Privacy & Data Protection Notice

Last Updated: 19 September 2026

This Privacy & Data Protection Notice (“Privacy Notice”) explains how GRANDLIGA INTERNATIONAL LAW FIRM LLC (“Grandliga”, “we”, “us”, or “our”) collects, uses, stores, discloses and otherwise processes personal data in connection with our websites, enquiries, legal and debt recovery services, litigation, arbitration, enforcement, asset tracing, professional communications and related business activities.

Grandliga provides professional services internationally. Accordingly, personal data may be processed in more than one jurisdiction and may be subject to different privacy and data protection laws.

This Privacy Notice establishes our global privacy framework. Additional or supplementary notices may apply to particular categories of individuals, services or jurisdictions. Where applicable, such supplementary notices form part of our privacy framework and should be read together with this Privacy Notice.

---

1. Who We Are

The principal data controller is:

GRANDLIGA INTERNATIONAL LAW FIRM LLC
8 The Green, Ste A
Dover, Delaware 19901
United States of America

Privacy Contact:
[email protected]

Grandliga provides international legal, debt recovery, dispute resolution, litigation, arbitration, enforcement, asset tracing and related professional services.

European Union Office

GRANDLIGA INTERNATIONAL LAW FIRM LLC
Via Umbria 8A
51016 Montecatini Terme (PT)
Italy

Grandliga operates in the European Union through a local professional presence acting under the Grandliga brand. This does not constitute a separately incorporated Grandliga entity.

United Kingdom Office

GRANDLIGA INTERNATIONAL LAW FIRM LLC
132 Lewisham High Street, 1st Floor
London SE13 6EE
United Kingdom

Grandliga operates in the United Kingdom through a local professional presence acting under the Grandliga brand. This does not constitute a separately incorporated Grandliga entity.

---

2. Scope of This Privacy Notice

This Privacy Notice may apply to personal data relating to:

• visitors to our websites;

• persons who contact Grandliga or submit enquiries;

• prospective, current and former clients;

• representatives, directors, employees and beneficial owners of corporate clients;

• creditors and debtors;

• counterparties and their representatives;

• directors, shareholders and beneficial owners of counterparties;

• witnesses, experts, consultants and other persons involved in legal matters;

• parties and participants in litigation, arbitration, insolvency or enforcement proceedings;

• persons identified in contracts, correspondence, evidence or case materials;

• professional partners, contractors and service providers;

• other individuals whose personal data is lawfully processed in connection with our professional activities.

Where Grandliga obtains information concerning debtors, counterparties or other third parties from clients or other sources, additional information is available in our Debtor & Third-Party Privacy Notice.

---

3. Personal Data We Process

The personal data we process depends on the nature of the relationship, enquiry or professional matter.

It may include the following categories.

Identification and Contact Data

This may include:

• name and surname;

• business or professional name;

• postal address;

• telephone number;

• email address;

• job title;

• professional position;

• nationality or country of residence where relevant;

• identity-document information where reasonably necessary.

Corporate and Professional Data

This may include information concerning:

• legal entities;

• directors and officers;

• shareholders;

• beneficial owners;

• authorised representatives;

• business interests;

• corporate ownership and control;

• professional and commercial relationships.

Legal Matter and Case Data

This may include:

• identity of clients, creditors, debtors and counterparties;

• nature and amount of claims or debts;

• contractual relationships;

• invoices;

• payment information;

• correspondence;

• facts and circumstances of disputes;

• settlement negotiations;

• evidence;

• court documents;

• arbitration materials;

• judgments and arbitral awards;

• enforcement and insolvency information;

• information relevant to asset tracing or recovery.

Financial and Transaction Data

This may include:

• amounts claimed or paid;

• invoices and payment records;

• billing data;

• banking or payment information where necessary;

• financial information relevant to legal, recovery or enforcement matters.

