Data Protection Policy.

At TK Counsel Georgia, we treat your personal and legal data with the highest level of professional confidentiality. This policy outlines our commitment to the secure handling of your information in accordance with Law of Georgia on Personal Data Protection and GDPR principles.

1. Data Collection & Purpose

We collect data strictly necessary for providing legal advisory services, including identification documents, contact details, and case-specific information. This data is used solely for the execution of your legal mandates and to comply with Georgian "Know Your Customer" (KYC) and Anti-Money Laundering (AML) regulations.

2. Secure Storage & Encryption

All digital documents are stored on encrypted, secure servers with restricted access. Physical documents are kept in a secured environment at our Tbilisi headquarters. We utilize industry-standard SSL encryption for data transmitted through our website forms.

3. Data Retention

Personal data is retained only as long as necessary to fulfill the legal purposes for which it was collected or as required by Georgian statute of limitations for legal services. Upon termination of our relationship, data is either securely archived or permanently deleted based on regulatory requirements.

4. Your Rights (Data Subject Rights)

Under the Law of Georgia on Personal Data Protection, you have the right to access, correct, or request the deletion of your personal data. You may also withdraw consent for data processing at any time, subject to legal or contractual obligations.

Response time for requests: We will respond to any Data Subject Access Request (DSAR)—including requests for access, rectification, erasure, or restriction of processing—within 10 (ten) business days of receiving your request, as required by Georgian law. If we need to extend this period due to the complexity or number of requests, we will inform you within the 10-day window and state the reasons.

5. Breach Notification

We register personal data incidents and, where notification is required by law, notify the State Audit Office of Georgia not later than 72 hours after identifying the incident, in accordance with Article 29 of the Law of Georgia on Personal Data Protection. Where the law requires notice to affected individuals, we will provide it without undue delay.

Last Updated: March 2026