top of page


We at Chr. Theodorou & Co LLC value your privacy and pay great attention to the way your personal information is handled.


We prepared this policy in order to help you understand the reasons why we need to collect and process your personal data.

This policy describes:

  • The personal information which is collected about you

  • The way this personal information is obtained

  • The use of your personal information

  • The reason your personal information is used

  • The time limit within which your personal information is kept

  • The sharing of your personal information

  • The protection of your personal information

  • In which countries your personal information is transferred to

  • Your rights regarding your personal information


The personal information which is collected about you:


  • Personal information from you, when you contact us, through your use of our website, when you request information from us, when you engage our legal services or as a result of your relationship with one or more of our staff and clients.

  • Primary information such as your name, your postal address, email address(es) and phone number(s), the company you work for, your title or position and your relationship to a person.

  • Financial information, such as payment-related information.

  • Technical information, such as information resulting from your visits to our website or in relation to materials sent to you electronically.

  • Any information you provide to us for meetings and events attendance.

  • Identification and background information provided by you or collected as part of our business acceptance processes.

  • Personal information provided to us by or on behalf of our clients or generated by us in the course or providing services to them, which may include special categories of data.

  • Any other information relating to you which you may provide to us.


The way this personal information is obtained:


  • We collect information from you (for you and/or for others) as part of our business acceptance processes which deemed necessary in the course of providing legal services.

  • We collect your personal information through monitoring our available technology tools and services, specifically our websites and email communications.

  • We gather information about you when it is provided by you directly to us

  • We may collect or receive information about you from other sources, such as publicly available sources.


The use of your personal information


  • To better provide and improve our services to you and to our clients

  • To further improve our website

  • To deliver information requested by you

  • To promote our services

  • To manage and administer our relationship with you and our clients

  • To fulfil our legal, regulatory and risk management obligations

  • For the purposes of recruitment


The reason your personal information is used


  • To engage with an individual to provide legal services

  • For any legal claims or proceedings (establishment, exercise)

  • To comply with legal and regulatory obligations

  • For legitimate business purposes.


The time limit your personal information is kept:


Any information we receive from you is retained, after being categorised, and then specified to the appropriate retention period for each category of data. The said periods are based on the requirements of applicable data protection laws and the purpose for which the information is collected and used, taking into account legal and regulatory requirements to retain the information for a minimum period, limitation periods for taking legal action, good practice and business purposes.


The sharing of your personal information


We may need to share your information with a number of trusted third parties in accordance with the agreements in place with them.

  • Advisors and auditors

  • Suppliers form whom we receive certain support services

  • IT service providers

  • Third parties whom we need to involve in the course of the services we provide to clients and with their prior consent

  • Third parties involved in hosting or organising events or seminars

  • Courts, government agencies, regulatory authorities, authorities in general.

  • Even though it is highly unlikely, we may be required to disclose your information to comply with legal or regulatory requirements. We will endeavour to notify you before we do this, unless we are legally restricted from doing so.


The protection of your personal information:


Once we collect your personal data, it is stored in a secure and updated system of data storage and management. The data is processed in a secure way, including, without limitation, protection against unauthorised or unlawful processing and loss, destruction or damage, with the use of proper measures. In addition, we have applied and uphold appropriate procedures to safeguard the security and confidentiality of your personal data. From time to time, we review our security procedures in order to consider appropriate new methods available and ensure that the personal data you provide us with is protected based on the accepted industry standards.

As regards personal data in paper form, the said documents are securely stored in a designated space within our premises where no unauthorised access is permitted.

In which countries your personal information is transferred to


In order to provide our services, we may need to transfer your personal information to locations outside the jurisdiction in which you provide it or where you are viewing this website for the purposes set out in this privacy policy. This may entail a transfer of your information from a location within the European Economic Area (the “EEA”) to outside the EEA, or from outside the EEA to a location within the EEA.  

The level of information protection in countries outside the EEA may be less than that offered within the EEA. Where this is the case, we will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws. Where our third-party service providers process personal data outside the EEA in the course of providing services to us, our written agreement with them will include appropriate measures, usually standard contractual clauses.

Your rights regarding your personal information:

You have a right to request details of the information we hold about you and how we process it. You may also have a right in accordance with applicable data protection law to have it rectified or deleted, to restrict our processing of that information, to stop unauthorised transfers of your personal information to a third party and, in some circumstances, to have personal information relating to you transferred to another organisation. You may also have the right to lodge a complaint in relation to our processing of your personal information with a local supervisory authority.

You have the right to object to the processing of your personal information, or if you have already given your consent to processing and you later choose to withdraw it, we will respect that choice in accordance with our legal obligations.

Your objection (or withdrawal of any previously given consent) could mean that we are unable to perform the actions necessary to achieve the purposes set out above) or that you may not be able to make use of the services and products offered by us. Please note that even after you have chosen to withdraw your consent, we may be able to continue to process your personal information to the extent required or otherwise permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations.


We must ensure that your personal information is accurate and up to date. Therefore, we encourage you to inform us for any changes to your information by email to  

bottom of page