Website and Technical Data

This may include:

• IP address;

• browser and device information;

• operating system;

• requested pages and URLs;

• access date and time;

• technical request information;

• security events;

• authentication data;

• cookie and privacy preferences.

Communications

We may process communications received or exchanged through:

• email;

• telephone;

• website forms;

• messaging services;

• online meeting or video-conferencing platforms;

• postal communications;

• other professional communication channels.

---

4. Sensitive, Special Category and Criminal-Offence Data

Legal, debt recovery, litigation and enforcement matters may occasionally contain information that receives enhanced protection under applicable privacy laws.

Depending on the circumstances, this may include information concerning:

• health;

• racial or ethnic origin;

• religious or philosophical beliefs;

• political opinions;

• trade-union membership;

• biometric information;

• sexual life or sexual orientation;

• alleged or actual criminal offences, convictions or proceedings;

• other legally protected categories of information.

Grandliga does not routinely request such information unless it is relevant and reasonably necessary for a professional matter.

Where such information is processed, we process it only where permitted by applicable law, including where necessary for the establishment, exercise or defence of legal claims, compliance with legal obligations or another recognised lawful purpose.

---

5. How We Obtain Personal Data

We may obtain personal data:

• directly from the individual concerned;

• from clients and prospective clients;

• from creditors;

• from authorised representatives;

• from counterparties;

• from lawyers and professional advisers;

• through documents submitted to Grandliga;

• through correspondence and communications;

• from courts and arbitral tribunals;

• from enforcement, insolvency and public authorities;

• from public corporate, property, court or other official registers;

• from publicly available sources;

• from lawful professional databases;

• from local legal professionals;

• from debt recovery and enforcement professionals;

• from investigators and asset-tracing professionals where lawful;

• from experts, consultants and translators;

• from other lawful sources relevant to a professional matter.

Accordingly, Grandliga may process information concerning an individual even where that individual has not provided the information directly to us.

For more specific information concerning data obtained about debtors, counterparties and other persons who are not necessarily our clients, please see our Debtor & Third-Party Privacy Notice.

---

6. Purposes for Which We Process Personal Data

We may process personal data for purposes including:

Enquiries and Prospective Matters

• responding to enquiries;

• assessing proposed matters;

• communicating with prospective clients;

• performing preliminary legal or recovery assessments;

• conducting conflict or eligibility checks;

• determining whether Grandliga can accept an engagement.

Professional Services

• entering into and performing client engagements;

• providing legal advice;

• providing debt recovery services;

• contacting and negotiating with debtors and counterparties;

• conducting lawful asset tracing;

• coordinating local professionals;

• conducting litigation or arbitration;

• enforcing judgments or arbitral awards;

• participating in insolvency proceedings;

• managing evidence and case materials;

• establishing, exercising or defending legal rights.

Client and Matter Administration

• opening and managing matters;

• maintaining professional records;

• administering client agreements and individual service orders;

• invoicing;

• processing payments;

• accounting;

• maintaining appropriate records of completed matters.

Compliance and Risk Management

Where applicable:

• verifying identity;

• carrying out compliance and sanctions checks;

• preventing fraud or abuse;

• complying with legal and professional obligations;

• responding to lawful requests from courts, regulators or authorities.

Security

• protecting our websites and information systems;

• preventing unauthorised access;

• detecting malicious or automated activity;

• protecting website forms;

• preventing fraud, spam and cyberattacks;

• investigating security incidents.

Legal Claims

• establishing and protecting legal rights;

• responding to complaints;

• defending Grandliga or its clients against claims;

• maintaining evidence necessary for disputes or proceedings.

Professional Communications and Marketing

Where permitted by applicable law:

• maintaining professional relationships;

• providing legal or commercial updates;

• informing existing or prospective clients about relevant Grandliga services.

Where consent is required by applicable law, marketing communications will only be sent on the basis of appropriate consent.

---

7. Legal Bases for Processing

Where the EU GDPR, UK GDPR or another law requiring identification of a lawful basis applies, Grandliga may rely on one or more of the following grounds.

