Privacy Policy

This Privacy Policy explains how Block Legal ("Block Legal," "we," "us," or "our") collects, uses, discloses, and protects personal data when you visit our website, contact us, or engage our services.

Block Legal operates internationally through a group of affiliated entities. For general website activity and preliminary enquiries, the group entity responsible for the relevant region acts as data controller. Where you proceed to a specific engagement, the contracting Block Legal entity for that engagement will act as data controller (or, where applicable, joint controller) for data processed in connection with that engagement, in accordance with the data protection law applicable to that entity's jurisdiction. The identity of the relevant controller will be confirmed to you at the time of engagement.

We may collect the following categories of personal data:

Information you provide directly: name, job title, company name, email address, phone number, and any information you submit through contact forms, consultation requests, or correspondence, including details of your enquiry or matter.

Information collected automatically: IP address, browser type, device information, pages visited, time spent on pages, referring website, and similar technical data collected through cookies and analytics tools when you visit our website.

Information provided during an engagement: where you become a client, we may collect additional personal data necessary to deliver services, including identity verification documents (for anti-money laundering and know-your-client purposes), corporate documents, and matter-specific information you share with us.

We do not knowingly collect personal data from individuals under the age of 18, and our services are not directed at minors.

We use personal data for the following purposes: to respond to enquiries and provide requested information about our services; to assess and progress prospective engagements, including conflict-of-interest checks; to deliver legal and advisory services under an active engagement; to comply with legal and regulatory obligations, including anti-money laundering, counter-terrorist financing, and know-your-client requirements applicable to our business; to maintain business records, including billing and engagement records, as required by professional conduct rules and applicable law; to communicate updates, insights, or marketing content, where you have consented to receive such communications or where permitted by applicable law, and subject to your right to opt out at any time; to improve our website and services, through aggregated and anonymised analytics; and to protect the rights, property, and safety of Block Legal, our clients, and others, including investigating and preventing fraud or misuse of our services.

Where the UK GDPR, EU GDPR, or equivalent data protection law applies, we rely on the following legal bases: performance of a contract (where you are a client or prospective client progressing toward engagement); legitimate interests (for general business development, website analytics, and security, balanced against your rights); compliance with a legal obligation (for anti-money laundering and regulatory compliance); and consent (for marketing communications, where required).

We do not sell personal data. We may share personal data in the following circumstances:

Within the Block Legal group, where necessary to coordinate a multi-jurisdictional engagement, subject to confidentiality obligations and applicable data protection law.

With local counsel or co-counsel, where a matter requires referral to appropriately licensed professionals in a jurisdiction where Block Legal is not authorised to advise, and only to the extent necessary for that purpose.

With service providers, including IT infrastructure providers, cloud storage providers, payment processors, and professional advisers (such as auditors), under appropriate confidentiality and data processing terms.

Where required by law, including in response to valid requests from regulators, courts, or law enforcement authorities, or to comply with anti-money laundering and counter-terrorist financing reporting obligations.

In connection with a corporate transaction, such as a merger, acquisition, or restructuring within the Block Legal group, subject to appropriate safeguards.

Given that Block Legal operates across multiple jurisdictions, personal data may be transferred to and processed in countries outside your home jurisdiction, including countries that may not have data protection laws equivalent to those of your home jurisdiction.

Where we transfer personal data from the UK or EEA to a jurisdiction without an adequacy decision, we rely on appropriate safeguards, including Standard Contractual Clauses or equivalent mechanisms, as required by applicable law.

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including to comply with legal, regulatory, accounting, and professional conduct obligations. Client and engagement records are generally retained for the period required by applicable professional conduct rules and limitation periods in the relevant jurisdiction, after which data is securely deleted or anonymised.

Depending on your jurisdiction, you may have rights including: the right to access personal data we hold about you; the right to rectify inaccurate data; the right to request erasure, subject to our legal and professional retention obligations; the right to restrict or object to certain processing; the right to data portability; and the right to withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@blocklegal.io. We may need to verify your identity before responding, and may need to direct your request to the specific Block Legal entity responsible for the relevant data. Where applicable, you also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction, including the UK Information Commissioner's Office (ICO) for UK-related matters.

Our website uses cookies and similar technologies to operate the site, remember preferences, and analyse usage. You can control cookie preferences through your browser settings or any cookie consent tool presented on our website. Disabling certain cookies may affect website functionality.

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration, including encryption, access controls, and confidentiality obligations applicable to our personnel and service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Block Legal entities process personal data in accordance with the data protection law applicable to their respective jurisdictions of registration and operation, which may include the UK GDPR, EU GDPR, and equivalent regional data protection frameworks. Where a specific engagement is governed by the data protection law of a different jurisdiction, the applicable framework and any additional rights available to you will be set out in the privacy notice provided at the time of that engagement.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The version posted on our website governs at the time of your use. Material changes will be highlighted where appropriate.

For questions about this Privacy Policy or to exercise your data protection rights, contact us at info@blocklegal.io. Details of the relevant Block Legal entity and its data protection contact will be confirmed as appropriate to your enquiry.