Privacy Notice

Last updated: 30 October 2026

1. Scope and controller

This Notice explains how OK Legal (Georgian registered name: შპს ოქეი ლეგალ; Company ID 405839678; “OK Legal”, “we” or “us”) processes personal data received through oklegal.ge, its enquiry form and related communications.

OK Legal is responsible for the processing described here. For privacy questions or requests, contact:

  • Email: info@oklegal.ge
  • Phones: +995 599 13 02 02, +995 598 15 11 00

2. Data we process

We may process:

  • your name;
  • email address and phone number;
  • the practice area you select;
  • your short description of the matter and subsequent correspondence;
  • technical information required for website security and operation, including IP address, browser type, request time, security logs and strictly necessary cookies.

Do not send documents, confidential information or special-category data through the initial enquiry form. Submitting the form does not create a lawyer-client relationship.

3. Purposes and legal grounds

We process data to:

  • review your enquiry and respond;
  • conduct an initial conflict check;
  • take steps at your request before a possible professional engagement;
  • protect the website, communications and our legitimate interests;
  • comply with legal and professional obligations;
  • establish, exercise or defend a legal claim where necessary.

The legal ground may be reviewing your request, taking pre-contractual steps at your request, an important legitimate interest, a legal obligation or, where required, your consent.

We will not use your contact details for direct marketing without separate consent.

4. Recipients and service providers

Access is limited to people who need the data to review your enquiry or operate the website. Data may be processed, as necessary, by:

  • authorised OK Legal lawyers and personnel;
  • AI Insider Georgia, as the website technical-administration provider;
  • WorldBus, as our website hosting provider and the host of the mailbox that enquiry-form notifications are delivered to;
  • Cloudflare, via its Turnstile service — a strictly necessary security service used to distinguish genuine visitors from automated spam submissions on the enquiry form, not an analytics or advertising technology;
  • Tidio, as our website’s live-chat service provider — only if you choose to start a chat (see Section 9);
  • professional advisers or public authorities where required by law or necessary to protect a legal interest.

Service providers may access data only to provide the relevant service and under appropriate confidentiality and security obligations.

The enquiry form runs on our website’s own platform. Notifications generated when you submit it are sent to a mailbox hosted by WorldBus; at present, outgoing mail for this is sent through our hosting provider’s standard mail function, without a separate dedicated email-delivery service.

5. International transfers

Cloudflare, as part of its Turnstile security service, may process data outside Georgia. Other technical providers, including our hosting provider, may also process data outside Georgia — we do not currently have independently confirmed information about the specific location(s) where our hosting provider processes data, so we do not state a country beyond what is confirmed here. Where any of this occurs, OK Legal will rely on a legal ground and appropriate safeguards required by Georgian law.

If you choose to start a live chat, Tidio may also process data outside Georgia — Tidio’s own privacy policy states it processes data mainly within the European Economic Area, with limited transfers to the United States under standard contractual safeguards; see Tidio’s privacy policy for details: https://www.tidio.com/privacy-policy/.

6. Retention

If no professional engagement begins, enquiry and correspondence data will generally be retained for no longer than 12 months after the last substantive communication. It may be retained longer where necessary for conflict-check records, establishing or defending a legal claim, or compliance with a legal or professional obligation.

Website security logs will generally be retained for no longer than 90 days unless a particular security incident requires longer investigation.

If the enquiry becomes a client engagement, file retention will be governed by the engagement terms, professional obligations and applicable law.

7. Your rights

Within the scope provided by Georgian law, you may request:

  • information about processing;
  • access to and a copy of your data;
  • correction, updating or completion of inaccurate or incomplete data;
  • termination of processing, erasure or destruction;
  • blocking of data;
  • withdrawal of consent where processing relies on consent;
  • transmission of data where the right applies;
  • an appeal in the circumstances provided by law.

Send a request to info@oklegal.ge. We may reasonably verify your identity and will respond within the period prescribed by law.

You may also apply to the State Audit Office of Georgia or a court in accordance with Georgian law.

8. Security

We use reasonable technical and organisational measures to reduce the risk of loss, unauthorised access, disclosure, alteration or destruction. Internet transmission is not entirely risk-free, so do not send confidential documents or detailed case material through the initial form.

9. Cookies and analytics

The site currently uses only Polylang’s language-preference cookie, which is strictly necessary to remember your chosen language, and other cookies strictly necessary for security and operation. No non-essential analytics, advertising or marketing tracking technology is currently active. If this changes, we will update this Notice and add any required consent mechanism before enabling such technology.

The site also uses Cloudflare Turnstile — a strictly necessary security service that distinguishes genuine visitors from automated spam on the enquiry form, and not an analytics, advertising or marketing tracking technology.

The site also offers an optional live-chat feature, provided by Tidio. Tidio’s script is not loaded, and no Tidio cookie or similar technology is set, unless and until you deliberately click the chat button to start a conversation. If you do, Tidio may then set cookies or similar technologies to operate the chat session; for details of what Tidio processes and how, see Tidio’s own privacy policy: https://www.tidio.com/privacy-policy/. A message sent through the chat does not create a lawyer-client relationship, in the same way as the enquiry form.

10. Changes

An updated version will be posted on this page with a revised date. Where required by law or the nature of the change, we will provide an additional notice of material changes.