Privacy policy

What we collect, why, and what you can do about it.

This policy covers engross.legal and the enquiries you send through it. Client matters are governed by your engagement letter and, where you ask for one, a data processing agreement.

Who is responsible

This website is operated by AndAnd Operations OÜ (Icon Partners), Narva mnt 7-634, Tallinn 10117, Estonia, registry code 16445425 (“Icon”, “we”). Icon is the controller of personal data collected through the site — contact-form submissions, call bookings, analytics and, with your consent, advertising cookies. Icon is established in the European Union and the GDPR applies to it directly.

Once you engage a law firm through Engross, personal data in your matter is handled by that firm as your counsel ([Firm Name, PLLC]) with Icon as its service provider, under the engagement letter and the firm’s professional rules. That processing is described in your engagement letter and on the Security & data page, not here.

What we collect

What you send us. Name, email, company, what you need and your message when you use the contact form or email us; the names of parties you mention so that a conflicts check can be run before any legal work starts. Call bookings. Handled by Calendly under its own privacy notice; we receive your name, email and the slot. Analytics. Plausible Analytics counts page views without cookies and without identifying you; IP addresses are not stored. Advertising cookies. Only if you accept them: tags from Google, Meta and LinkedIn that measure our campaigns and may show you our ads elsewhere (see the Cookie policy). Technical logs. Cloudflare keeps short-term security logs (IP address, request) to run and protect the site.

Why, and on what basis

To answer your enquiry and run a conflicts check — steps at your request before a contract (GDPR Art. 6(1)(b)) and our legitimate interest in operating the desk (Art. 6(1)(f)). To keep the site secure and understand how it is used — legitimate interest. To measure and target advertising — your consent (Art. 6(1)(a)), which you can withdraw at any time from the cookie preferences. We do not sell personal data and we do not use it to make automated decisions about you.

Who receives it

The law firm that takes on your matter. Service providers acting on our instructions: Cloudflare (hosting, contact-form function), Google Workspace (email and document storage), Slack (client channels), Calendly (call booking), Plausible (cookieless analytics). Advertising platforms only where you have consented to their cookies. Authorities where the law requires. Nobody else.

Where it goes

We work from the European Union; the law firms are in the United States, and several providers process data in the US. Transfers from the EEA or UK rely on the EU Standard Contractual Clauses (and the UK Addendum) or on the provider’s participation in the EU–US Data Privacy Framework.

How long we keep it

Enquiries that do not become matters: 24 months from last contact, then deleted. Conflicts-check records: as long as the law firm’s professional rules require. Analytics: aggregated only, no personal data retained. Advertising cookies: per the Cookie policy. Client matters: as set out in the engagement letter.

Your rights

EEA and UK. Access, correction, deletion, restriction, objection, portability, and the right to withdraw consent; you may complain to your supervisory authority (for Icon: the Estonian Data Protection Inspectorate, aki.ee). California and other US states. The right to know what we collect, to delete it, to correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information; advertising cookies may count as “sharing” under California law, and you opt out by choosing Necessary only in the cookie preferences (we also honour the Global Privacy Control signal). We do not discriminate against you for exercising these rights.

To exercise any right, write to hello@engross.legal. We answer within 30 days (45 for California requests, extendable once) and may ask you to confirm your identity.

Children, changes, contact

This site is for businesses and is not directed at anyone under 18. We update this policy when our practices change and show the date below. Questions: hello@engross.legal, or by post to the Icon address above.

Last updated

16 September 2026

Book a contract call