Privacy Policy

At Legal Mechanic, we value and respect your privacy. This Privacy Policy explains how MB Legal Mechanic (the “Firm”, “we”, “us” or “our”), as a data controller under the General Data Protection Regulation (GDPR) and applicable Lithuanian and EU data protection laws, collects, uses, discloses, and protects your personal data when you visit our website, use our online services, subscribe to our newsletter, submit a contact or career inquiry, or otherwise interact with us.

We are committed to processing your personal data lawfully, fairly, and transparently. This Policy applies to personal data collected through our website and related digital channels. It does not apply to data processed in the context of client engagements, which are governed by separate engagement letters and our client privacy notice.

1. Information We Collect

We may collect the following categories of personal data:

• Information you provide: name, surname, email address, phone number, company/organisation details, position, content of inquiries, CVs and motivational letters (for career applications), or other information submitted via contact forms, newsletter subscriptions or registrations.
• Technical and usage data: IP address, browser type and version, operating system, device information, pages visited, time spent on the site, and referral sources. This data is collected automatically through cookies and similar technologies.
• Business-related information for the provision of our services.
• Data required for legal compliance: identification and verification information (e.g., for anti-money laundering or “know your client” checks where relevant).

We do not intentionally collect special categories of personal data (sensitive data) via the website unless required by law or explicitly provided by you in a specific context.

2. How We Use Your Information

We process your personal data for the following purposes:

• Responding to your inquiries or ongoing projects and providing information about our legal and consulting services.
• Managing newsletter subscriptions and sending legal updates, alerts, and marketing communications (where permitted).
• Evaluating job applications and managing recruitment processes.
• Improving our website, analysing usage trends, and enhancing user experience.
• Complying with legal and regulatory obligations (including GDPR, anti-money laundering, and professional conduct rules).
• Protecting our legitimate business interests, such as preventing fraud, ensuring website security, and maintaining records for potential legal claims.

3. Legal Basis for Processing

We rely on one or more of the following lawful bases under Article 6 of the GDPR:

• Your consent (e.g., for newsletter marketing or non-essential cookies).
• Performance of a contract or taking steps prior to entering into a contract (e.g., responding to service inquiries).
• Compliance with a legal obligation (e.g., AML/KYC requirements or regulatory reporting).
• Our legitimate interests (e.g., improving our services, direct marketing to existing clients/contacts, website analytics, and security), provided these interests are not overridden by your rights and freedoms.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share it only in the following limited circumstances:

• With trusted service providers and processors (e.g., IT hosting, analytics, email marketing platforms, or recruitment tools) who act on our behalf and are bound by appropriate data processing agreements.
• With professional advisers, auditors, or other law firms (where necessary for our services or compliance).
• With courts, regulators, government authorities, or other third parties when required by law, court order, or to protect our rights.
• In the event of a merger, acquisition, or restructuring of our business.

Any transfers outside the EEA are protected by appropriate safeguards where required.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. After the retention period, we securely delete or anonymise the data.

6. Your Rights

Under the GDPR and Lithuanian law, you have the following rights (subject to certain exceptions):

• Access to your personal data and information about how it is processed.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”) in certain circumstances.
• Restriction of processing.
• Objection to processing (including for direct marketing or based on legitimate interests).
• Data portability (where processing is based on consent or contract).
• Withdrawal of consent at any time.

To exercise your rights, please contact us.

7. Data Security

We implement appropriate technical and organisational measures (e.g., encryption, access controls, secure servers, and regular security reviews) to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure. However, no system is completely secure, and we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure functionality, analyse traffic, and improve your experience. Essential cookies are used on the basis of our legitimate interest; others require your consent. You can manage or withdraw consent for cookies via the cookie banner or your browser settings.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: