection with consent would compromise availability or accuracy of information, and collection is reasonable for investigating a breach of an agreement or contravention of the laws of Canada or a province
- If disclosure is required to comply with a subpoena, warrant, court order, or court rules relating to the production of records
- If produced by an individual in the course of their employment, business, or profession, and collection is consistent with the purposes of production
- If collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and specified by the regulations
- For approved research or statistics projects (de-identified information), subject to ethics oversight and confidentiality commitments
4. When and with whom do we share your personal information?
In short: We may share information in specific situations described in this section and/or with the following third parties.
We may need to share your personal information in the following situations:
- Business transfers. In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
- When we use Google Maps Platform APIs. With certain Google Maps Platform APIs (e.g. Google Maps API, Places API). Google Maps uses GPS, Wi-Fi, and cell towers to estimate location.
- Affiliates. With our parent company and any subsidiaries, joint venture partners, or other companies under common control, who must honour this Notice.
- Business partners. To offer you certain products, services, or promotions.
5. Do we use cookies and other tracking technologies?
In short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies (web beacons, pixels) to maintain security, prevent crashes, fix bugs, save preferences, and assist with basic site functions. We also permit third parties and service providers to use online tracking technologies for analytics and advertising.
To the extent these are deemed a "sale"/"sharing" under applicable US state laws, you can opt out as described in section 11.
Specific information is set out in our Cookie Notice.
Google Analytics. We may share your information with Google Analytics to track and analyse use of the Services. Advertising features may include Google Analytics Demographics and Interests Reporting. Opt out via:
For more, see the Google Privacy & Terms page (
https://policies.google.com/privacy).
6. How long do we keep your information?
In short: We keep your information for as long as necessary to fulfil the purposes outlined in this Notice unless otherwise required by law.
We will only keep personal information as long as necessary, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need, we will delete or anonymise it, or securely store and isolate it until deletion is possible.
7. How do we keep your information safe?
In short: We aim to protect your personal information through a system of organisational and technical security measures.
We have implemented appropriate and reasonable technical and organisational security measures. However, no electronic transmission or storage technology can be guaranteed 100% secure. Transmission of personal information to and from our Services is at your own risk; you should only access the Services within a secure environment.
8. Do we collect information from minors?
In short: We do not knowingly collect data from or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction.
We do not knowingly collect, solicit data from, or market to children under 18 (or the equivalent age in your jurisdiction), nor knowingly sell such information. By using the Services, you represent you are at least 18 (or the equivalent age), or that you are the parent/guardian of such a minor and consent to their use. If we learn that we have collected such data, we will deactivate the account and take reasonable measures to promptly delete it. If you become aware of any such data, contact lev@lvlaw.io.
9. What are your privacy rights?
In short: Depending on your state of residence in the US, or in regions such as the EEA, UK, Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.
In some regions (EEA, UK, Switzerland, Canada) you have rights including: (i) to request access and obtain a copy of your personal information; (ii) to request rectification or erasure; (iii) to restrict processing; (iv) if applicable, data portability; and (v) not to be subject to automated decision-making. If a decision with legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a way to request human review. You may also have the right to object to processing in certain circumstances.
If you are in the EEA or UK and believe we are unlawfully processing your information, you may complain to your Member State data protection authority or the UK data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent. If we are relying on your consent, you may withdraw it at any time by contacting us (see section 14). This does not affect the lawfulness of processing before withdrawal, nor processing based on other lawful grounds.
Cookies and similar technologies. Most browsers accept cookies by default; you can usually set yours to remove and reject cookies, though this could affect certain Services features.
For questions about your privacy rights, email admin@lvlaw.io.
10. Controls for do-not-track features
Most browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature. No uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any similar mechanism. If a standard is adopted in the future, we will inform you in a revised Notice.
California law requires us to disclose this: because there is currently no industry or legal standard for recognising or honouring DNT signals, we do not respond to them at this time.
11. Do United States residents have specific privacy rights?
In short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and details about the personal information we maintain, correct inaccuracies, obtain a copy, or delete it. You may also withdraw consent. These rights may be limited by applicable law.
