Privacy

V0.1


Last updated: 08th September 2025


We care about your privacy and protect your data

Privacy Notice – Short Version

This Privacy Notice – Short Version explains how we collect, use and protect your personal data when you contact us for legal technology consulting. Please refer to Privacy Notice – Detail Version below for more detail.

What Data We Collect

When You Contact Us:

  • Your name and contact details (email or phone number)
  • Legal entity information and your role
  • Description of your legal technology needs.

When You Visit Our Website:

  • Internet address for technical connectivity and security purposes.

For Client Services:

  • Contract and billing information
  • Technical documentation for compliance projects
  • Regulatory assessment materials.

How We Use Your Data

We use your information solely to respond to your inquiries and provide legal technology services. If our initial consultation doesn't lead to engagement, we delete your contact data within 12 months. For clients, we retain data only during our professional relationship and as required by Cambodian law.

Legal Basis for Processing

We process your data based on performance of contract/pre-contractual steps and legitimate interests for developing our legal technology practice and responding to client inquiries.

Security Measures

We implement technical and organizational measures that reflect industry best practices, including technical measures and organizational measures for both communication and website security. View detailed security measures →

Data Transfers

Your data is never sold, rented, or shared with marketing companies and data brokers. We use Proton AG cloud computing for secure data storage with enterprise-grade encryption. We've ensured Proton AG provides sufficient safeguards and appropriate data protection measures through our Data Processing Agreement (https://proton.me/legal/dpa).

Your Rights

You have the right to access, correct, delete, restrict, or object to processing of your personal data. You can also request data portability where applicable.

To Exercise Rights: Email privacy@privacyiuris.com with "Privacy Rights Request" in the subject line. We respond within 30 days, free of charge.

Privacy Iuris
Legal Technology Consultant
Email: info@privacyiuris.com
Privacy: privacy@privacyiuris.com

Privacy Notice – Detail Version

About This Notice

This Privacy Notice explains how Privacy Iuris (hereinafter "Privacy Iuris", "We", "Us", or "Our"), collects, uses, and protects your personal data when you contact us for legal technology consulting. We are committed to protection your personal data and handling your personal data with transparency and care.

Data Controller

Privacy Iuris
Legal Technology Consultant
Based in Phnom Penh, Kingdom of Cambodia
Email: info@privacyiuris.com

Our Commitment to Your Personal Data

As Cambodia's specialized Legal Technology Consultant focusing on Personal Data Protection, Data Privacy & Governance, AI Governance & Audit, and Law & Technology, we understand the critical importance of personal data protection. We process your personal data lawfully, fairly, and transparently, strictly limiting our processing to legitimate business purposes. Our handling of your data reflects the same high standards we help our clients achieve in their digital transformation journeys.

We do not transfer personal data outside the Kingdom of Cambodia without appropriate safeguards. Our personal data processing activities are designed to comply with emerging Cambodian data protection regulations, including the forthcoming Personal Data Protection Law. We maintain robust security measures that align with international best practices while respecting local regulatory requirements.

Data We Collect and Process

When you reach out to us for legal technology consultation, we collect only the data necessary to understand your needs and provide appropriate guidance:

Data Category Data Collected Legal Basis How We Use Your Data Retention
Contact Data • Your name or preferred form of address
• Contact details (email address and/or phone number)
• Your company or organization name (if applicable)
• Your role or position within your organization
• Description of your legal consultant needs or compliance challenges 		• Performance of contract and pre-contractual steps

• Legitimate interests 		We use your contact data exclusively to assess your legal consultant needs and determine how our specialized services can support your digital transformation objectives. This includes analyzing your compliance challenges and preparing preliminary guidance tailored to your organization's regulatory environment. 12 months if consultation doesn't lead to formal engagement
Client Engagement Data Contract Formation:
• Previously provided contact data
• Authorized representative details for contract execution
• Legal entity information and registration details
• Billing and payment information for service agreements
• Specific compliance requirements and project scope details
• Technical specifications relevant to your legal consultant needs

Service Delivery:
• Documentation related to your compliance challenges
• Technical system information relevant to personal data protection audits
• Regulatory assessment findings and compliance gap analyses
• Implementation guidance and monitoring requirements 		Performance of contract We process your data to deliver comprehensive legal consultant services. Our processing supports contract performance and enables us to provide sophisticated legal consulting that bridges technology implementation with evolving legal frameworks. Duration of professional relationship and applicable legal retention requirements

Response and Follow-up Communications: We will analyse your inquiry and reach out to you within two working days to discuss how we can assist with your compliance requirements or digital governance challenges.

Security Measures

We implement technical and organizational measures that reflect industry best practices and emerging regulatory requirements:

Technical Measures:

  • End-to-end encryption for all client communications
  • Secure document management systems with access controls and encryption
  • Multi-factor authentication for all systems accessing client data
  • Secure backup and recovery procedures.

