PRIVACY NOTICE

Protecting information is part of our professional standard.

Last updated: July 2026

1. Scope

This notice applies to information sent to THALEX LAW through the intake form, published email address and other contact channels on this website. The website does not use marketing cookies, sell personal data or permit case-file uploads through the public BOT.

2. Information we may receive

The intake form asks only for your name, organisation if applicable, contact details, area of enquiry, response priority, relevant deadline, preferred contact channel and a general summary. Do not enter identity or passport numbers, health data, account details, trade secrets, opposing-party names or confidential document content at this stage.

3. How information may be used

Information may be used to respond to an enquiry, assess whether we can accept a matter, conduct conflict checks, provide agreed legal services, and comply with applicable legal and professional obligations.

4. Career profiles

The Careers form receives only the information needed for an initial fit review: name, email, optional telephone, a specific role where selected, area of interest, career stage, education or qualifications, working languages, an optional public profile link and a short introduction. At this stage the website does not request a CV, transcript, portrait, identity document, health data or referee information. With the candidate’s consent, the profile is retained for no more than six months to assess and contact the candidate about a relevant opportunity, then deleted unless it moves into an employment record on a separate basis. The sender may request earlier deletion by providing the application reference.

5. Confidentiality and retention

Each form submission receives a reference and is visible only in a sign-in-protected administrative area. Intake data is assigned a maximum 12-month retention period and is removed through system operations after that period, unless retention is legally required or the information has moved into a separately agreed engagement record. An initial submission does not create a lawyer–client relationship.

6. Technical data

The website infrastructure may process technical logs and other data needed for security, availability and abuse prevention. Submission limits retain only a one-way connection-and-device fingerprint for a short period; the raw IP address is not written to the intake record. The website keeps daily aggregate counts for page views and selected actions such as opening the BOT or intake form, calling or emailing. This measurement uses no cookies, user identifier or IP address, honours the browser’s “Do Not Track” signal and deletes aggregate data after no more than 400 days. If an operational alert is connected, it contains only the reference, practice area, priority, preferred channel and timestamp—not the visitor’s name, contact detail or matter summary. THALEX LAW does not sell personal data or use it for behavioural advertising.

7. Information assistant

The assistant matches short questions to THALEX LAW’s reviewed content. Chat questions are not written to THALEX LAW’s client-intake database or added to an enquiry record. When AI mode is enabled, a general question may be sent to the OpenAI API to prepare a response. Requests are configured not to store response objects (store: false) and do not include contact details. API data is not used to train models by default, but content may remain in abuse-monitoring logs for up to 30 days unless the organisation has been approved for different retention controls. See the OpenAI API data-controls notice. For quality monitoring, THALEX LAW retains for no more than 90 days only non-identifying fields such as language, response mode, referenced content group, response time and helpful/not-helpful rating. The question text is not retained. Do not enter personal, confidential or detailed matter information in chat.

8. Your choices

Form data is stored only after you actively select the consent box. You may request access, correction, withdrawal of consent or deletion by providing the reference and the minimum information needed to verify the request. Consent to intake is not consent to marketing.

9. Contact

Privacy-related enquiries may be sent to thanh@thalexlaw.com. Include the website reference where relevant so you do not need to repeat personal information.