Last updated: June 2026

Privacy Policy

This Privacy Policy explains how Terziolu & Partners collects, uses, stores, shares and protects personal data in connection with this website, our communications, enquiries, publications, events and professional services.

Terziolu & Partners takes privacy, confidentiality and professional responsibility seriously. We aim to process personal data lawfully, fairly, transparently and only where necessary for legitimate professional, legal, administrative and business purposes.

This Privacy Policy should be read together with our Legal Notice, Cookie Policy and Fraud Warning & Official Communications Notice.

1. Who we are

For the purposes of applicable data protection laws, the data controller responsible for this website and related personal data processing activities is:

Terziolu & Partners · Istanbul, Northern Cyprus, London. Website: www.terziolupartners.com. Email: [email protected].

Where a matter involves a specific lawyer, counsel, partner, local counsel, foreign counsel, affiliated professional or separately regulated professional, the applicable engagement terms and professional status of the relevant person may determine additional or separate data protection responsibilities.

If you have any questions about this Privacy Policy or how your personal data is handled, you may contact us at [email protected].

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

  • use of our website;
  • enquiries submitted through contact forms;
  • email, telephone and other communications with us;
  • requests for legal services or professional information;
  • client onboarding and matter assessment;
  • legal, advisory and coordination work;
  • publications, articles, insights and newsletters;
  • events, meetings and professional communications;
  • recruitment or professional collaboration enquiries;
  • supplier, consultant and business contact management;
  • fraud prevention, security and compliance matters.

This Privacy Policy does not create a lawyer-client relationship and does not replace the confidentiality, professional secrecy, data protection or engagement terms that may apply once we formally agree to act in a specific matter.

3. Personal data we may collect

The personal data we collect depends on how you interact with us.

We may collect and process the following categories of personal data.

3.1 Identity and contact information

This may include:

  • name;
  • surname;
  • title;
  • company or organisation;
  • position or role;
  • email address;
  • telephone number;
  • postal address;
  • country or city;
  • preferred language;
  • communication preferences.

3.2 Enquiry and communication information

This may include:

  • information submitted through contact forms;
  • email correspondence;
  • documents or attachments you send to us;
  • subject matter of an enquiry;
  • details of a potential legal issue;
  • meeting notes;
  • call notes;
  • records of our communications with you.

Please do not send confidential, privileged, sensitive or time-critical information unless and until we have formally agreed in writing to act for you.

3.3 Client and matter information

Where we are asked to consider or accept a matter, we may process information relating to:

  • identity verification;
  • conflict checks;
  • beneficial ownership;
  • corporate structure;
  • shareholders, directors and representatives;
  • family members, counterparties or related persons;
  • legal documents;
  • contracts;
  • court, arbitration or administrative documents;
  • transaction documents;
  • financial information relevant to a matter;
  • property or asset information;
  • evidence, correspondence and case materials.

The exact information processed will depend on the nature of the matter.

3.4 Professional and business contact information

We may process personal data relating to:

  • clients;
  • prospective clients;
  • counterparties;
  • lawyers;
  • counsel;
  • barristers;
  • solicitors;
  • advocates;
  • accountants;
  • tax advisors;
  • consultants;
  • experts;
  • translators;
  • notaries;
  • public authorities;
  • court or arbitration personnel;
  • business partners;
  • service providers;
  • media or event contacts.

3.5 Website and technical information

When you visit our website, certain technical information may be collected automatically, such as:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • pages visited;
  • date and time of visit;
  • referring website;
  • approximate location derived from technical data;
  • cookie identifiers;
  • website usage information;
  • security logs.

This information helps us maintain website functionality, security, performance and lawful analytics.

3.6 Recruitment or collaboration information

If you contact us regarding recruitment, internships, collaboration or professional opportunities, we may process:

  • CV or résumé;
  • education history;
  • professional experience;
  • language skills;
  • qualifications;
  • bar admissions or professional memberships;
  • references;
  • portfolio or writing samples;
  • correspondence with us.

3.7 Sensitive or special category data

In some legal matters, personal data may include sensitive or special category information, such as:

  • health information;
  • family information;
  • inheritance and succession details;
  • financial hardship;
  • criminal allegations or proceedings;
  • litigation history;
  • employment disputes;
  • nationality or immigration information;
  • biometric or identity document data;
  • information revealing political, religious or other sensitive matters where relevant to a case.

We process such information only where necessary, lawful and appropriate for the specific purpose, including legal advice, legal claims, professional obligations, explicit consent where required or compliance with applicable law.

4. How we collect personal data

We may collect personal data:

  • directly from you;
  • from your authorised representatives;
  • from clients or prospective clients;
  • from counterparties or their representatives;
  • from courts, arbitral tribunals or public authorities;
  • from corporate registries, land registries and public records;
  • from professional advisors, experts or consultants;
  • from publicly available sources;
  • from third-party verification or compliance sources;
  • through our website and technical systems;
  • through email, telephone, meetings and professional correspondence.

Where you provide personal data relating to another person, you should ensure that you have the authority to do so and that the person has been informed where required by applicable law.

5. Purposes for which we process personal data

We may process personal data for the following purposes.

5.1 Responding to enquiries

We process personal data to:

  • receive and review enquiries;
  • respond to communications;
  • assess whether we can assist;
  • identify the relevant practice area, location or professional;
  • arrange meetings or calls;
  • provide initial administrative information.

5.2 Conflict checks and client onboarding

Before accepting a matter, we may process personal data to:

  • identify parties;
  • conduct conflict checks;
  • verify identity;
  • assess professional obligations;
  • perform anti-money laundering or similar checks where applicable;
  • evaluate whether we are able to act;
  • prepare engagement documents.

5.3 Providing legal and professional services

Where we formally agree to act, we may process personal data to:

  • advise clients;
  • review documents;
  • prepare legal documents;
  • conduct negotiations;
  • manage transactions;
  • represent clients in disputes;
  • coordinate with local or foreign counsel;
  • communicate with courts, authorities or counterparties;
  • manage evidence and case materials;
  • protect legal rights;
  • pursue or defend legal claims;
  • enforce judgments, awards or settlements.

5.4 Cross-border coordination

Where a matter involves more than one jurisdiction, we may process and share personal data as necessary to:

  • coordinate advice across jurisdictions;
  • instruct or liaise with local counsel;
  • obtain specialist advice;
  • review foreign documents;
  • manage translations, certifications or legalisations;
  • support transactions, disputes or private client matters involving Türkiye, Northern Cyprus, the United Kingdom or other jurisdictions.

5.5 Administration, billing and business operations

We may process personal data to:

  • maintain client and matter records;
  • issue invoices;
  • process payments;
  • manage accounting and tax records;
  • communicate with suppliers and advisors;
  • maintain internal files;
  • administer our website and IT systems;
  • manage professional relationships;
  • keep appropriate records for legal, regulatory and business purposes.

5.6 Publications, insights and professional updates

We may process contact information to:

  • send publications, legal updates or insights where permitted;
  • respond to requests for articles or materials;
  • manage event invitations;
  • maintain professional contact lists;
  • communicate about matters of legitimate professional interest.

You may ask us to stop sending non-essential communications at any time.

5.7 Security, fraud prevention and protection of rights

We may process personal data to:

  • protect our website and systems;
  • detect and prevent fraud;
  • investigate impersonation or misuse of our name;
  • protect our professional identity and communications;
  • respond to suspicious activity;
  • preserve evidence;
  • establish, exercise or defend legal claims;
  • comply with court orders, regulatory requests or lawful obligations.

6. Legal bases for processing

Depending on the context and applicable law, we may process personal data on one or more of the following legal bases:

  • performance of a contract or steps taken before entering into a contract;
  • compliance with a legal or professional obligation;
  • legitimate interests, including providing legal services, managing enquiries, protecting rights, maintaining security and operating our business;
  • establishment, exercise or defence of legal claims;
  • explicit consent where required for certain types of processing;
  • public interest or official authority where applicable in a legal or regulatory context;
  • protection of vital interests in rare and exceptional circumstances.

Where consent is the legal basis, you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

7. Legitimate interests

Where we rely on legitimate interests, these may include:

  • responding to professional enquiries;
  • assessing potential instructions;
  • conducting conflict checks;
  • managing client relationships;
  • protecting our legal rights;
  • preventing fraud and impersonation;
  • maintaining website security;
  • improving website functionality;
  • keeping professional records;
  • communicating with business contacts;
  • developing and protecting our legal practice;
  • ensuring accountability and continuity in professional services.

We consider and balance the impact on individuals before relying on legitimate interests.

8. Sharing personal data

We may share personal data where necessary and lawful with:

  • lawyers, counsel, partners and professionals involved in a matter;
  • local counsel or foreign counsel;
  • barristers, solicitors, advocates or other legal professionals;
  • courts, arbitral tribunals and dispute resolution bodies;
  • public authorities, regulators, registries and notaries;
  • accountants, tax advisors, auditors and financial professionals;
  • translators, experts, consultants and investigators;
  • IT, hosting, website, email and cloud service providers;
  • banks and payment service providers;
  • insurers and professional indemnity providers;
  • document management and communication service providers;
  • counterparties and their representatives where necessary in a matter;
  • law enforcement or regulatory bodies where required by law;
  • successors or transferees in connection with a restructuring of our practice, subject to legal and professional safeguards.

We do not sell personal data.

We do not share personal data for unrelated third-party marketing.

9. International transfers

Our work may involve cross-border matters connected with Türkiye, Northern Cyprus, the United Kingdom, European jurisdictions and other countries.

Personal data may therefore be transferred, accessed or processed outside the country where it was originally collected where necessary for:

  • legal advice;
  • cross-border coordination;
  • client representation;
  • litigation, arbitration or enforcement;
  • local counsel involvement;
  • expert advice;
  • document review;
  • administrative support;
  • secure technology services;
  • professional or regulatory compliance.

Where required by applicable law, we take appropriate steps to protect personal data in international transfers. These may include contractual safeguards, professional confidentiality obligations, due diligence on service providers, limitation of access and other appropriate measures.

10. Professional confidentiality and legal privilege

Terziolu & Partners treats client information with professional care.

Where a lawyer-client relationship is formally established, communications and information may be protected by professional secrecy, confidentiality, legal privilege or similar protections depending on the applicable law and jurisdiction.

However, submitting an enquiry or sending information before formal engagement does not automatically create a lawyer-client relationship or legal privilege.

Users should avoid sending confidential or sensitive information until the firm has confirmed in writing that it is able to act.

11. Data security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

These measures may include:

  • access controls;
  • secure email and account management;
  • password and authentication safeguards;
  • device and network security;
  • document management controls;
  • confidentiality obligations;
  • limited access to matter files;
  • staff awareness and professional supervision;
  • secure hosting and technology providers;
  • backup and retention procedures;
  • fraud and impersonation monitoring.

No method of electronic transmission or storage is completely secure. Users should exercise caution when sending information electronically.

12. Retention of personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, professional, regulatory, tax, accounting, security, limitation and dispute-resolution purposes.

Retention periods may vary depending on:

  • whether we are formally engaged;
  • the nature of the matter;
  • applicable professional rules;
  • legal limitation periods;
  • regulatory or tax obligations;
  • the need to preserve evidence;
  • risk of disputes or claims;
  • ongoing client relationship;
  • legitimate business record-keeping needs.

Where personal data is no longer required, we may securely delete, anonymise, archive or restrict access to it in accordance with applicable requirements.

13. Website analytics, cookies and similar technologies

Our website may use cookies or similar technologies for:

  • essential website functionality;
  • security;
  • performance;
  • analytics;
  • user experience;
  • language preferences;
  • content improvement.

Some cookies may be strictly necessary for the website to function. Others may be used only where permitted or where consent is obtained.

For further information, please see our Cookie Policy.

Users may control cookies through browser settings or, where available, through the website's cookie preference tool.

14. Marketing and professional updates

We may send professional updates, publications, insights, invitations or similar communications to individuals who have requested them, have an existing professional relationship with us or where otherwise permitted by applicable law.

You may opt out of non-essential communications at any time by contacting us or using any unsubscribe mechanism provided.

