Resolut | Privacy Policy

I. What personal information do we collect about you?

We may collect personal information from you in the course of our business, including through your use of our website, when you contact or request information from us, when you engage our legal or other services, or as a result of your relationship with one or more of our staff and clients.
‍
The personal information that we process includes:

basic information, such as your name (including name prefix or title), the company you work for, your title or position;
contact information, such as your postal address, email address, and phone number(s);
professional information from publicly available sources on the Internet, such as the website of the organization you work for;
financial information, such as payment-related information;
information you provide to us for the purposes of attending meetings and events;
identification, background, and financial verification information provided by you or collected as part of our business acceptance and ongoing monitoring processes;
personal information provided to us by or on behalf of our clients or obtained and processed by us in the course of providing services to them;
any other information relating to you which you may provide to us.

II. How do we obtain your personal information?

We collect information directly from you as part of our business acceptance processes and about you and others as necessary in the course of providing legal services;
We collect your personal information while monitoring and analyzing our technology tools and services, including our website, email, and other communications sent to and from Resolut;
We may collect your personal information, or receive it from others, in connection with the procurement or provision of services;
We gather information about you when you provide it to us, or interact with us directly, for instance, engaging with our staff or leaving your details in the feedback form or survey;
We may collect or receive information about you from other sources, such as keeping the contact details and professional information we already hold for you accurate and up to date using publicly available sources on the Internet and, where relevant, third-party sources as part of our business acceptance or supplier onboarding procedures.

III. Is providing personal data mandatory?

Where we request personal data, we will indicate whether it is

required by law;
required by a contract; or
voluntary.

If you do not provide personal data that is required by law (for example, for compliance, verification, or regulatory obligations) or required to enter into or perform a contract (for example, to open a matter and provide services), we may be unable to (as applicable) accept instructions, provide the requested services, or respond to your request.

IV. How do we use your personal information?

Resolut collects and processes personal information about you in several ways, including through your use of our website and in the provision or promotion of services by us.

We use that information:

to provide and improve this website, including auditing and monitoring its use, and ensure content is provided in the most effective way for you and the devices you are using;
to provide and improve our services to you and to our clients, including handling the personal information of others on behalf of our clients, and to monitor compliance with our policies and standards;
to provide information requested by you;
to promote our services, including sending legal and business updates, publications, and details of events;
to manage and administer our business and our relationship with you and our clients;
to better understand the business and marketing needs of our clients and prospective clients, and to develop our services and offerings;
to maintain and develop professional relationships relevant to our legal practice;
to fulfill our legal, regulatory, and risk management obligations, including establishing, exercising, or defending legal claims, preventing crime or fraud, and protecting the rights of third parties.

A. Use of Resolut website

A number of facilities on our website invite you to provide us with personal information, such as questionnaires, website registration forms, or contact forms. The purpose of these facilities is apparent at the point that you provide your personal information, and we only use that information for those purposes.We use cookies on our website. To learn more about the cookies we use, please see “What are cookies and how do we use them” for more details.

B. Marketing and other emails

We will log your response to our marketing emails and may use this to determine what future marketing is likely to be of interest to you and which future marketing communications we send to you.

For example, if you accept an invitation to an event, we will record this and may send you marketing emails relevant to that event and the topics it covers in the future. We use that information to assess, analyze, and improve the services that we provide.

C. Marketing and events

We will collect and process personal information about you in relation to your attendance at our events organized by Resolut or its business partners. We may share your information with IT and other service providers or business partners involved in organizing or hosting the relevant event.

Where required by law, we will do so only with your consent. You may unsubscribe from marketing communications at any time by sending an email to info@resolut.legal.

V. What are cookies, and how do we use them?

Cookies are small text files that are saved on your device when you visit a website. They help websites function properly, work more efficiently, and give useful information to the website owner.
‍
For more details, please visit https://allaboutcookies.org/ .

We use the following categories of cookies on our website:

Strictly necessary cookies.

These cookies are essential for the operation of the website and enable core functions such as page navigation and access to secure areas. The website cannot function properly without these cookies.
Functional (preference) cookies and Analytics (performance) cookies are not used.

VI. On what basis do we use your personal information?

Under EU data protection law, the use of Personal Data must be justified under one of several legal grounds. The principal legal grounds that justify our use of your Personal Data are set out below:to perform a contract, such as engaging with an individual to provide legal or other services;or the establishment, exercise, or defense of legal claims or proceedings;to comply with our legal and regulatory obligations;for our legitimate interests (legitimate business purposes). Please see “How do we use your personal information” for more details; consent, where your consent is required by law.Where we rely on legitimate interests, you have the right to object

VII. Automated decision-making

We may assess your interactions with our communications in order to tailor future communications and event invitations. However, we do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

VIII. How long do we keep your personal information?

We retain personal data only for as long as necessary for the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, tax, accounting, professional responsibility, and reporting requirements, and for the establishment, exercise, or defence of legal claims.

More specifically:

marketing data is retained until you unsubscribe or object, after which we may retain limited suppression information to ensure that we continue to respect your opt-out request;
website enquiries, contact form submissions, and general correspondence are typically retained for 3 years after our last meaningful contact with you, unless a longer retention period is required or justified;
client and matter-related data is generally retained for the duration of the engagement and for 5 years after the relevant matter is closed, unless we are required or permitted by applicable law, regulation, professional obligations, or document preservation requirements to retain it for longer;
KYC, due diligence, or compliance records are retained for 5 years from the end of the relevant client relationship or from completion of the relevant checks, where required by applicable law;
event attendance data is retained for 1 year after the relevant event, unless you have separately agreed to receive ongoing marketing communications.

