Privacy Policy

Last Updated: 29 September 2026

1. Introduction

1.1. This Privacy Policy ("Policy") explains how Leguard OÜ ("Leguard", "we", "us" or "our") collects, uses and protects personal data in connection with the website https://leguard.co (the "Website") and the services we provide (the "Services").

1.2. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and other applicable data protection laws.

1.3. This Policy should be read together with our Cookie Policy and our Terms and Conditions.

2. Data Controller

2.1. The controller responsible for the processing of your personal data is:

Company: Leguard OÜ
Registry code: 17469327
Registered address: Vesivärava tn 50-201, Kesklinna linnaosa, Tallinn, Harju maakond, 10152, Estonia
E-mail: leguard.co@proton.me

2.2. For any questions regarding the processing of your personal data, please contact us at the e-mail address above.

3. Data Provision

3.1. Some personal data is required for us to respond to your inquiry, conclude an agreement or provide the Services. We will indicate which information is required at the time of collection. If you do not provide it, we may be unable to provide some or all of the Services.

3.2. Other information is optional, and choosing not to provide it will not limit your use of the Website.

4. How We Collect Personal Data

We collect personal data:

(a) directly from you, when you contact us, request a proposal, enter into an agreement with us or otherwise communicate with us;

(b) automatically, when you use the Website, through cookies and similar technologies, as described in our Cookie Policy (нужнр вставить ссылку) ;

(c) from third parties and public sources, such as public company registers and sanctions lists, where legally permitted.

5. Categories of Personal Data

We may process the following categories of personal data:

(a) Contact Information: name, e-mail address, phone number and other communication details;

(b) Company and Representation Data: company name, registration number, VAT number, registered address, and the name and position of the person representing the company;

(c) Identity and Verification Data: information and documents required to verify the identity, ownership structure and representatives of our clients;

(d) Engagement Data: information and documents you provide to us in connection with the Services;

(e) Billing Data: invoicing details, payment history and bank account details required for invoicing and payments;

(f) Communication Records: correspondence with us, including e-mails and meeting notes;

(g) Technical Information: IP address, device and browser information, and information about your use of the Website, collected in accordance with our Cookie Policy. (нужнр вставить ссылку)

6. Purposes and Legal Grounds of Processing

We process personal data for the following purposes and on the following legal grounds under Article 6(1) GDPR:

(a) Responding to inquiries: to answer your questions and prepare proposals. (Legal basis: steps taken at your request prior to entering into a contract; legitimate interests)

(b) Service delivery: to conclude and perform agreements and provide the Services. (Legal basis: performance of a contract)

(c) Client verification and sanctions screening: to verify our clients and comply with applicable sanctions requirements. (Legal basis: compliance with a legal obligation; legitimate interests)

(d) Invoicing and accounting: to issue invoices, receive payments and keep accounting records. (Legal basis: performance of a contract; compliance with a legal obligation)

(e) Communication: to communicate with you about the Services and your requests. (Legal basis: performance of a contract; legitimate interests)

(f) Website operation and security: to operate, maintain and protect the Website. (Legal basis: legitimate interests)

(g) Website analytics: to understand how the Website is used and improve it. (Legal basis: consent)

(h) Legal claims: to establish, exercise or defend legal claims. (Legal basis: legitimate interests; compliance with a legal obligation)

7. Data Security

7.1. We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or loss, including:

(a) Encryption of data in transit and, where appropriate, at rest;

(b) Access control, limiting access to personal data to persons who need it to perform their duties;

7.2. If you have any concerns about the security of your data, please contact us.

8. Data Sharing

8.1. We may share personal data with trusted service providers that support our operations, such as IT, hosting, communication, accounting and banking service providers, only to the extent necessary and subject to appropriate confidentiality and data protection obligations.

8.2. We may disclose personal data to competent authorities where required by law.

8.3. We do not sell personal data to third parties.

9. International Data Transfers

Where personal data is transferred outside the European Economic Area, we ensure that such transfer is carried out with appropriate safeguards as required by the GDPR.

10. Data Retention

10.1. We retain personal data only for as long as necessary for the purposes for which it was collected, or for the period required by applicable law, including accounting and tax requirements.

10.2. Data that may be relevant to legal claims is retained until the expiry of the applicable limitation period.

10.3. After the relevant retention period, we securely delete or anonymise personal data.

11. Your Rights

11.1. Subject to applicable law, you have the right to:

(a) Access: request access to your personal data and obtain a copy of it;

(b) Rectification: request the correction of inaccurate or incomplete personal data;

(d) Restriction: request that we restrict the processing of your personal data in certain circumstances;

(e) Objection: object to processing based on our legitimate interests;

(f) Data Portability: receive your personal data in a structured, commonly used and machine-readable format and have it transmitted to another controller where technically feasible;

(g) Withdrawal of Consent: withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

11.2. To exercise your rights, please contact us at leguard.co@proton.me. We may ask you to provide information to verify your identity before processing your request. We will respond within one month of receiving your request.

11.3. You also have the right to lodge a complaint with the competent data protection supervisory authority.

12. Automated Decision-Making

We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

13. Children's Privacy

The Website and the Services are intended for persons aged 18 and over. We do not knowingly collect personal data from persons under the age of 18. If we become aware that such data has been collected, we will delete it without undue delay.

14. Information You Share With Us

When providing information to us in connection with the Services, please share only the information necessary for the relevant purpose. If you provide personal data of other persons, such as your employees or company representatives, you confirm that you are entitled to share it with us and have informed them of this Policy.

15. Changes to This Policy

We may update this Policy from time to time. The updated version will be published on the Website with the date of the latest update. Material changes will be communicated through appropriate channels.

16. Contact

If you have any questions about this Policy or our processing of personal data, please contact us at leguard.co@proton.me.