Privacy Policy

  1. Introduction This Privacy Policy outlines how EnterpriseLawX, a legal service platform providing corporate contract management, structuring, and legal support, processes and protects your personal data. This policy applies to all clients, prospects, and visitors interacting with our digital and professional services, with specific alignment to Swiss privacy regulations (FADP) and international frameworks, including the General Data Protection Regulation (GDPR) for EU users.

  2. Privacy Policy EnterpriseLawX collects and processes personal and business-related information to provide legal consulting, document handling, and regulatory support for corporate clients. We collect the following categories of data:

  • Identification Data: Company name, contact person, business email, phone number

  • Legal Project Data: Drafts of agreements, legal documentation, correspondence

  • Billing Data: Invoices, payment records, VAT/tax identifiers

  • Usage Data: Account activity, time stamps, interaction with legal templates or portals

  • Communication Records: Emails, form submissions, video conference logs

Data is stored within encrypted servers in Switzerland and EU jurisdictions, with access restricted by technical and legal safeguards. We retain data only for as long as required for client support, compliance, and regulatory reporting unless otherwise directed by the client.

  1. GDPR Under GDPR, individuals and authorized representatives of businesses interacting with us from the EU or EEA have the following rights:

  • Access to and correction of stored data

  • Deletion of data under qualifying conditions

  • Right to restrict processing or object based on legitimate interests

  • Right to receive a copy of data in structured, portable format

  • Right to revoke consent when applicable

Legal bases for data processing include:

  • Performance of contract: Execution and delivery of legal services

  • Legal obligation: Retention of corporate records, anti-fraud and compliance monitoring

  • Legitimate interest: Platform administration, service improvement, security

  • Consent: Only where optional features such as newsletters or client surveys apply

Requests related to GDPR should be submitted via [email protected]. We respond to all inquiries in compliance with Swiss and European timelines.

  1. Cookie Policy

4.1 Types of cookies used EnterpriseLawX uses cookies to enhance platform usability and security:

  • Strictly Necessary Cookies: Authentication, encrypted logins, session continuity

  • Functional Cookies: Save user preferences, language, or document status

  • Analytical Cookies: Monitor legal portal usage patterns to optimize navigation

  • Consent-Based Cookies: Applied for optional features, such as saved drafts

4.2 How to disable cookies Users can control or disable cookies through browser settings or our in-platform consent panel. Disabling essential cookies may limit access to secure sections or document tools. Consent-based cookies are not loaded until user permission is granted.

  1. Third-Party Sharing EnterpriseLawX never shares client data without necessity and legal basis. Limited sharing occurs with:

  • Authorized Service Providers: Secure document storage, legal tech integrations, payment processors

  • Regulators and Authorities: Only in the event of legal requests, audits, or enforcement

  • External Counsel or Notaries: When collaborating on cross-border mandates or complex filings, always under NDA or client’s prior consent

  • Affiliates and Contractors: If directly involved in fulfilling contracted legal work

We prohibit the resale or reuse of any client data for advertising or unrelated commercial purposes.

  1. Data Security Measures We use multiple layers of security to protect all collected and stored data:

  • Data encryption in transit (TLS 1.3) and at rest (AES-256)

  • Zero-trust access architecture for internal staff

  • Enforced strong authentication (2FA) for client portals

  • Regular security assessments and code audits

  • Physical server access limited to ISO 27001-certified data centers

  • Disaster recovery protocols and legal hold functionality

All staff handling sensitive data are bound by confidentiality and undergo privacy training annually.

  1. Effective Date
    This Privacy Policy takes effect as of 24 June 2025. Future amendments will be published with advance notice via our official website and email to active client accounts. Your continued use of EnterpriseLawX services after updates constitutes acknowledgment of the revised policy.