Contract and Pre-Contractual Measures

Processing may be necessary to:

• take steps at the request of a prospective client before entering into an agreement; or

• perform an agreement with a client.

Legitimate Interests

We may process personal data where reasonably necessary for legitimate interests pursued by Grandliga, a client or another person, provided applicable privacy rights do not override those interests.

Relevant legitimate interests may include:

• providing professional services;

• recovering debts and claims;

• protecting the rights of clients;

• locating counterparties or assets lawfully;

• administering disputes;

• conducting conflict checks;

• preventing fraud and abuse;

• securing information systems;

• maintaining professional and matter records;

• establishing, exercising or defending legal claims.

Legal Obligations

Processing may be necessary to comply with:

• legal requirements;

• tax and accounting obligations;

• court orders;

• regulatory requirements;

• professional obligations;

• other mandatory legal duties.

Legal Claims and Protected Data

Sensitive or otherwise specially protected personal data may be processed where necessary for the establishment, exercise or defence of legal claims or where another condition permitted by applicable law applies.

Consent

We rely on consent only where it is an appropriate legal basis.

Where processing is based on consent, consent may be withdrawn in accordance with applicable law. Withdrawal does not affect processing lawfully carried out before withdrawal.

The submission of an enquiry, document or legal matter does not mean that all subsequent processing is based on consent.

---

8. Debtors, Counterparties and Other Third Parties

Grandliga’s professional activities frequently require us to process information concerning persons who are not our clients.

This may include debtors, counterparties, company directors, beneficial owners, representatives, witnesses and other persons relevant to a legal or debt recovery matter.

We may process such information where reasonably necessary for:

• assessing or verifying a claim;

• identifying or locating a person or entity;

• communicating concerning a claim or dispute;

• negotiating settlement;

• recovering a debt;

• identifying or locating assets;

• conducting litigation or arbitration;

• enforcing judgments or awards;

• conducting insolvency proceedings;

• establishing, exercising or defending legal rights;

• complying with legal or professional obligations.

More specific information regarding this type of processing is available in our Debtor & Third-Party Privacy Notice.

Legal or professional confidentiality, privilege, legal-claim protections and statutory exemptions may affect when and how privacy information is provided.

---

9. Submitting a Case or Documents to Grandliga

Information submitted through our website or otherwise provided to us may contain personal data relating both to the person submitting the information and to third parties.

When providing information or documents, you should ensure that:

• the information is relevant to the requested service;

• you are lawfully entitled to provide it to Grandliga;

• unnecessary personal data is not included;

• sensitive information is provided only where reasonably necessary.

Grandliga may request additional documents or information where necessary to assess or conduct a matter.

Temporary Website Uploads

Files uploaded through our website may be temporarily stored on our website infrastructure for the technical purpose of receiving and transmitting the submission.

Temporary website copies are configured for automatic deletion shortly after transmission.

Documents received by Grandliga may subsequently form part of an enquiry or professional case file and may therefore be retained in accordance with the retention rules set out below.

---

10. Data Minimisation

Please provide only information reasonably relevant to the matter concerned.

Unless specifically requested or necessary, please avoid providing:

• passwords;

• full payment-card credentials;

• unnecessary identity documents;

• unrelated medical information;

• unrelated criminal information;

• unnecessary information concerning minors;

• excessive personal information concerning third parties.

We may delete, return, redact or decline to use information that is unnecessary for the relevant purpose.

---

11. Who We May Share Personal Data With

Where reasonably necessary and lawful, we may disclose personal data to categories of recipients including:

• lawyers and law firms;

• debt recovery professionals;

• local professional representatives;

• enforcement officers and bailiffs;

• insolvency professionals;

• lawful investigators and asset-tracing specialists;

• experts and consultants;

• translators and interpreters;

• courts and arbitral tribunals;

• arbitral institutions;

• public authorities and regulators;

• banks and payment service providers;

• accountants, auditors and professional advisers;

• technology, cloud-storage, email and communication providers;

• cybersecurity and website-security providers;

• other service providers necessary for the relevant matter.

