Aurum Privacy Notice
Last updated: March 11, 2026
This Privacy Notice explains how Aurum collects, uses, stores, and otherwise processes personal data when you use our website at https://aurum.law/ (hereinafter the "website") and when you otherwise interact with us. In relation to the personal data collected from you or provided by you, Aurum acts as the data controller.
Who we are?
Aurum Law Firm, LLC (hereinafter “Aurum” or “we”). If you have any questions about our Privacy Notice or you would like to exercise your data protection rights, please do not hesitate to contact us using the details below.
Contact us:
You can always get in touch with us through the contact means provided on the Contacts page of this website, or by submitting your inquiry using the website’s Get in Touch form.
How and what data do we collect?
Aurum collects and processes data:
When you reach us via email or the enquiry form available on the website. We collect personal data when you contact us by email or through the “Get in Touch” form available on our website. This may include your name, phone number, email address, country, company name, and position. You may also provide additional information in your email or in the free-text field of the enquiry form.
When you subscribe to our newsletters, digests, and marketing communications. We collect personal data when you subscribe to our newsletters, digests, or other marketing communications. This may include your name, position, and email address.
When you contact us through enquiry forms made available other than on our website. From time to time, Aurum may make enquiry forms available through other channels. Where you contact us through such forms, we may collect your name, phone number, email address, country, company name, and position. You may also provide additional information in the free-text field of the form or in related communications. You should always verify that any such enquiry form is genuinely provided by, or on behalf of, Aurum.
When you contact us through LinkedIn or other social media or communication channels. We may collect and process personal data where you contact us through LinkedIn or other social media platforms, or otherwise share your contact details with us through such channels. This may include your name, email address, phone number, company, position, country, and any other information you choose to provide. We may use this information to respond to your enquiry, manage our communications with you, maintain relevant records in our internal systems and CRM, and, where permitted by applicable law, send you relevant updates or marketing communications. You may opt out of marketing communications at any time.
When you use or view our website, via your browser’s cookies. When you access and browse our website, we may collect information from you automatically through cookies. Cookies are text files containing small amounts of information which are downloaded to your device when you visit our website. Cookies allow our website to track visits, activity of the website users and recognise users’ preferences as previously chosen by them when they return to the website.
There are ‘session’ and ‘persistent’ cookies. Session cookies are permanently deleted as soon as you close your browser. Persistent cookies are stored until their expiration date and then removed automatically by your browser or until you delete them manually.
Some of the cookies we use are strictly necessary for our website to function properly. As such, we do not ask your consent to place them. To use those cookies which are not strictly necessary, we will always ask your consent.
Most web browsers automatically accept cookies but provide controls that allow you to block or delete them. Please refer to your browser’s privacy or help documentation to find instructions for blocking or deleting cookies in case you want to block or delete them.
How will we use your data?
We will use your personal data in order to contact you back, i.e. to take steps to discuss your matter or enter into a contract with you. Further, if we enter into any relationship with you, we will process your data on the basis of performance of the relevant contract.
We may process certain data on the basis of our legal obligations, if it is necessary to comply with legal requirements, or our legitimate interests, but only where such interests prevail over your interests, rights, and freedoms. In addition, we may process certain data collected via cookies upon your consent.
We do not use the data you provide us to make any automated decisions.
We may transfer your data to other entities of our group, which may include cross-border data transfer; otherwise, we do not transfer, share or sell your information to any third party, unless it is necessary for the performance of the contract with you or is required by the applicable legislation.
Where you subscribe to our newsletters, digests, or other marketing communications, your email address may be transferred to Brevo for email automation and related processing in accordance with Brevo's Privacy Policy, and may also be shared with other third-party service providers engaged by us to automate, support, or facilitate such communications.
Certain personal data may be transferred to and processed by Pipedrive, which we use as a customer relationship management (CRM) system to manage enquiries, communications, and our relationships with clients and prospective clients. Pipedrive processes such data in a compliant manner, in accordance with its applicable Privacy Notice and data protection terms.
