Privacy Policy

VR Law is the controller of the personal data processed through this website and related first contacts (forms, email and WhatsApp), unless we tell you otherwise for a specific matter.

When you engage us for legal advice, additional rules apply, including professional secrecy and duties under Portuguese and European law. This website policy does not replace any specific information we may give you when opening a file.

2.1 Data you provide

Through the contact form or when you write to us (email or WhatsApp), we may process:

• Full name
• Email address
• Phone number (including country code)
• Main purpose of contact
• Intended timeline for legal support
• Description of your situation or legal question
• Any other information you choose to send

Please avoid sharing unnecessary sensitive details in the first contact form. If your matter requires confidential documents, we will guide you on a safer channel.

2.2 Data collected automatically

When you visit the website, we may process technical data such as:

• IP address and approximate location derived from it
• Device, browser and operating system information
• Pages visited, referral source and interaction data
• Cookie identifiers and similar technologies (see section 6)

If you arrive from a campaign link, we may also store UTM parameters (for example source, medium, campaign, term and content) so we can understand how you found us.

2.3 Data from third parties

We do not buy contact lists. We may receive data from service providers that help us operate the website (for example hosting, analytics or messaging tools), only as needed for those services and subject to applicable law and your cookie choices where required.

We process personal data for the following purposes:

You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

We do not sell your personal data.

We may share data with:

• Service providers that host, maintain or support the website and communications (for example hosting, email delivery, analytics or consent tools), under appropriate agreements
• Professional advisers or counterparts when needed for your matter and permitted by law and professional rules
• Public authorities when required by law or a binding order

Where tools such as Google tags are used for analytics or advertising, data may be processed by those providers according to your consent choices and their own terms.

Some providers may process data outside the European Economic Area. When that happens, we rely on an adequacy decision or appropriate safeguards (such as Standard Contractual Clauses), as required by the GDPR.

We use cookies and similar technologies as described in our cookie banner and preference centre.

Necessary cookies help the site work (for example remembering your cookie choice). These cannot be switched off through the banner.

Analytics cookies help us understand how visitors use the site. They are used only if you accept them.

Marketing cookies help measure campaigns and support advertising features. They are used only if you accept them.

You can accept all cookies, decline non-essential cookies, or manage preferences at any time through the banner controls. Our consent record is stored for about 182 days, after which we may ask again.

We may also store a short-lived technical cookie with UTM campaign parameters (typically up to 15 days) to understand how enquiries reach us.

For more detail on categories, use Manage preferences in the cookie banner.

We keep personal data only for as long as needed for the purposes above, including:

• Website enquiries: for the time needed to respond and follow up, and then for a limited period if needed to manage related contacts or legal claims
• Client files: for the duration of the matter and afterwards as required by professional rules, limitation periods and legal obligations
• Cookie and consent data: according to the periods set for each cookie or consent record

When retention is no longer necessary, we delete or anonymise the data, unless the law requires otherwise.

We apply technical and organisational measures appropriate to the risk, including access controls and secure communication channels where practicable. No method of transmission over the internet is completely secure; we work to reduce risks and handle incidents responsibly.

Under the GDPR and applicable Portuguese law, you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data in certain cases
• Restrict processing in certain cases
• Object to processing based on legitimate interests
• Data portability, where applicable
• Withdraw consent where processing is based on consent

To exercise these rights, contact vr@vrlawadv.com. We may need to verify your identity before responding.

If you believe your data protection rights have been infringed, you may lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) (www.cnpd.pt), or with another competent authority in your place of residence or work within the EU.

This website is directed at adults seeking legal information or professional support. We do not knowingly collect personal data from children through this site.

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. The current version will always be available on this page.