Last updated: 3 July 2025
VURLE respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit vurle.com, contact us, or use our services.
1. Who We Are
This website is operated by:
VURLE
Email: privacy@vurle.com
Address: 3200 – 650 West Georgia St., Toronto V6B 4P7
For the purposes of applicable data protection law, VURLE is generally the controller of personal data collected through this website and in connection with client enquiries.
2. Personal Data We May Collect
We may collect personal data including name, email address, telephone number, company name, job title, country or jurisdiction, website URL, IP address, communication history, matter details submitted through a contact form, documents or screenshots you provide, billing information, identity verification information where required, technical website usage information, and cookie and analytics data, where applicable.
We may also process personal data contained in evidence supplied to us, such as emails, screenshots, website content, account records, platform messages or legal correspondence.
3. How We Collect Personal Data
We collect personal data when you visit our website; submit a contact form; email us; book a consultation; provide documents or evidence; become a client; communicate with us during a matter; interact with our website analytics or cookies; or a third party provides information relevant to a legal matter.
4. How We Use Personal Data
We may use personal data to respond to enquiries; assess whether we can assist you; conduct conflict checks; provide legal or professional services; prepare legal correspondence; review evidence; manage client relationships; comply with legal and regulatory obligations; issue invoices and manage payments; maintain business records; improve website functionality; protect our legal rights; prevent fraud or misuse of our services; and comply with court, regulatory or professional obligations.
5. Legal Bases for Processing
Depending on the circumstances, we may process personal data on one or more of the following legal bases: your consent; performance of a contract; steps taken before entering into a contract; compliance with a legal obligation; legitimate interests; establishment, exercise or defence of legal claims; or professional obligations applicable to legal services.
Our legitimate interests may include operating our business, responding to enquiries, protecting our rights, preventing fraud, improving services and providing legal support to clients.
6. Special Category Data
Some legal matters may involve sensitive personal data, such as health information, political opinions, biometric data, sexual orientation, religious beliefs or information about criminal allegations.
We only process special category data where necessary and where a lawful basis applies, such as explicit consent, legal claims, substantial public interest, professional confidentiality or another permitted basis under applicable law.
7. Client Confidentiality
Where VURLE provides legal services, communications may be subject to professional duties of confidentiality and, where applicable, legal professional privilege.
The exact scope of confidentiality and privilege depends on the jurisdiction, the nature of the service and the professional status of the person providing the service.
8. Sharing Personal Data
We may share personal data with lawyers, consultants or professional advisers assisting with your matter; courts, regulators or public authorities where required; hosting providers, platforms, registrars or payment providers where necessary for a complaint or legal process; IT service providers; email and cloud storage providers; payment processors; accountants and compliance providers; insurers; and law enforcement, where legally required or appropriate.
We only share personal data where necessary and lawful.
9. International Transfers
Some matters may require communication with organisations outside your country, including platforms, hosting providers, domain registrars, payment providers or lawyers in other jurisdictions.
Where personal data is transferred internationally, we take steps designed to ensure that the transfer is lawful and appropriately protected under applicable data protection law.
10. Data Retention
We keep personal data only for as long as necessary for the purpose for which it was collected. Retention periods may depend on the nature of the enquiry or matter; legal and regulatory obligations; limitation periods for legal claims; professional record-keeping requirements; accounting and tax obligations; and the need to preserve evidence.
When data is no longer required, we delete, anonymise or securely archive it.
11. Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
No system can be guaranteed completely secure. However, we take data protection seriously and seek to apply reasonable safeguards appropriate to the nature of the information.
12. Your Rights
Depending on your location and applicable law, you may have rights including the right to access your personal data; the right to correct inaccurate data; the right to request deletion; the right to restrict processing; the right to object to processing; the right to data portability; the right to withdraw consent; and the right to complain to a data protection authority.
These rights may be limited in some circumstances, especially where legal privilege, confidentiality, legal claims or professional obligations apply.
13. Cookies and Analytics
Our website may use cookies or similar technologies to operate the website, improve functionality, understand traffic and enhance user experience.
Where required by law, we will request your consent before using non-essential cookies. You can manage cookies through your browser settings.
14. Marketing Communications
We only send marketing communications where permitted by law. You may unsubscribe from marketing emails at any time by using the unsubscribe link or contacting us directly.
15. Children
Our services are intended for adults and businesses. We do not knowingly collect personal data from children without appropriate consent or lawful basis.
16. Complaints
If you are concerned about how we process your personal data, please contact us first at privacy@vurle.com.
You may also have the right to complain to a data protection authority. For UK matters, this may be the Information Commissioner’s Office. For EU matters, this may be the relevant supervisory authority in your EU member state.
17. Updates to This Policy
We may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date.