Newsletters & direct marketing communications
We may process your personal data to send you newsletters, digests, insights, legal updates, event invitations, and other marketing or business development communications about Aurum, its group of companies, and their relevant services, by email or through other appropriate communication channels, where permitted by applicable law. This may include personal data that you provide when contacting us, subscribing to updates, interacting with us through LinkedIn or other social media, attending our events, or otherwise sharing your contact details with us. Where required by law, we will send such communications only with your consent. In other cases, we may rely on our legitimate interests to promote our services and maintain professional relationships, subject always to your rights and applicable law. You have the absolute right to object to the use of your personal data for direct marketing at any time, and to unsubscribe from marketing communications by using the unsubscribe link included in all relevant communication or by contacting us directly. We may retain limited suppression information in order to respect your opt-out request and ensure that you do not receive further marketing communications from us in error.
How long and where do we store your data?
We store personal data securely using cloud infrastructure provided by Google and other service providers engaged by us from time to time. We retain personal data only for as long as is necessary for the purposes for which it was collected, in accordance with applicable data protection laws and our internal retention practices.
If you contact us by email or through an enquiry form and we do not enter into a client relationship or other contract with you, we will generally retain your enquiry and related correspondence for up to 3 years from our last meaningful interaction with you, unless a longer retention period is required or permitted by law. This retention period also applies to personal data shared with us through LinkedIn, other social media platforms, or similar communication channels where no client or contractual relationship is established.
If you subscribe to our newsletter, digest, or other marketing communications, we will generally retain your subscription data for as long as you remain subscribed, subject to periodic review. Where a subscriber is inactive for an extended period, we may delete the data or take steps to confirm whether the subscriber wishes to continue receiving such communications. If you unsubscribe from marketing communications or object to direct marketing, we may retain limited information about you on a suppression list in order to record and respect your preferences and ensure that we do not contact you again in error.
Where we enter into a contract or client relationship with you, we may retain your personal data for longer, as necessary for the performance of that contract, the performance of assignment, work on a matter, compliance with legal or regulatory obligations, or our legitimate business record-keeping requirements.
What are your data protection rights?
Aurum would like to make sure you are fully aware of all of your data protection rights. You have the following rights:
The right to access — you have the right to obtain from us confirmation as to whether or not your personal data being processed, information about the purposes of such processing, the categories of personal data concerned and to request Aurum for copies of your personal data.
The right to rectification — you have the right to request Aurum to correct any information you believe is inaccurate. You also have the right to request us to complete the information you believe is incomplete.
The right to erasure (“right to be forgotten”) — you have the right to request Aurum to erase your personal data, under certain circumstances, such as: personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw consent on which the processing is based; there is no other legal ground for the processing.
The right to restrict processing — you have the right to request Aurum to restrict the processing of your personal data, under certain conditions.
The right to object to processing — you have the right to object, on grounds relating to your particular situation, to our processing of your personal data where we rely on legitimate interests or process your data for certain other lawful purposes, subject to applicable law. In such cases, we will stop the processing unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is required for the establishment, exercise or defence of legal claims.
The right to object to direct marketing — where we process your personal data for direct marketing purposes, you have the right to object at any time to such processing. If you object, we will stop processing your personal data for direct marketing purposes. You may also unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us directly.
The right to data portability — you have the right to request that Aurum transfers the data that we have collected to another organisation, or directly to you, under certain conditions.
Aurum as a ‘data controller’ shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed and shall inform you about those recipients if you make a request.
If you make a data protection rights request, we will have one month to respond to such request.
Privacy Notices of other websites
Aurum’s website contains links to other websites. Our Privacy Notice applies only to our website, so if you follow a link to another website, you should read their privacy notice to learn how they process your data.
Updates to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our data processing practices, legal or regulatory requirements, or the operation of our website and services. Any updated version will be published on this page with updated "Last updated" date, and we encourage you to review it periodically.