Where it is not possible to specify the exact retention period in advance, we determine the appropriate retention period by considering the nature and sensitivity of the personal data, the purposes for which it was collected, whether we need the data to provide services or manage our relationship with you, and any applicable legal, regulatory, limitation, or record-keeping requirements.

When personal data is no longer required, we will securely delete, anonymise, or otherwise put it beyond use

IX. Who do we share your personal information with?

We may also share your personal information with certain trusted third parties in accordance with contractual arrangements in place with them, including:

our professional advisers and auditors;
suppliers to whom we outsource certain support services such as word processing, translation, photocopying, and document review;
IT and other service providers to Resolut;
third parties engaged in the course of the services we provide to clients and with their prior consent, such as barristers, local counsel, and technology service providers like data room and case management services;
third parties involved in hosting or organizing events.

Where necessary, or for the reasons set out in this Privacy Policy, personal information may also be shared with regulatory authorities, courts, tribunals, government agencies, and law enforcement agencies.

While it is unlikely, we may be required to disclose your information to comply with legal or regulatory requirements. We will use reasonable endeavors to notify you before we do this, unless we are legally restricted from doing so.

We do not sell or rent personal information or otherwise share it with a third party in return for monetary compensation, except with your prior permission.

Resolut may maintain online profiles on third-party websites and platforms on the Internet. If you choose to use or interact with those services, you should review their privacy policies to understand how they handle your Personal Data

X. How do we protect your personal information?

We use appropriate technical and organisational measures designed to protect personal data against unauthorized or unlawful access, use, disclosure, alteration, loss, or destruction, taking into account the nature of the personal data and the risks involved in the processing.

We collect only the personal data necessary for the purposes described in this Privacy Policy;
We implement and maintain information security policies, procedures, and controls informed by ISO/IEC 27001:2022;
We monitor our networks and systems for security purposes, including to detect, prevent, and respond to unauthorized access and other security incidents.

While we take reasonable steps to protect personal data, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You also have an important role in protecting Personal Data. You should not share any username, password, or other authentication data provided to you with anyone, and we recommend that you do not reuse passwords across more than one website or application. If you have any reason to believe that your username or password has been compromised, please contact us as detailed below.

XI. Which countries do we transfer your personal information to?

To provide our services, we may need to transfer your personal information to locations outside the jurisdiction in which you provide it or where you are viewing this website for the purposes set out in this Privacy Policy. This may entail a transfer of your information from a location within the European Economic Area (the “EEA”) to outside the EEA, or from outside the EEA to a location within the EEA. Please see “Who do we share your personal information with" for more details.

The level of information protection in countries outside the EEA may be less than that offered within the EEA. Where this is the case, we will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws.

Where our third-party service providers process Personal Data outside the EEA in the course of providing services to us, our written agreement with them will include appropriate measures, usually standard contractual clauses approved by the European Commission, and other appropriate solutions to address cross-border transfers as required or permitted by Articles 46 and 49 of the GDPR or other relevant laws.

XII. Which countries do we transfer your personal information to?

The Resolut website may contain links and references to other websites administered by unaffiliated third parties. This Privacy Policy does not apply to such third-party sites.When you click on a link to visit a third-party website, you will be subject to that website’s privacy practices. We encourage you to familiarize yourself with the privacy and security practices of any linked third-party websites before providing any Personal Data on that website.

XIII. Your rights regarding your personal information

If you are in the EEA, you have the following rights:

Access. Subject to certain exceptions, you have the right to request a copy of the Personal Data we are processing about you, which we will provide to you in electronic form. At our discretion, we may require you to prove your identity before providing the requested information. If you require multiple copies of your Personal Data, we may charge a reasonable administration fee;
Rectification. You have the right to request that any incomplete or inaccurate Personal Data that we process about you be amended;
Deletion. You have the right to request that we delete Personal Data that we process about you, unless we are required to retain such data to comply with a legal obligation or to establish, exercise, or defend legal claims;
Restriction. You have the right to request that we restrict our processing of your Personal Data where:
‍
1) you believe such data to be inaccurate;
2) our processing is unlawful;
3) we no longer need to process such data for a particular purpose, but where we cannot delete the data due to a legal or other obligation, or because you do not want us to delete it;
‍
Portability. In certain circumstances, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit those data to another controller, or to have them transmitted directly to another controller where technically feasible, where the processing is carried out by automated means and is based on your consent or on a contract with you.;
Objection. Where the legal justification for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. You also have the right to object at any time to the processing of your Personal Data for direct marketing purposes. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defense of a legal claim;
Withdrawing Consent. If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge. This includes cases where you wish to opt out of marketing messages that you receive from us.

If you are in the EEA, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that we have not complied with applicable data protection laws. You can access a list of local data protection authorities in EEA countries.

As Resolut is established in Cyprus, you may also lodge a complaint with the Office of the Commissioner for Personal Data Protection, Cyprus.

XIV. How will we handle any changes to this Privacy Policy?

We will update this Privacy Policy from time to time to reflect changes to the way we use your Personal Data. Please visit our website regularly for the latest updates.

The effective date of our Privacy Policy is posted below.

XV. Contact Details

If you have questions or comments regarding this Privacy Policy or our privacy practices, please contact us here:

OV Resolut Limited

Arch. Makariou ΙΙΙ, 276, Lara Court, 3105, Limassol, Cyprus
Email: info@resolut.legal
Effective date: April 07, 2026