What we collect
Basic identity (name, email, phone, nationality); case data (passport, civil-status certificates, criminal record, bank statements); for Golden Visa / banking — source-of-funds documents; lawyer-client communications; payment metadata.
Retention
To meet mandatory record-keeping under Greek and EU law (especially AML), we retain core case files for at least 5 years after completion.
Third-party processors
Email delivery (Resend); document uploads (UploadThing); payment processing (Stripe); database (self-hosted on our VPS); analytics (self-hosted Plausible).
Your rights
Under GDPR you may access, correct, restrict processing or — within AML retention limits — request deletion. Submit requests via /contact; we respond within 30 days.