Organizational Measures:

  • Staff training on personal data protection principles and client confidentiality
  • Access controls limiting data access to authorized personal only
  • Regular review and updating of security protocols
  • Client confidentiality agreements and professional ethics compliance.

Data Retention

Inquiry Phase: Contact data from initial consultations is retained for 12 months unless our discussion progresses to formal engagement. This limited retention period allows for appropriate follow-up while minimizing data storage.

Client Engagement: For formal legal services relationships, we retain client data according to professional legal services requirements and contractual obligations. Retention periods are determined by the nature of services provided, ongoing compliance monitoring needs, and applicable legal requirements.

Secure Disposal: When retention periods expire, we securely delete or destroy personal information using methods that prevent unauthorized recovery, ensuring complete data elimination.

Data Transfers

Your data is never sold, rented, or shared with marketing companies and data brokers. However, we utilize cloud computing to store data, including your personal data. We engage with Proton AG for our cloud infrastructure services. Please read our Data Processing Agreement at https://proton.me/legal/dpa.

Before we engage with Proton AG, we have made sure that Proton has provided sufficient safeguards and appropriate data protection measures for processing your personal data. These safeguards include:

  • Comprehensive data processing agreements with contractual data protection clauses
  • Assessment of Proton AG's security standards and data protection capabilities
  • Encryption and advanced security measures for all data stored in cloud infrastructure
  • Regular security audits and compliance monitoring of our cloud service arrangements.

Your Privacy Rights

Our commitment to international best practices, you have significant rights regarding your personal data:

  • Right to Information: You can request detailed information about how we process your personal data, including the purposes of processing, categories of data, and retention periods.
  • Right to Access: You may request copies of all personal data we hold about you, including any assessments or analysis related to your legal technology needs.
  • Right to Rectification: If any personal data we hold is inaccurate or incomplete, you can request corrections to ensure data accuracy.
  • Right to Erasure: You may request deletion of your personal data when it's no longer necessary for our professional services or when you withdraw consent for processing.
  • Right to Restrict Processing: You can request limitations on how we use your data while we address any concerns about accuracy or processing purposes.
  • Right to Data Portability: Where technically feasible, you may request that we transfer your personal data to another service provider in a structured, machine-readable format.
  • Right to Object: You can object to processing based on legitimate interests, and we will cease processing if we can demonstrate compelling legitimate grounds that override your interests.

Exercising Your Rights

To exercise any privacy rights or raise concerns about our data handling practices, please contact us using the following methods:

Email: privacy@privacyiuris.com
Subject Line: "Privacy Rights Request" or "Data Protection Inquiry"
Response Timeframe: We acknowledge all privacy requests within 48 hours and provide complete responses within 30 days, free of charge.

When submitting requests, please include sufficient information to help us locate your data and verify your identity. We may request additional verification for security purposes, particularly for sensitive requests like data deletion or transfer.

Updates to This Privacy Notice

As Cambodia's legal technology landscape evolves and new personal data protection law takes effect, we may update this privacy notice to reflect changes in our practice or legal requirements. We will notify clients and contacts of material changes through:

  • Email notification to our contact database
  • Prominent notice on our professional communications
  • Updated version dating and changes highlights.

We encourage periodic review of this notice to stay informed about how we protect your personal data and handle your personal data.

Contact Us

For questions about this privacy notice, our data handling practices, or to discuss your legal technology and compliance needs:

Privacy Iuris
Legal Technology Consultant
Phnom Penh, Kingdom of Cambodia
Email: info@privacyiuris.com
Privacy Inquiries: privacy@privacyiuris.com

Candidate Privacy Notice – Short Version

This Privacy Notice – Short Version explains how Privacy Iuris collects, uses, and protects your personal data when you apply for positions with Privacy Iuris. Please refer to Candidate Privacy Notice - Detailed Version below for more details.

Data Controller

Privacy Iuris
Legal Technology Consultant
Recruitment Email: talent@privacyiuris.com

Join Our Team

Send your CV to talent@privacyiuris.com to strengthen your experience and help us thrive in Cambodia's digital legal landscape.

Data We Collect

From your CV, we collect only:

  • Your full name and contact details
  • Education
  • Skills and work experience

We use this data to evaluate your fit for our legal technology consulting and contact you about opportunities.

Legal Basis for Processing

We process your data based on consent for recruitment purposes, performance of contract/pre-contractual steps, and legitimate interests for identifying qualified candidates.

How We Use Your Data

Current Applications: We assess your qualifications against our opening and communicate about your application status and interviews.

Future Opportunities: With your consent, we may keep your CV for up to 6 months to consider you for future positions.

Security Measures

We protect your candidate data using the same robust security measures we implement for client data.

Data Retention

Unsuccessful candidates: with your explicit consent, we keep your CV for 6 months for future reconsidered about your qualification with us.

Successful candidates: Becomes part of employment records.