Categories of personal information we collect
Category
Examples
Collected
A. Identifiers
Contact details (real name, alias, postal address, phone number, unique personal identifier, online identifier, IP address, email address, account name)
YES
B. Personal information (California Customer Records statute)
Name, contact information, education, employment, employment history, financial information
NO
C. Protected classification characteristics
Gender, age, date of birth, race and ethnicity, national origin, marital status, demographic data
NO
D. Commercial information
Transaction information, purchase history, financial details, payment information
NO
E. Biometric information
Fingerprints and voiceprints
NO
F. Internet or other similar network activity
Browsing history, search history, online behaviour, interest data, interactions
NO
G. Geolocation data
Device location
NO
H. Audio, electronic, sensory, or similar information
Images and audio, video or call recordings
NO
I. Professional or employment-related information
Business contact details, job title, work history, professional qualifications
YES
J. Education information
Student records and directory information
NO
K. Inferences drawn from collected personal information
Profile/summary of preferences and characteristics
NO
L. Sensitive personal information
—
NO
We may also collect other personal information in person, online, by phone, or by mail when: receiving help through customer support; participation in surveys or contests; facilitation in delivery of Services and to respond to inquiries.
Retention: Category A and Category I are retained as long as the user has an account with us.
Sources of personal information. See section 1.
How we use and share personal information. See section 2.
Will your information be shared with anyone else? We may disclose personal information to service providers under written contract (see section 4). We may use personal information for our own business purposes (e.g. internal research for technological development and demonstration); this is not considered "selling." We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve months, and will not sell or share personal information in the future belonging to website visitors, users, and other consumers.
Your rights
These rights are not absolute and may be declined as permitted by law:
- Right to know whether we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies
- Right to request deletion
- Right to obtain a copy of data you previously shared
- Right to non-discrimination for exercising your rights
- Right to opt out of processing for targeted advertising (or sharing under California law), sale of personal data, or profiling in furtherance of decisions producing legal or similarly significant effects
Depending on your state, you may also have rights to:
- Access the categories of personal data being processed (e.g. Minnesota)
- Obtain a list of categories of third parties to which we disclosed personal data (e.g. California, Delaware, Maryland)
- Obtain a list of specific third parties to which we disclosed personal data (e.g. Minnesota, Oregon)
- Obtain a list of third parties to which we sold personal data (e.g. Connecticut)
- Review, understand, question, and (where applicable) correct how personal data has been profiled (e.g. Connecticut, Minnesota)
- Limit use and disclosure of sensitive personal data (e.g. California)
- Opt out of collection of sensitive data and data collected through voice or facial recognition (e.g. Florida)
How to exercise your rights. Submit a data subject access request, email admin@lvlaw.io, or use the contact details at the bottom of this document. You may designate an authorised agent (subject to proof of authorisation).
Request verification. We will need to verify your identity and may request additional information for that purpose.
Appeals. If we decline to act, you may appeal by emailing admin@lvlaw.io. We will inform you in writing of any action taken or not taken, with reasons. If denied, you may submit a complaint to your state attorney general.
California "Shine The Light" law. California residents may request, once a year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes, and the names and addresses of those third parties. Submit such requests in writing using the contact details in section 14.
12. Partners and regulatory obligations
Sharing your information. To deliver our services, we may share your personal information with carefully selected third parties, including independent lawyers, tax advisers, notaries, translators and other professional consultants engaged on your matter, as well as business partners and service providers who support our operations, such as IT, document management, payment processing and project management platforms.
We only share information where necessary for the purposes described in this policy, and we require all third parties to treat your information securely, confidentially and in accordance with applicable data protection law, including the UK GDPR and EU GDPR. Where a third party processes your information on our behalf, we put in place appropriate contractual safeguards. Some recipients may be located outside the UK or EEA; where this is the case, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.
13. Do we make updates to this notice?
In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
The updated version will be indicated by an updated "Revised" date at the top. For material changes, we may notify you by prominently posting a notice or by direct notification.
14. How can you contact us about this notice?
You may contact our Data Protection Officer (DPO) by email at lev@lvlaw.io, or by post at:
LvLaw LTD
Data Protection Officer
Avenida Duque de Avila 169 6a
Lisbon 1050-083
Portugal
EEA representative. If you are resident in the EEA, we are the data controller. We have appointed Lev Valetskiy as our EEA representative. Contact by email at admin@lvlaw.io, or by post at:
Avenida Duque de Avila 169 6a
Lisbon 1050-083
Portugal
Corporate address. For further questions or comments, contact us by post at:
LvLaw LTD
Av. Duque de Loulé 24A, 1050-085 Lisboa, Portugal
15. How can you review, update, or delete the data we collect from you?
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect, details about how we process it, correct inaccuracies, or delete it. You may also have the right to withdraw consent. These rights may be limited by applicable law. To request review, update, or deletion, please fill out and submit a data subject access request.
Same two flags as before remain relevant: the UK representative placeholders in section 14, and the address inconsistency between Avenida Duque de Avila 169 6a (1050-083) and Av. Duque de Loulé 24A (1050-085).
