Privacy Policy

We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and our information practices, meaning how and why we collect, use, disclose, sell, share, store, and retain your personal information. It also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint or request.

We collect, use, and are responsible for certain personal information about you. When we offer services to individuals in the European Economic Area (EEA), we are subject to the EU General Data Protection Regulation (EU GDPR), which applies across the entire European Union. For California consumers, we are subject to the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA). We are responsible as a “controller” of that personal information for the purposes of the GDPR. We are responsible for your personal information as a “business” under the CCPA/CPRA.

1. Key Terms. It would be helpful to start by explaining some key terms used in this policy:

2. Personal Information We Collect About You. We may collect and use the following personal information that you give to us including Name, E-mail address and Contact Number. If you do not provide personal information required to provide services to you, it may delay or prevent us from providing services to you.
3. How Your Personal Information is Collected. We collect personal information from you, directly in person, by telephone, text, or email and/or via our website.
4. How and Why We Use Your Personal Information. Under data protection laws, we can only use your personal information if we have a proper reason for doing so. We may use your personal information in a number of ways, including

• to provide legal services manage our business and commercial relationships with our clients
• to engage in marketing and business development activities in relation to the services we provide, including sending you newsletters, legal updates, marketing communications and other information that may be of interest to you (you may choose at any time not to receive marketing materials from us by emailing us at info@mahadvising.com.
• to review and process your job application when you have applied for a position with us;
• to comply with our legal and regulatory obligations, or to establish, exercise or defend our legal rights;
• to manage and analyse usage and performance of our websites or our other online services;
• to improve the services we offer;
• to respond to any requests, or investigate any complaints you may have, or to notify you about any changes to our services or our website; and
• to prevent and respond to actual or potential fraud or illegal activities.

We rely on one or more of the following legal grounds for using your personal information in these ways:

• we have your consent;
• we need to in order to take steps to enter into a contract with you or to perform our obligations under a contract with you, including a contract to provide legal services;
• we need to in order to comply with our legal and regulatory obligations, or to establish, exercise or defend our legal rights; or
• it is required for our legitimate business interests, some examples of which are listed in the ‘Uses of your personal information’ section, above.

5. Who We Share Your Personal Information With. We share personal information among our office, as well as any office(s) we may open in the future.

We may also share your personal information with third parties outside of MAH Advising PLLC including:

• third party agents or contractors that are subject to confidentiality requirements, in connection with the processing of your personal information for the purposes described in this Notice (this may include, for example, IT and communications service providers, or suppliers or vendors who provide support services to us);
• third parties relevant to the legal services that we provide, including counterparties to transactions or litigation, other professional service providers, regulators, authorities, governmental institutions and stock exchanges; and
• regulatory authorities, courts, tribunals, government agencies or law enforcement agencies to the extent required by law, regulation or court order (for example, if we are under a duty to disclose your personal information in order to comply with any legal obligation, or where we need to establish, exercise or defend our legal rights).

The information sharing described above may involve a transfer of your personal information from a location within the European Economic Area (the “EEA”) to outside the EEA, or from outside the EEA to a location within the EEA.

Where we transfer your personal data outside the EEA, we will ensure that it is protected in a manner that is consistent with how we protect your personal data in the EEA:

• the country that we send the data to might be approved by the European Commission;
• the recipient might have signed up to a contract based on “model contractual clauses” approved by the European Commission, obliging them to protect your personal data; or
• where the recipient is located in the US, it might be a certified member of the EU-US Privacy Shield scheme.

We will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws. Model contractual clauses are in place between all MAH Advising PLLC offices and you can obtain more details on the transfer of your personal data outside the EEA (including a copy of the model contractual clauses) by contacting us in accordance with the “How to contact us” section below.

6. How Long Your Personal Information Will Be Kept. We will keep your personal information while you have an account with us or while we are providing services to you. Thereafter, we will keep your personal information for as long as is necessary depending on a number of factors, including:

• the purpose for which we are using it – we will need to keep the data for as long as is necessary for that purpose;
• legal obligations – laws or regulations may set a minimum period for which we have to keep your personal information.

7. Protecting your personal information

We have put in place various technical and organizational measures intended to protect your personal information from unauthorized access, use, disclosure, alteration or destruction consistent with applicable data protection laws.

Independent auditors, who confirm and certify our operations, review these measures periodically. Accordingly, we operate an Information Security Management System which complies with the requirements of the internationally recognized information technology security standard ISO/IEC 27001:2013, certificate #IS 595233.

8. Security of your personal information. If you are a client of MAH Advising, electronic communications between you and us, including via our website, may be treated as legally privileged, as attorney work product or otherwise confidentially under applicable rules of professional responsibility. Nothing in this notice is intended to affect such protections for existing clients. If you are not a client of MAH Advising, your communications with us are not eligible for such protections except for certain limited special circumstances.
9. Your rights regarding your personal information. Subject to the provisions of local laws and regulations from time to time, you have, or may have, certain legal rights in relation to the personal information that we hold about you, which you can exercise (to the extent applicable) by contacting us as set out below.

As such, you may be entitled, in certain circumstances:

• to request details regarding our processing of your personal information, and access to the personal information that we hold about you;
• to withdraw your consent to our processing of your personal information;
• to receive certain personal information;
• to request that we correct your personal information if it is inaccurate or incomplete;
• to request that we erase your personal information;
• to request that we restrict our processing of your personal information;
• to stop unauthorized transfers of your personal information to a third party, or to have your personal information transferred to a third party; and
• to lodge a complaint with the relevant data protection authority if you think that any of your rights have been infringed by us.

Please note that these rights may not be absolute.  For example, if you withdraw your consent to our processing of your personal information, or request that we restrict such processing, we may still be entitled to process your personal information if we have other legal grounds for doing so.  We may also be entitled to refuse certain requests for access to copies of personal information, particularly information that is subject to legal privilege, or requests to erase your personal information if we are otherwise legally entitled or required to retain it.

10. Changes to This Privacy Notice. This privacy notice was published on July 27, 2023 and last updated on July 27, 2023. We regularly review this Privacy Notice. Any future changes will be reflected with an updated version of this Privacy Notice which will be available on our website.
11. How to Contact Us.

Our contact details are shown below: