Privacy Policy

Eugen Law Firm ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website eugenlawfirm.com and use our services, including our "Chinese Lawyer" consultation application.

We operate in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Identity Data: Your full name
• Contact Data: Phone number, email address, WeChat ID
• Case Information: Details of your legal matter, including the type of assistance required and description of your legal issue or situation
• Communication Data: Any correspondence or communications you have with us

3.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage Data: Information about how you use our website and services

3.3 Chinese Lawyer Consultation Service

When you use our Chinese Lawyer consultation service (including through our website chat widget or contact forms), we collect:

• Your name and preferred contact method
• The nature of your legal enquiry
• Detailed description of your legal matter or case
• Any documents or information you voluntarily provide

We use your personal data for the following purposes:

• To provide legal consultation services: Processing your enquiries and providing preliminary legal advice
• To communicate with you: Responding to your queries, providing updates, and sending relevant information about our services
• To improve our services: Analysing how our website is used to enhance user experience
• To comply with legal obligations: Meeting our regulatory and legal requirements
• To protect our legitimate interests: Ensuring the security of our services and preventing fraud

We process your personal data on the following legal bases under UK GDPR:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you or to take steps prior to entering into a contract
• Legitimate Interests: Where processing is necessary for our legitimate interests, provided these are not overridden by your rights
• Legal Obligation: Where processing is necessary to comply with our legal obligations

We may share your information only in the following limited circumstances:

• Within our firm: Between our Shanghai and London offices, as necessary to provide our services
• Service providers: With trusted third-party service providers who assist us in operating our website and conducting our business (e.g., email service providers), under strict contractual confidentiality obligations
• Legal requirements: When required by law, court order, or governmental authority
• Professional obligations: To regulatory bodies or professional associations, as required by our professional duties

Important: Information you share during consultations is protected by legal professional privilege where applicable. We will never disclose privileged information without your explicit consent, except where required by law.

As we have offices in both the United Kingdom and China, your personal data may be transferred to, stored, and processed in countries outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office
• Ensuring the receiving country has adequate data protection laws
• Implementing additional technical and organisational security measures

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Consultation enquiries: For 6 years from the date of last contact, in accordance with professional regulations
• Client matter files: For a minimum of 6 years after the matter is concluded, or longer if required by law
• Website analytics data: For up to 26 months

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: To obtain a copy of the personal data we hold about you
• Right to rectification: To request correction of inaccurate or incomplete data
• Right to erasure: To request deletion of your personal data in certain circumstances
• Right to restriction: To request restriction of processing of your personal data
• Right to data portability: To receive your personal data in a structured, commonly used format
• Right to object: To object to processing of your personal data in certain circumstances
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure encrypted connections (HTTPS) for all data transmissions
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection and confidentiality

Our website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

• Essential cookies: Necessary for the website to function properly
• Analytics cookies: To understand how visitors use our website

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

If you have concerns about how we handle your personal data, please contact us first at [email protected]. We will endeavour to resolve your concerns promptly.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: