This privacy policy explains how Bag Roadleaf Legal processes personal data through bagroadleaf.click and related communications. It applies to visitors, prospective clients, and other individuals who interact with us in a professional context.
This overview highlights the principal topics addressed in this notice and directs readers to the relevant support path when further clarification is needed.
We act as a controller for personal data processed through the website and related communications, unless we state otherwise in a specific matter. Processing is carried out on one or more lawful bases under the GDPR, including consent, contract performance, legal obligation, and legitimate interests where appropriate.
Where the GDPR applies, you may have the right to access your data, correct inaccurate information, request deletion, restrict processing, object to certain processing, and receive data portability in applicable cases. If processing is based on consent, you may withdraw consent at any time without affecting prior processing. You may also lodge a complaint with a competent supervisory authority.
We may collect contact details, company information, inquiry content, technical identifiers, usage data, and other information you choose to provide. In a legal services context, this may also include information relevant to your organisation, matter description, and communication history.
We receive data directly from you when you submit forms, send messages, or otherwise communicate with us. We also collect certain data automatically through the website, such as device information, browser details, log data, and cookie-related information. In some cases, we may receive information from clients, counterparties, service providers, or other third parties involved in a matter.
The site may use essential cookies to support core functions, preference cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose. We do not rely on cookies for purposes beyond those described in this policy without a lawful basis where required.
You may block or delete cookies through your browser settings. Where the site provides a cookie preference tool, you may use it to manage non-essential cookies. If you disable certain cookies, some parts of the site may not function as intended.
Depending on your location and the applicable law, you may have rights relating to access, correction, deletion, restriction, objection, and portability. Where we rely on legitimate interests, you may object on grounds relating to your particular situation. Some requests may be limited where we must retain information for legal, regulatory, or professional reasons.
To exercise a privacy right, submit a clear request using the contact details in this policy and describe the data or processing concerned. We may ask for information needed to verify your identity and to locate the relevant records. If a request cannot be fully granted, we will explain the main reason where permitted by law.
We keep personal data only for as long as needed for the relevant purpose, including client administration, legal compliance, dispute handling, and recordkeeping. When data is no longer required, we delete it or anonymise it unless a longer period is necessary under law or for the establishment, exercise, or defence of legal claims.
If we make material changes, we will update the policy on the site and may provide additional notice where appropriate. The revised version will apply from the stated effective date.
We use personal data to respond to enquiries, provide legal and business-related information, manage client and prospect communications, maintain the website, secure our systems, analyse site performance, comply with legal obligations, and establish or defend legal claims where necessary.
We may share personal data with hosting providers, IT support, analytics providers, communication tools, and other operational partners that help us run the website and manage our services. These parties are expected to process data under appropriate confidentiality and security obligations and only for the purposes we specify.
We may disclose personal data to courts, authorities, regulators, or other parties where necessary to comply with law, respond to lawful requests, protect our rights, or support legal proceedings. We may also share information when disclosure is needed to prevent fraud, address security issues, or enforce agreements.