Even if you opt out of marketing or professional updates, we may still send communications relating to active matters, legal obligations, administrative issues, security alerts or professional responsibilities.

15. Your rights

Depending on the applicable law and your location, you may have rights in relation to your personal data.

These may include the right to:

  • request information about how your personal data is processed;
  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of personal data in certain circumstances;
  • request restriction of processing;
  • object to processing;
  • request data portability where applicable;
  • withdraw consent where processing is based on consent;
  • object to direct marketing;
  • lodge a complaint with a competent data protection authority.

These rights may be subject to limitations, including legal privilege, professional confidentiality, legal obligations, court requirements, regulatory duties, limitation periods, establishment or defence of legal claims and the rights of other persons.

16. How to exercise your rights

You may contact us at [email protected].

When making a request, please provide enough information for us to identify you and understand the request.

We may need to verify your identity before responding.

If your request relates to a matter involving another person, a legal proceeding, confidential information, privileged material, a third-party document or professional obligation, we may be limited in what we can disclose or do.

We will respond to valid requests in accordance with applicable law.

17. Complaints

If you have concerns about how your personal data is handled, we encourage you to contact us first so that we can review the matter.

Depending on the applicable law and your location, you may also have the right to complain to a competent data protection authority.

This may include, where applicable:

  • the Personal Data Protection Authority in Türkiye;
  • the Information Commissioner's Office in the United Kingdom;
  • another competent data protection authority in the relevant jurisdiction.

18. Children's data

Our website and services are not directed at children.

We do not knowingly collect personal data from children through the website for marketing or general website purposes.

However, legal matters may sometimes involve children or minors, including family, inheritance, education, immigration, private client, litigation or property matters. In such cases, children's data may be processed only where necessary, lawful and appropriate for the relevant matter.

19. Third-party websites

Our website may contain links to third-party websites, platforms, maps, social media pages, publications or resources.

We are not responsible for the privacy practices, security, content or policies of third-party websites.

Users should review the privacy policies of any third-party websites they visit.

20. Social media and public platforms

If you interact with Terziolu & Partners through LinkedIn or other public platforms, your personal data may also be processed by the relevant platform according to its own terms and privacy policy.

Please do not share confidential, privileged, sensitive or matter-specific information through public social media platforms.

21. Automated decision-making

We do not use website visitor data to make decisions that produce legal or similarly significant effects solely by automated means.

If this changes, we will update this Privacy Policy as required by applicable law.

22. Artificial intelligence and technology tools

Terziolu & Partners may use technology tools to support administrative, research, drafting, translation, document review or operational tasks where appropriate.

Where any technology tool is used in a professional context, we aim to preserve confidentiality, professional responsibility and appropriate human oversight.

We do not intentionally submit confidential client information to public or unsecured artificial intelligence tools without appropriate authority, safeguards or professional assessment.

Technology tools do not replace professional legal judgment.

23. Data relating to counterparties and third parties

In legal matters, we may process personal data relating not only to clients but also to counterparties, witnesses, representatives, experts, employees, family members, shareholders, directors, beneficial owners, public officials, advisors and other persons connected with a matter.

Such data may be processed where necessary for legal advice, representation, evidence, claims, defence, enforcement, compliance, negotiations or professional obligations.

Where direct notice to such persons is not possible, appropriate or legally required, we may rely on applicable exemptions or legal bases.

24. Confidential documents and evidence

Where documents are provided to us in connection with a matter, they may contain personal data belonging to multiple persons.

We may process such documents to:

  • understand the matter;
  • advise on legal rights;
  • assess evidence;
  • prepare correspondence;
  • conduct negotiations;
  • support proceedings;
  • comply with disclosure or production obligations;
  • preserve or defend legal claims.

Access to such documents is limited to those who need to review them for the relevant professional purpose.

25. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, professional structure, technology, legal obligations or data protection practices.

The current version will be made available on this page with the date of the latest update.

Continued use of the website after changes are made constitutes acknowledgment of the updated Privacy Policy.

26. Contact

For questions, requests or concerns regarding this Privacy Policy or our handling of personal data, please contact Terziolu & Partners at [email protected] or through the official contact details provided on this website.