Data Transfers

Your candidate data is never sold, rented, or shared with marketing companies and data brokers. We use Proton AG cloud computing with enterprise-grade encryption and appropriate data protection measures through our Data Processing Agreement (https://proton.me/legal/dpa).

Candidate Rights

You can access, correct, delete, or restrict use of your candidate data. You can withdraw consent for future opportunities at any time.

Exercise Rights: Email privacy@privacyiuris.com with "Candidate Privacy Rights" in the subject line. We respond within 15 days.

Candidate Privacy Notice – Details Version

About This Privacy Notice

This Privacy Notice explains how Privacy Iuris (hereinafter "Privacy Iuris", "We", "Us", or "Our"), collects, uses, and protects your personal data when you apply for positions with Privacy Iuris. We are committed to handling your career data with the same data protection standards we apply to our client services.

Data Controller

Privacy Iuris
Legal Technology Consultant
Based in Phnom Penh, Kingdom of Cambodia
Recruitment Email: talent@privacyiuris.com

Join Our Privacy Iuris Team

If you want to strengthen our practice and help us thrive in Cambodia' evolving digital legal landscape, we invite you to send your CV to talent@privacyiuris.com. As specialists in Personal Data Protection, we understand the importance of protection your personal data throughout the recruitment process.

Data We Collect and Process from Candidates

When you submit your CV or apply for positions with Privacy Iuris, we collect only the information necessary to evaluate your qualifications and determine how you could contribute to Privacy Iuris.

Data Category Data Collected Legal Basis How We Use Your Data Retention
CV and Application Data • Your full name as provided in your CV
• Contact details including email address and phone number
• Educational background
• Professional skills
• Work experience
• Professional certifications
• Language proficiencies 		• Consent

• Performance of contract and pre-contractual steps

• Legitimate interests 		We analyse your CV and/or application to evaluate your qualifications against our current openings and future staffing needs. We use your contact data to communicate about your application status, schedule interviews, and coordinate the selection process. With your consent, we may retain your data for future opportunities that match your qualifications. 6 months with your explicit consent for future opportunities; otherwise deleted after recruitment process completion
Additional Recruitment Data • References
• Interview assessments
• Background verification relevant to Privacy Iuris requirements 		• Consent

• Performance of contract and pre-contractual steps 		For candidates progressing to final selection stages, we may contact provided references and conduct background checks as required, always with your explicit consent and in accordance with professional standards. Deleted after recruitment process completion unless you become an employee

Security Measures for Candidate Data

We protect your candidate data using the same robust security measures we implement for client data. Please refer our Privacy Notice (Security Measures Section).

Data Retention for Candidate Data

Successful Candidates: If you join Privacy Iuris, your data it retained by us.

Unsuccessful Candidates: If you are not selected for a current position, with your explicit consent, we retain your CV and/or Application Data for six months to allow for reconsideration if circumstances change or similar positions become available. You can withdraw this content at any time.

Data Deletion for Candidate Data

When retention periods expire or consent is withdrawn, we securely delete all candidate data using methods that prevent unauthorized recovery.

Data Transfers

Your candidate data is never sold, rented, or shared with marketing companies and data brokers. However, we utilize cloud computing to store candidate data, including your personal data. We engage with Proton AG for our cloud infrastructure services. Please read our Data Processing Agreement at https://proton.me/legal/dpa.

Before we engage with Proton AG, we have made sure that Proton has provided sufficient safeguards and appropriate personal data protection measures for processing your personal data. These safeguards include:

  • Comprehensive data processing agreements with contractual data protection clauses
  • Assessment of Proton AG's security standards and data protection capabilities
  • Encryption and advanced security measures for all candidate data stored in cloud infrastructure
  • Regular security audits and compliance monitoring of our cloud service arrangements.

Candidate Rights

As a job applicant, you have comprehensive rights regarding your personal data:

  • Right to Information: You can request details about how we process your candidate data.
  • Right to Access: You may request copies of all information we hold about your application, including interview notes.
  • Right to Rectification: You can request corrections to any inaccurate information in your application materials or our records.
  • Right to Erasure: You may request deletion of your candidate data, particularly if you withdraw from consideration or decline consent for future opportunities.
  • Right to Restrict Processing: You can request limitations on how we use your data during the recruitment process.
  • Right to Data Portability: You may request your application data in a structured format for transfer to other potential employers.
  • Right to Object: You can object to processing for future opportunities or withdraw consent for talent pipeline inclusion at any time.

Exercising Your Candidate Rights

To exercise any privacy rights or ask questions about our recruitment data handling:

Email: privacy@privacyiuris.com
Subject Line: "Candidate Privacy Rights" or "Recruitment Data Inquiry"
Response Time: We acknowledge candidate requests within 24 hours and provide complete responses within 15 days, free of charge.

When contacting us, please include your full name and the position(s) you applied for to help us locate your data efficiently.

Contact Us

Privacy Iuris
Legal Technology Consultant
Email: info@privacyiuris.com