Privacy Policy

1. Who We Are

This Privacy Policy applies to Whitehall SLU, a firm registered in the Principality of Andorra and operating at Edifici Canillo Parc II, Carretera del Forn, Canillo, AD100, Andorra (NRT: L717380C). We provide intellectual property law services and talent representation.

For the purposes of this policy, Whitehall SLU is the data controller. If you have any questions about how we handle your personal data, you can contact us at privacy@whitehall.ad.

2. What Data We Collect

We only collect personal data that you provide directly to us. When you submit an enquiry through the contact form on this website, we collect:

• Your first and last name
• Your email address
• The nature of the service you are interested in
• Any information you choose to include in your message

We do not collect any sensitive personal data, payment information, or data relating to minors. We do not use cookies for tracking or analytics purposes on this website.

3. How We Use Your Data

The personal data you submit through the contact form is used solely for the purpose of responding to your enquiry. Specifically:

• To reply to your message and provide the information or assistance you have requested
• To assess whether we are able to assist you with your legal or representation needs
• To establish a professional relationship if both parties wish to proceed

We will not use your data to send unsolicited marketing communications without your explicit consent.

4. Legal Basis for Processing

We process your personal data on the basis of legitimate interest — specifically, the legitimate interest of both parties in communicating about a potential professional engagement. Where you contact us requesting advice or representation, processing is also necessary to take steps at your request prior to entering into a contract.

5. Third-Party Processors

Your contact form submissions are processed by Formspree Inc., a third-party form handling service. Formspree receives and forwards your submission data to our email inbox. Formspree processes data in accordance with their own privacy policy, available at formspree.io.

This website is hosted by Vercel Inc. Standard server logs may be collected by Vercel as part of normal hosting operations. Vercel's privacy policy is available at vercel.com.

We do not sell, rent, or otherwise transfer your personal data to any other third parties.

6. Data Retention

We retain correspondence and associated personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable professional and legal obligations. Where an enquiry does not result in a professional engagement, we will retain your data for no longer than 12 months from the date of your initial contact, after which it will be securely deleted.

7. International Transfers

Formspree and Vercel are US-based companies. By submitting your data via the contact form, you acknowledge that your data may be transferred to and processed in the United States. Both providers implement appropriate safeguards in accordance with applicable data protection legislation.

8. Your Rights

Under Andorran data protection law and the principles of the GDPR, you have the following rights in respect of your personal data:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may ask us to correct inaccurate or incomplete data
• Right to erasure — you may ask us to delete your personal data, subject to any legal retention obligations
• Right to restriction — you may ask us to limit how we use your data in certain circumstances
• Right to object — you may object to our processing of your data where we rely on legitimate interests
• Right to portability — you may request your data in a structured, machine-readable format

To exercise any of these rights, please contact us at privacy@whitehall.ad. We will respond within 30 days.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data transmission via this website is encrypted using HTTPS.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this policy periodically.

11. Contact