Last updated: 14.09.2026
1. Introduction
Proust Legal (“Proust Legal“, “we“, “our” or “us“) is committed to protecting your privacy and processing personal data in accordance with Regulation (EU) 2016/679 (the “General Data Protection Regulation” or “GDPR”) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data (Loi du 30 juillet 2018 relative à la protection des personnes physiques à l’égard des traitements de données à caractère personnel).
This Privacy Policy explains how Proust Legal collects, uses and protects personal data in the course of its professional activities.
This Privacy Policy applies to:
the provision of our legal services;
communications with clients, prospective clients and other business contacts;
the operation of our website; and
our general business activities.
This Privacy Policy does not apply to cookies and similar technologies used on our website. Information on the use of cookies and similar technologies is provided separately in our Cookies Policy.
Our website does not contain contact forms, user accounts or other interactive features through which visitors submit personal data directly. Personal data may nevertheless be processed where you contact us by email or otherwise communicate with us.
2. Purposes of Processing
Purpose | Categories of Personal Data | Legal Basis (GDPR) | Retention Period |
Provision of legal services | Identification details, contact details, professional information, correspondence, documents provided by clients and any personal data necessary for the provision of legal services | Performance of a contract (Art. 6(1)(b)); compliance with legal obligations (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)) | Duration of the client relationship and thereafter in accordance with applicable legal and professional obligations |
Client relationship management | Contact details, professional information, correspondence and engagement information | Performance of a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) | Duration of the client relationship and thereafter in accordance with applicable legal and professional obligations |
Responding to enquiries | Contact details, correspondence and any information voluntarily provided | Legitimate interests (Art. 6(1)(f)); where steps are taken prior to entering into a contract, Art. 6(1)(b) | Duration of the client relationship and thereafter in accordance with applicable legal and professional obligations |
Compliance with legal and professional obligations | Identity information, client due diligence information, billing records and any information required under applicable laws or professional rules | Compliance with legal obligations (Art. 6(1)(c)) | For the period required by applicable law or professional obligations |
Billing, accounting and administration | Identification details, contact details, billing information, payment records and accounting documentation | Performance of a contract (Art. 6(1)(b)); compliance with legal obligations (Art. 6(1)(c)) | 10 years following the relevant taxable period |
Management of suppliers and professional contacts | Contact details, professional information and correspondence | Legitimate interests (Art. 6(1)(f)); performance of a contract where applicable (Art. 6(1)(b)) | Duration of the business relationship |
Protection of legal rights and compliance with professional obligations | Information necessary to protect the firm’s legitimate interests and comply with applicable professional obligations | Legitimate interests (Art. 6(1)(f)) | For the period necessary to protect the firm’s legitimate interests and comply with applicable legal obligations |
The provision of certain personal data is necessary for Proust Legal to enter into and perform a contract with its clients and, in certain cases, to comply with applicable legal or professional obligations. Where such information is not provided, Proust Legal may be unable to establish or continue the professional relationship or provide the requested legal services.
3. Recipients of Personal Data
Proust Legal treats all client information as confidential and only shares personal data where necessary for the purposes described in this Privacy Policy or where required by law.
In addition to complying with applicable data protection legislation, Proust Legal is bound by the rules of professional secrecy and the ethical obligations applicable to lawyers. Personal data received in the course of providing legal services is treated as strictly confidential and is accessed only by persons who require such information for the performance of their professional duties or where disclosure is required by law or necessary for the provision of legal services.
Depending on the circumstances, personal data may be disclosed to:
courts, regulators, supervisory authorities or public authorities where required by law;
opposing counsel or other parties where necessary in connection with the provision of legal services;
professional advisers (including accountants, auditors and insurers);
IT service providers acting on our behalf;
document management, cloud hosting and practice management providers; and
other service providers engaged in the operation of our business.
Our principal service providers include:
Hostinger, which hosts our website infrastructure within the European Union. Further information is available in Hostinger’s Terms of Service: https://www.hostinger.com/legal/terms-of-service
Clio, our legal practice management platform, which hosts client data within Ireland. Further information is available in Clio’s Terms of Service: https://www.clio.com/legal/terms-of-service/
All processors acting on behalf of Proust Legal are subject to data processing agreements that comply with Article 28 GDPR.
Proust Legal does not sell, rent or otherwise disclose personal data for commercial purposes.
4. Storage and Transfers Outside the European Union
Proust Legal stores personal data within the European Union.
Our website is hosted by Hostinger on infrastructure located within the European Union.
Client files and legal practice management data are hosted by Clio in Ireland.
Proust Legal does not intentionally transfer personal data outside the European Economic Area (EEA) in connection with the activities described in this Privacy Policy.
Should an international transfer become necessary in the future, Proust Legal will ensure that appropriate safeguards are implemented in accordance with Chapter V of the GDPR, including, where applicable, an adequacy decision adopted by the European Commission or the use of the European Commission’s Standard Contractual Clauses.
5. Data Subject Rights
Subject to the conditions laid down in the GDPR, you have the right to:
request access to your personal data;
request the rectification of inaccurate or incomplete personal data;
request the erasure of your personal data in the circumstances provided by law;
request the restriction of processing;
object to processing based on legitimate interests;
receive your personal data in a structured, commonly used and machine-readable format where the right to data portability applies; and
withdraw your consent at any time where processing is based on consent.
Requests concerning the exercise of your rights may be addressed to the contact details provided in Section 9 below.
6. Security
Proust Legal implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures include access controls, secure cloud infrastructure, encryption where appropriate, confidentiality obligations, internal policies and organisational procedures designed to safeguard client information and ensure compliance with applicable data protection legislation.
7. Complaints
If you believe that your personal data has been processed in breach of applicable data protection laws, we encourage you to contact us first so that we can address your concerns.
You also have the right to lodge a complaint with the competent supervisory authority.
For individuals in Belgium, the competent supervisory authority is the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit).
If you are located in another Member State of the European Union, you may lodge a complaint with the supervisory authority of your habitual residence, place of work or the place of the alleged infringement. A list of all EU supervisory authorities is available on the website of the European Data Protection Board (EDPB).
8. Changes to this Privacy Policy
Proust Legal may update this Privacy Policy from time to time to reflect changes in applicable law, our professional activities or our data processing practices.
The latest version of this Privacy Policy will always be published on our website together with the date of the most recent update.
9. Data Controller
The data controller responsible for the processing of personal data described in this Privacy Policy is:
Olivier Proust SRL
17, rue Marcel Marien
1030 Brussels
Belgium
Company registration: BE08.34.390.436
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us by email at: dpo@proustlegal.com