We do not publish a list of all individual members of our professional network or contractors.

Depending on the particular relationship and applicable law, recipients may act as:

• processors acting on our instructions;

• independent controllers;

• joint controllers;

• professional recipients subject to their own legal and confidentiality obligations.

Case-related access is limited, where practicable, on a need-to-know basis.

---

12. Professional Confidentiality and Privilege

Information entrusted to Grandliga may be subject to:

• contractual confidentiality;

• professional secrecy;

• legal professional privilege;

• litigation privilege;

• statutory confidentiality obligations;

• other protections available under applicable law.

We take reasonable steps to restrict access to personal data to persons who require such access for the relevant professional, administrative, compliance, security or technical purpose.

Nothing in this Privacy Notice is intended to waive any privilege, confidentiality protection or professional secrecy applicable to Grandliga, its clients or any professional involved in a matter.

---

13. International Data Transfers

Grandliga operates internationally.

Personal data may therefore be processed in the United States, European Union, United Kingdom and other jurisdictions relevant to a particular professional matter or service provider.

Where applicable data protection law restricts international transfers, Grandliga uses an appropriate legal mechanism where required.

Such mechanisms may include:

• adequacy decisions;

• Standard Contractual Clauses;

• UK-approved transfer mechanisms;

• appropriate contractual safeguards;

• transfers permitted for the establishment, exercise or defence of legal claims;

• other lawful transfer mechanisms recognised by applicable law.

We do not publicly disclose detailed technical infrastructure or security architecture where such disclosure is unnecessary and could create security risks.

---

14. Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purposes, subject to legal, contractual, professional, accounting, tax, limitation and legal-claim requirements.

Enquiries That Do Not Become Active Matters

Personal data relating to an enquiry that does not result in an engagement is generally retained for up to 30 days after the enquiry is concluded.

A longer period may apply where reasonably necessary for:

• security;

• fraud prevention;

• a complaint;

• a legal claim;

• a legal or regulatory obligation.

Client Agreements

Grandliga generally enters into a continuing framework agreement with a client under which individual services or matters may subsequently be ordered.

The framework agreement and necessary client identification information are retained for the duration of the client relationship.

Following termination of the framework agreement, relevant client agreement and identification records are generally retained for three years, unless a longer period is required or reasonably justified by:

• applicable law;

• limitation periods;

• legal claims;

• tax or accounting requirements;

• regulatory or professional obligations.

Active Matters

During an active matter, we retain the information reasonably necessary to perform the relevant professional services.

Closed Matters

A matter is treated as closed when Grandliga and the client have concluded that no further active work is required, including where:

• recovery has been completed;

• litigation or arbitration has concluded;

• further recovery or enforcement is considered impracticable;

• an enquiry or assignment has been completed;

• the client and Grandliga otherwise agree to close the matter.

Working case materials that are no longer required are deleted or securely destroyed following closure, subject to applicable legal, professional, evidentiary, accounting and legal-claim requirements.

Limited Archival Matter Records

Grandliga may retain a limited archival record of a completed matter for an extended period, subject to periodic review.

Such a record may include:

• identity of the client;

• identity of the debtor or counterparty;

• responsible or referring professional;

• general nature of the matter;

• amount or value involved;

• status or outcome;

• relevant dates.

Such limited records may be retained for:

• conflict checks;

• professional history;

• relationship management;

• identification of prior dealings;

• protection of Grandliga’s or its clients’ legal rights.

Evidence and Supporting Documents

Selected documents evidencing a debt, transaction, judgment, settlement or other material matter may be retained beyond closure where reasonably necessary for enforcement, legal claims, professional obligations or another lawful purpose.

