This Privacy Policy explains how Medal Pancake Law processes personal data when you use medalpancakelamb.rest or communicate with us in connection with our legal services for companies.
We may process identification and contact details, message content, case-related information you choose to provide, technical data such as IP address and device information, and usage data about how the site is accessed. Where relevant to legal services for companies, we may also process information connected to a business enquiry, engagement, or matter.
We receive personal data directly from you when you submit forms, send messages, or otherwise communicate with us. We also collect data automatically through your browser or device when you visit the site, and we may receive limited information from service providers that support hosting, security, analytics, or communications.
The site may use essential cookies needed for security and basic operation, preference cookies that remember settings, and analytics cookies that help us understand site performance and usage patterns. Cookies may be session-based or persistent, depending on their function and lifespan.
You can manage cookies through your browser settings and, where available, through the site’s cookie controls. Blocking some cookies may affect site functionality or limit certain features. Where consent is used for non-essential cookies, you may withdraw it at any time using the same control method.
Depending on your location and the processing involved, you may have rights to receive information about our processing, access your data, request correction, request deletion, object to certain processing, or request restriction. Some rights may not apply where we must keep data for legal or legitimate business reasons.
To exercise a privacy right, please submit a clear request using the contact details in this policy and include enough information for us to identify the relevant data. We may ask for additional details to verify identity or to understand the request. If a request is complex or numerous, we may respond within the period allowed by law.
We retain personal data for the period necessary to fulfil the purpose for which it was collected, including any legal, accounting, or professional retention obligations. When data is no longer required, we delete it, anonymise it, or otherwise secure it so that it is no longer actively used.
We may update this Privacy Policy from time to time to reflect changes in our processing practices, legal requirements, or the services we provide. The revised version will apply from the date it is published unless a later effective date is stated. We may provide additional notice where a change is material.
We use personal data to operate and secure the website, respond to enquiries, assess and manage potential or existing client relationships, provide legal services for companies, maintain records, meet legal and professional obligations, improve site performance, and manage communications. We may also use data to detect misuse, prevent fraud, and support internal administration.
We may share personal data with trusted service providers that support hosting, security, analytics, document handling, communications, or other operational functions. Where we engage external advisers or professional partners in connection with a matter, they receive data only to the extent necessary for the relevant service and are expected to handle it under appropriate confidentiality and security obligations.
We may disclose personal data where necessary to comply with law, court orders, lawful requests from public authorities, or obligations arising from legal proceedings. We may also share data to establish, exercise, or defend legal claims, or to protect our rights, clients, users, or the security of the site.
Where GDPR applies, we process personal data on a lawful basis such as consent, performance of a contract, compliance with legal obligations, protection of legitimate interests, or other basis permitted by law. We apply data minimisation, purpose limitation, and security measures appropriate to the nature of the processing.
Where GDPR applies, you may have the right to access, rectify, erase, restrict, or object to processing, and to data portability in certain cases. If processing is based on consent, you may withdraw consent without affecting prior processing. You may also lodge a complaint with the competent supervisory authority.
