1. Who controls your data
Gauthier Berth is the controller for account, verification, marketplace, support, and security data. Contact details are available in the legal notice.
Send privacy questions and rights requests to privacy@lawrelay.be.
2. Data we process
LawRelay is not intended to receive client names, case facts, pleadings, evidence, documents, or privileged communications. Users must keep that information in systems controlled by the lawyers involved.
- Account and contact data, including name, professional email, preferred language, and authentication records.
- Professional-verification data, including your official directory profile, listed name and professional email, firm details, and verification status.
- Profile, assignment, proposal, acceptance, cancellation, and audit-event data.
- Support correspondence and technical/security data such as IP address, request identifiers, device information, and security events.
3. Why and on what basis
- To create and secure accounts, verify eligibility, and provide matching features: performance of the service agreement.
- To prevent abuse, secure the service, support users, improve reliability, and establish or defend claims: legitimate interests, balanced against user rights.
- LawRelay does not use optional analytics.
4. Who receives data
Data is shared only as required to operate the service: with the requesting or responding lawyer as the workflow requires, authorised LawRelay staff, and contracted hosting, transactional-email, security, and backup providers.
Data is not sold.
5. Location and transfers
Hetzner hosts the application in Germany. Encrypted backups are stored in AWS S3 Frankfurt. Migadu, a Swiss email provider, states that its email servers are located in France.
6. Retention
Account and marketplace data are kept while your account is active, then deleted on request unless professional, contractual, security, or legal obligations require a hold.
Backups follow a 7 daily / 4 weekly / 12 monthly schedule. Rights requests are handled through a manual queue.
7. Your rights
Depending on the legal basis and circumstances, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing.
You may lodge a complaint with the Belgian Data Protection Authority. LawRelay may need to verify your identity before fulfilling a request.
8. Security, incidents, and changes
LawRelay will use access controls, encryption in transit, secure authentication, logging controls, backups, monitoring, and incident procedures appropriate to the risk. No online service can promise absolute security.
Material changes will be dated and communicated through the service or by email where appropriate.