Accounting and Tax Records

Accounting, tax, billing and payment records are retained for the periods required under applicable United States federal and Delaware law and for any longer period reasonably necessary to substantiate financial transactions, tax positions or legal claims.

Telephone and Online Call Recordings

Recordings relating to enquiries that do not become active matters are generally deleted within 30 days.

Recordings relating to active matters are deleted when no longer reasonably necessary and ordinarily no later than 30 days after closure of the relevant matter, unless a recording must be retained for:

• evidence;

• a complaint;

• regulatory compliance;

• a legal claim;

• another lawful purpose.

Temporary Website Files

Temporary technical copies of files uploaded through the website are configured for automatic deletion shortly after processing and transmission.

Security Logs

Security and technical logs are retained only for periods reasonably necessary for cybersecurity, troubleshooting, fraud prevention and incident investigation.

Certain live website-security records are currently configured for retention for up to approximately 30 days.

---

15. Information Security

We use organisational and technical measures intended to protect personal data against:

• unauthorised access;

• loss;

• misuse;

• alteration;

• unlawful disclosure;

• destruction;

• malicious software;

• cyberattacks.

Depending on the system and processing activity, these measures may include:

• access restrictions;

• authentication controls;

• firewalls;

• security monitoring;

• anti-spam and bot protection;

• access and security logging;

• secure communication and storage systems;

• backup and recovery mechanisms;

• professional and contractual confidentiality obligations.

No information system can be guaranteed to be completely secure. We therefore review safeguards according to the nature, sensitivity and risks associated with the relevant information.

---

16. Website Security and Technical Information

When you use our website, technical and security systems may process information such as:

• IP address;

• browser and device information;

• user-agent;

• requested URL;

• time of access;

• security and authentication events.

This information may be processed to:

• protect website availability;

• identify malicious traffic;

• prevent spam and automated abuse;

• protect online forms;

• detect cyberattacks;

• investigate security incidents.

Third-party technical and cybersecurity providers may support these activities where necessary.

---

17. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Strictly Necessary Technologies

These may be necessary for:

• website functionality;

• security;

• form protection;

• fraud prevention;

• language preferences;

• consent preferences;

• technical session functions.

Where permitted by applicable law, strictly necessary technologies may operate without optional consent.

Analytics and Marketing Technologies

Analytics, advertising or similar optional technologies may be used from time to time.

Where applicable law requires prior consent, such technologies will not be activated until the relevant consent has been obtained.

Users can manage available cookie preferences through the cookie settings provided on the website.

---

18. Telephone and Online Communications

In certain countries and circumstances, telephone or online communications with Grandliga may be recorded where permitted by applicable law.

Not all communications are recorded.

Where recording is used, purposes may include:

• documenting instructions or communications;

• maintaining an accurate record of a professional interaction;

• quality assurance;

• training;

• security;

• compliance;

• dispute resolution;

• establishment, exercise or defence of legal claims.

Where applicable law requires notice or consent before recording, an appropriate notice or consent mechanism will be used.

---

19. Direct Marketing

Communications relating to an enquiry, existing client relationship or active professional matter are distinct from promotional marketing.

Where Grandliga sends direct marketing communications:

• we do so only where permitted by applicable law;

• we obtain consent where required;

• recipients may use the unsubscribe or other available opt-out mechanism.

Opting out of marketing does not prevent Grandliga from sending necessary contractual, professional, legal, security or matter-related communications.

Grandliga does not use confidential client case materials for targeted advertising.

---

20. Automated Decision-Making

Grandliga does not ordinarily make decisions producing legal or similarly significant effects on individuals solely by automated processing without meaningful human involvement as part of its legal or debt recovery services.

Technology may be used to assist with:

• search;

• classification;

• administration;

• document handling;

• security;

• analysis.

Where applicable law requires additional information or rights in connection with automated decision-making or profiling, such information and rights will be provided.

