Effective and last reviewed: 7 August 2026
How BusinessLawyers.ge handles personal information
ASSIO LEX AND ASSOCIATES LLC operates this website and controls the personal data processed through its own inquiry channels. We use information to answer inquiries, perform conflict and scope checks, secure the website, administer an engagement where one is agreed, and meet legal or professional obligations. Sending a message does not itself create a lawyer–client relationship.
1. Controller and scope
The controller for this website is ASSIO LEX AND ASSOCIATES LLC, identification number 404599047, Besiki Business Center, Besiki 4, 0108 Tbilisi, Georgia. You can contact us at info@businesslawyers.ge or +995 555 940 077. This notice covers visits to BusinessLawyers.ge, contact-form submissions, direct email or telephone inquiries initiated from the website, and the administration of a matter after the firm confirms an engagement.
This notice does not make every person mentioned in a business matter our client. A company contact may provide information about directors, shareholders, employees, counterparties, advisers or other individuals. The person providing that information should share only what is relevant and lawful for the intended request.
2. Information we may process
Inquiry and identity data
Name, role, organisation, telephone number, email address, preferred contact method and the date and source of the inquiry.
Company and matter data
Entity names, registration details, ownership or management context, parties, objectives, deadlines, jurisdictions and factual descriptions supplied by you.
Documents and correspondence
Files uploaded through the inquiry form, email attachments, drafts, corporate records, messages, call notes and instructions relevant to a conflict check or agreed work.
Technical and security data
IP address, request time, browser or device data, requested page, referrer, security events and server records produced when the website is delivered.
Please do not send unnecessary special-category data, identification documents, passwords, payment credentials or urgent confidential material through an initial website form. First identify the parties and request a conflict and scope check. If the firm can act, it will confirm a suitable way to exchange further documents.
3. Purposes and grounds
Processing is tied to a defined purpose. Depending on the facts, the applicable ground may include reviewing a request for services, steps requested before a contract, performance of an engagement, compliance with law or professional obligations, consent for a specific optional activity, or an important legitimate interest that is not overridden by the rights of the person concerned.
| Purpose | Typical information | Why it is needed |
|---|---|---|
| Respond and assess the inquiry | Contact, company, parties and matter summary | To understand the request, check whether the firm may act and propose a scope. |
| Deliver agreed legal work | Instructions, documents, correspondence and matter records | To perform the engagement, communicate, document decisions and protect the client’s position. |
| Meet legal and professional duties | Identity, conflicts, engagement, accounting and compliance records | To satisfy applicable law, professional rules, court or authority requirements and record-keeping duties. |
| Operate and protect the website | Technical logs, form-security signals and preference storage | To deliver pages, prevent abuse, investigate faults and preserve system security. |
| Establish or defend claims | Relevant communications and transaction records | To preserve evidence and protect legal rights where a dispute or complaint arises. |
We do not use website inquiries for automated decisions that produce legal or similarly significant effects. We do not sell personal data. Direct marketing is not sent through this website unless the person has made a separate, valid choice and a simple withdrawal method is provided.
4. Professional confidentiality and initial inquiries
Georgian legislation protects professional secrecy and information received by a lawyer from a client or another person seeking legal advice. That professional duty is separate from this privacy notice. It does not remove the need for a conflict check, a defined client, an agreed scope and written engagement terms before legal work begins.
An unsolicited inquiry can involve an existing client or another party. Until the firm confirms that it can act, do not assume that sending information prevents the firm from acting for someone else. We may retain a limited record of the parties and the outcome of the conflict check where necessary to protect clients, the firm and the integrity of future checks.
5. Recipients, processors and disclosure
Access is limited to lawyers, authorised personnel and service providers who need the information for the relevant purpose. Categories may include secure hosting and infrastructure providers, email and communications services, website maintenance and security support, document or business-administration providers, professional advisers and—where an engagement or law requires it—registries, courts, regulators, banks, notaries, translators, experts, counterparties or other advisers.
Service providers should act under appropriate instructions or their own lawful duties. We may disclose information where required by law, necessary for legal proceedings or professional obligations, or authorised by the client or person concerned. We do not publish client names, matter details, testimonials or transaction claims without an appropriate basis and permission.
6. International processing and third-party tools
Some communications or infrastructure providers may process information outside Georgia. Where that occurs, the transfer and safeguards are assessed in light of the destination, provider, purpose and applicable law. A public website can also be accessed from other countries, but access by a visitor does not by itself change the controller named above.
The website loads Smartsupp live chat and the Elfsight platform for WhatsApp chat and social-sharing controls. These providers may receive technical request information such as IP address, browser or device data, referring or requested page and service identifiers when their code loads. Information typed into a chat or WhatsApp interaction is also sent through the selected provider and, for WhatsApp, the relevant Meta service. Their infrastructure may operate outside Georgia. Use of these tools is optional: visitors can contact the firm directly by telephone, email or the website form instead. The Cookie Policy explains the related browser-storage position.
7. Retention
There is no single retention period for every record. An unanswered or out-of-scope inquiry may be kept only as long as reasonably needed to respond, record the decision, operate security controls or perform future conflict checks. Engagement records may be retained for the engagement and a further period connected with legal, professional, accounting, limitation, insurance, complaint and evidence requirements.
Security logs and local preference data follow shorter operational criteria where practicable. When information is no longer required, it is deleted, destroyed, anonymised or placed beyond routine use, subject to backups, legal holds and duties that require continued storage.
8. Security
We use proportionate organisational and technical measures designed to protect information from unauthorised access, alteration, loss or disclosure. Measures may include restricted access, authentication, server and form controls, backups, update management and instructions for people handling matter data. No internet transmission or storage system can be guaranteed to be completely secure, so the amount and sensitivity of information shared through an initial form should remain limited.
9. Your rights
Subject to the conditions and exceptions in Georgian law, a person may request confirmation and information about processing, access and a copy, correction or completion, termination or erasure, blocking, portability in applicable cases, withdrawal of consent, and review of certain automated decisions. A request should identify the person, the relationship to the matter and the data concerned so that identity and authority can be checked without disclosing information to the wrong person.
Send a request to info@businesslawyers.ge. We may ask for proportionate verification and may preserve information where another lawful ground, professional duty, legal claim or restriction applies. Georgian law provides a right to apply to the State Audit Office of Georgia, a court and/or a superior administrative body in the circumstances specified by law.
10. Cookies, external links and changes
The site’s present browser storage and future third-party tool position are explained in the Cookie Policy. External websites have their own privacy practices. We may revise this notice when the website, providers, legal requirements or processing activities change. The effective and review date at the top identifies the published version.
Official public sources
This notice explains the site’s actual practices; it is not a substitute for the legislation. The principal public references checked for this version are: