Last updated: 17 September 2026

Website privacy notice

This notice explains personal data processing when you visit pgilegal.com or contact this practice through the details on the website. It is not a complete notice for the handling of a legal matter.

1. Who is responsible?

Panayiotis G. Ioannou, Advocate | Legal Consultant, practising as a sole practitioner, is the controller for this website and enquiries addressed to the practice. Registration number: 5476.

Andrea Miaouli 1, 4006 Mesa Geitonia, Limassol, Cyprus.
Email: ioannou@pgilegal.com
Telephone: +357 99463990

2. Information involved

• Visiting the website: hosting and security services receive technical information such as your IP address, requested page, request time, browser information and security signals. This is needed to deliver pages and protect the service.
• Contacting the practice: an online-form, email or telephone enquiry may include your name, contact details, correspondence and the information you choose to provide.
• Cookies: the hosting infrastructure uses security cookies. Details are in the Cookie notice.

The website has no account registration, document upload, newsletter sign-up, advertising pixels or audience analytics added by this practice. Fonts and photographs are served from the website rather than embedded social, video or map services. Email and telephone links open your own application.

3. Purposes and legal grounds

• Website delivery and protection: legitimate interests under Article 6(1)(f) GDPR in making information available and preventing misuse, fraud and attacks. Processing should remain proportionate to those purposes.
• Enquiries about engaging legal services: steps at your request before entering a contract, under Article 6(1)(b). Other professional enquiries are handled on the basis of legitimate interests in responding to correspondence under Article 6(1)(f).
• Legal obligations and disputes: Article 6(1)(c) applies where a particular legal obligation requires processing; Article 6(1)(f) may apply to establishing, exercising or defending legal claims.

You do not need to give your name or email address to browse. Providing information for an enquiry is voluntary, but without sufficient contact details and a description of the request it may not be possible to respond. Please initially send only a brief outline. Do not send passports, financial documents, medical information or confidential case files until an appropriate way of sharing them has been agreed.

4. Service providers and disclosures

The website is hosted through OpenAI Sites using Cloudflare infrastructure for delivery and security. These services receive technical visit data. Email correspondence is handled through the practice’s email service, using Microsoft 365/Outlook infrastructure. A provider may also process certain data for its own purposes under its applicable privacy notice.

Information may be disclosed to professional advisers or competent authorities where necessary for a legal obligation or a legal claim. This website does not publish your enquiries. Information supplied for a legal engagement may involve additional recipients and obligations that fall outside this website notice.

5. International processing

Hosting, security and communications providers operate internationally, so technical data or correspondence may be processed outside the European Economic Area, including in the United States. Cloudflare describes international processing in its privacy policy.

Transfers subject to the GDPR require an applicable Chapter V mechanism, such as an adequacy decision or standard contractual clauses with any necessary additional safeguards. Contact ioannou@pgilegal.com to request information about the destination and safeguards applicable to your data, including how to obtain a copy. Provider arrangements and account settings determine the mechanism applicable to each service.

6. Retention

Enquiry retention depends on whether the enquiry remains open, whether an engagement follows, and whether records are needed for applicable professional or legal obligations or for a reasonably anticipated dispute. Data should not be retained merely because it may be useful in the future. Client-file retention is a separate matter and is not determined by this website notice.

Hosting and security logs have provider-controlled retention settings. Cookie lifetime is not the same as server-log retention: the known cookie lifetime is listed in the Cookie notice. Contact the practice for the retention period applicable to a particular enquiry or technical record.

7. Your rights

Subject to the GDPR’s conditions and exceptions, you may request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your situation. If processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing. There are no optional cookie consents to withdraw in the website’s current configuration.

Send a request to ioannou@pgilegal.com or write to the office address above. Only information necessary to establish identity should be requested. The GDPR normally requires a response within one month; an extension of up to two further months may apply to complex or numerous requests, with notification and reasons within the first month. Rights are not absolute, including where legal obligations or the rights of others apply.

No automated decisions producing legal or similarly significant effects are made by this website. Security services may assess automated traffic to prevent misuse.

8. Complaints

You may complain directly to the Cyprus Commissioner for Personal Data Protection: www.dataprotection.gov.cy, email commissioner@dataprotection.gov.cy. You may also complain to the supervisory authority in the EU/EEA country of your habitual residence, workplace or the alleged infringement. You do not have to contact the practice first.

9. Security and changes

The website uses HTTPS for encrypted transmission. No internet service is entirely risk-free. This notice will be updated when the website’s processing changes. Introducing analytics, advertising, forms or embedded third-party content requires a fresh privacy and cookie review.

Online enquiry form

When you submit the enquiry form, your name, email address, optional telephone number, message and privacy acknowledgement are sent to FormSubmit for delivery to ioannou@pgilegal.com. FormSubmit also receives technical request information. Its documentation states that submissions are retained for 30 days. The service may process data internationally; its privacy terms describe its handling of form information. Do not send sensitive documents or confidential case files through this form. You may instead contact the practice directly by email or telephone.

Submitting the form takes you to FormSubmit, where an anti-spam verification may be required. That service and its verification providers have their own privacy and cookie practices. No FormSubmit or reCAPTCHA script is loaded while you simply browse this website.

Client feedback

The feedback form sends your name, email, comments, optional public display name and publication preference privately through FormSubmit. Feedback is reviewed before any publication. Submitting feedback does not itself authorise publication: the separate optional checkbox records your permission to publish the comment and chosen display name. Your email is not published. You may request withdrawal of publication permission or removal by emailing ioannou@pgilegal.com. Please exclude confidential details and information about other people. FormSubmit processes feedback under the same delivery and retention arrangements described above.