---

21. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

• obtain confirmation of whether we process your personal data;

• request access;

• request correction;

• request deletion;

• request restriction of processing;

• object to certain processing;

• obtain portability of certain data;

• withdraw consent where processing is based on consent;

• opt out of certain marketing;

• exercise applicable rights concerning targeted advertising, sale, sharing or profiling;

• complain to an applicable supervisory or privacy authority.

These rights are subject to applicable legal limitations and exemptions.

For example, access or deletion may be restricted where information is subject to:

• legal professional privilege;

• professional secrecy;

• confidentiality obligations;

• legal claims;

• court proceedings;

• legal or regulatory retention requirements;

• rights of other persons.

We may take reasonable steps to verify identity and authority before responding to a request.

Privacy requests should be sent to:

[email protected]

Please identify the request as a privacy or personal-data request and provide sufficient information to allow us to locate the relevant records.

---

22. European Union and EEA

Where the EU GDPR applies, individuals may have rights including:

• access;

• rectification;

• erasure;

• restriction;

• portability;

• objection;

• withdrawal of consent;

• complaint to a competent supervisory authority.

Where processing is based on legitimate interests, individuals may have the right to object on grounds relating to their particular situation.

Where personal data has been obtained from another person or source, Grandliga will provide applicable transparency information subject to lawful exceptions, including those relating to professional confidentiality, privilege and legal claims.

Additional information concerning processing of data relating to debtors, counterparties and other third parties is available in our Debtor & Third-Party Privacy Notice.

Grandliga maintains an operational professional presence in the European Union at:

GRANDLIGA INTERNATIONAL LAW FIRM LLC
Via Umbria 8A
51016 Montecatini Terme (PT)
Italy

Privacy enquiries may be submitted centrally to:

[email protected]

---

23. United Kingdom

Where UK data protection law applies, individuals may have applicable rights including:

• access;

• rectification;

• erasure;

• restriction;

• portability;

• objection;

• withdrawal of consent;

• rights relating to qualifying automated decisions;

• complaint to the Information Commissioner’s Office.

Additional information concerning processing of data relating to debtors, counterparties and other third parties is available in our Debtor & Third-Party Privacy Notice.

Grandliga maintains an operational professional presence in the United Kingdom at:

GRANDLIGA INTERNATIONAL LAW FIRM LLC
132 Lewisham High Street, 1st Floor
London SE13 6EE
United Kingdom

Privacy enquiries may be submitted to:

[email protected]

---

24. United States

Privacy rights in the United States vary by state and by the nature and scale of the relevant processing.

Where an applicable U.S. state privacy law applies to Grandliga and the relevant processing, individuals may have rights including, as applicable:

• access;

• confirmation of processing;

• correction;

• deletion;

• portability;

• information regarding categories of third parties;

• opt-out of qualifying targeted advertising;

• opt-out of qualifying sale or sharing;

• rights concerning certain profiling;

• use of an authorised agent;

• appeal of certain privacy-request decisions.

Delaware

Where the Delaware Personal Data Privacy Act applies, Grandliga will provide the rights and procedures required by that law.

If we decline to take action on an applicable Delaware privacy request, you may appeal the decision by replying to the decision or by contacting [email protected] and clearly identifying your communication as a privacy appeal.

Grandliga does not sell confidential client or case-file information for monetary consideration and does not use confidential case materials for targeted advertising.

California

Where the California Consumer Privacy Act, as amended, applies, California residents may have additional statutory rights.

Grandliga does not sell confidential client or case-file information for monetary consideration.

Grandliga does not use confidential case-file information for cross-context behavioural advertising.

If website technologies are introduced that constitute a sale or sharing under California law, Grandliga will provide any required disclosure and opt-out mechanism.

---

25. Canada

Where applicable Canadian privacy legislation applies, Grandliga processes personal information consistently with relevant federal or provincial requirements.

Depending on applicable law, this may include principles concerning:

• accountability;

• identified purposes;

• consent where required;

• limiting collection;

• limiting use, disclosure and retention;

• accuracy;

• safeguards;

• openness;

• access and correction;

• complaints.

