Privacy Policy

Global Law Lists.org™ (“Global Law Lists”, “we”, “our” or “us”), operated by Weblaya Digital Bhutan, Thimphu, Kingdom of Bhutan, is an international legal network that helps people find and contact law firms and lawyers worldwide. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you visit or use our website, in compliance with the General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA"), and other applicable laws globally.

This policy is designed specifically for legal professionals and stakeholders in the legal industry. By using our website, you agree to the collection and use of information in accordance with this Privacy Policy.

Data Controller

Global Law Lists.org™, operated by Weblaya Digital Bhutan, Norzin Lam, Thimphu 11001, Kingdom of Bhutan.

Data Processor

Our hosting provider, whose servers are located in the United States, responsible for the storage and processing of data under this policy. Pages are delivered through Cloudflare’s global network.

We collect the following types of information:

Personal Data

Identifiable information such as names, email addresses, job titles, and contact details provided by law firms or individual representatives during registration or through communications.

Professional Data

Information related to law firms, including firm names, addresses, practice areas, attorney profiles, and other firm-specific details.

Usage Data

Technical information such as IP addresses, browser types, operating systems, and browsing patterns collected through cookies and similar technologies. IP addresses can identify you, so we treat them as personal data.

Communication Data

Any data contained in communications between you and Global Law Lists.org™, including email correspondence, feedback forms, and enquiries.

Submission Records

When you submit a review, message, claim or other form, we record the IP address and browser type used, together with the time of submission. We use this only to prevent spam, fraud and fake reviews, and to investigate abuse.

Our processing of personal data is based on the following legal grounds:

Consent

We may process your data if you have given explicit consent for specific purposes, such as subscription to newsletters.

Legitimate Interests

Processing necessary for our legitimate interests, such as maintaining the security of our site, improving user experience, or providing requested services.

Contractual Obligations

Processing necessary for the performance of a contract to which you or your law firm is a party, such as listing your firm on our network.

Legal Compliance

Processing necessary to comply with legal obligations under EU, US, and other applicable laws.

We use the collected information for the following purposes:

Network Services

To list and update information about law firms globally across our international legal network.

Communication

To respond to enquiries, provide customer support, and send administrative information.

Analytics

To analyse usage patterns and improve our services.

Security

To protect against fraud, unauthorised access, and other security issues.

Compliance

To ensure compliance with applicable laws and regulations.

We may share your information with:

Third-Party Service Providers

For website hosting, analytics, and other operational purposes, under strict contractual obligations to protect your data.

Legal Authorities

When required by law, or to protect the rights, property, or safety of Global Law Lists.org™, our users, or others.

Affiliates

With our affiliates and subsidiaries, provided they adhere to this Privacy Policy.

Given the global nature of our international legal network, your data may be transferred to and processed in countries outside the European Economic Area (EEA), including countries that may not provide the same level of data protection as your home country. When transferring data internationally, we implement appropriate safeguards — including Standard Contractual Clauses approved by the European Commission — to ensure the protection of your data.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law. Once the data is no longer needed, it will be securely deleted or anonymised. Submission records (the IP address and browser type used to submit a review, message, claim or other form) are kept for no longer than 24 months, unless they are needed for an ongoing investigation.

As a data subject, you have the following rights under GDPR, CCPA, and other applicable laws:

Right to Access

Request a copy of your personal data that we hold.

Right to Rectification

Request correction of any inaccurate or incomplete data.

Right to Erasure

Request the deletion of your personal data under certain conditions.

Right to Restrict Processing

Request the limitation of data processing under specific circumstances.

Right to Data Portability

Request a copy of your data in a structured, machine-readable format.

Right to Object

Object to the processing of your data for specific purposes, including direct marketing.

Right to Withdraw Consent

Withdraw consent at any time where consent was the basis for processing.

Right to Non-Discrimination

Not be discriminated against for exercising your data protection rights under CCPA.

To exercise any of these rights, please email [email protected] with the subject “Privacy request”. Our Your Data Rights page explains how requests are handled.

We implement a variety of security measures to protect your personal data from unauthorised access, use, disclosure, or destruction. These measures include encryption, access controls, and regular security audits. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We use cookies and similar tracking technologies to enhance user experience, analyse usage patterns, and personalise content. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take immediate steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us directly:

By using Global Law Lists.org™, an international legal network operated by Weblaya Digital Bhutan, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree, please discontinue the use of our services. This Privacy Policy is governed by the laws of the Kingdom of Bhutan, with jurisdiction in Thimphu, Bhutan.