Canadian privacy enquiries may be sent to:

[email protected]

---

26. Australia

Where the Australian Privacy Act 1988 and Australian Privacy Principles apply, Grandliga will process personal information in accordance with applicable Australian requirements.

These may concern:

• open and transparent privacy management;

• collection;

• notification;

• use and disclosure;

• direct marketing;

• overseas disclosure;

• security;

• access;

• correction;

• complaints.

Due to the international nature of Grandliga’s services, personal information may be disclosed or made available to recipients in different countries depending on the jurisdiction of the client, debtor, counterparty, professional adviser, proceeding or enforcement activity concerned.

It may therefore not always be practicable to identify every potential destination country in advance.

Australian privacy enquiries or complaints may be submitted to:

[email protected]

---

27. Switzerland

Where the Swiss Federal Act on Data Protection applies, Grandliga processes personal data in accordance with applicable Swiss transparency, security, individual-rights and international-transfer requirements.

Privacy enquiries relating to Switzerland may be submitted to:

[email protected]

---

28. Other Jurisdictions

Grandliga operates internationally and may conduct matters involving countries not specifically identified in this Privacy Notice.

Where another mandatory privacy or data protection law applies, Grandliga will apply any additional rights, restrictions or obligations required by that law.

Nothing in this Privacy Notice is intended to limit a mandatory privacy right that cannot lawfully be excluded or restricted.

---

29. Children’s Personal Data

Grandliga’s website and professional services are not directed to children for independent commercial use.

However, information concerning minors may occasionally appear in legal, enforcement, damages, inheritance, corporate or other professional matters.

Where such information is relevant to a legitimate matter, it will be processed only as reasonably necessary and in accordance with applicable law.

Please do not submit information concerning a minor unless it is reasonably relevant to the relevant matter and you are lawfully entitled to provide it.

---

30. Privacy Complaints

If you have concerns about the way Grandliga processes personal data, please contact us at:

[email protected]

Please provide sufficient information to identify:

• yourself;

• the relevant interaction or matter;

• the privacy concern;

• the action you would like us to consider.

We may request additional information where reasonably necessary to verify identity or investigate the matter.

Where applicable law gives you the right to complain to a data protection or privacy authority, you retain that right.

---

31. Supplementary Privacy Notices

Certain processing activities may require more specific privacy information.

Grandliga may therefore publish or provide supplementary privacy notices, including notices relating to:

• debtors and counterparties;

• other third parties whose information is obtained indirectly;

• particular services;

• particular jurisdictions;

• specific processing activities.

Our current supplementary notice for debtors, counterparties and other relevant third parties is available here:

Debtor & Third-Party Privacy Notice

Any supplementary privacy notice should be read together with this Privacy Notice.

Where a supplementary notice addresses a specific processing activity in greater detail, that supplementary notice applies to that activity together with this Privacy Notice.

---

32. Changes to This Privacy Notice

We may update this Privacy Notice where:

• applicable law changes;

• our services change;

• processing activities change;

• new technologies are introduced;

• our professional or operational structure changes.

The latest version will be published on our website together with the date of the most recent update.

Where applicable law requires specific notice or fresh consent for a material change, Grandliga will provide such notice or obtain such consent.

Continued use of our website will not by itself be treated as consent where applicable law requires affirmative consent.

---

33. Contact Details

For privacy and personal-data enquiries:

GRANDLIGA INTERNATIONAL LAW FIRM LLC
8 The Green, Ste A
Dover, Delaware 19901
United States of America

Email: [email protected]

European Union Office

GRANDLIGA INTERNATIONAL LAW FIRM LLC
Via Umbria 8A
51016 Montecatini Terme (PT)
Italy

United Kingdom Office

GRANDLIGA INTERNATIONAL LAW FIRM LLC
132 Lewisham High Street, 1st Floor
London SE13 6EE
United Kingdom