Privacy notice ยท Effective 15 July 2026
What happens to the information in an initial enquiry.
This notice applies to information submitted through this website.
Haq Legal Consultancy Institution is responsible for the personal information submitted through this website. The exact professional responsible for a legal instruction is confirmed separately if an engagement is accepted.
The enquiry form requests your name, one contact detail, the business or private request context, the selected legal area and an optional short note. Do not submit identity documents, bank details, passwords, full evidence bundles or highly sensitive records at this stage.
We use the information to assess and route the initial request, identify potential conflicts, determine whether appropriate capability may be available and communicate about a possible next step. Submission is based on your consent and your request for steps before a possible engagement.
Storage and retention
The routing record has a limited purpose and retention period.
Enquiries successfully stored through the website are written to a Cloudflare D1 database through the website's server-side function. We do not use enquiry information for advertising or sell it.
The stored record includes a unique enquiry reference, name and contact detail, the business or private request context, selected legal area, optional note, any routing service and source, page language, record status, creation time, and the consent signal, time, notice version and method.
Before any enquiry is written to D1, the browser verification token and Cloudflare-provided request IP address are sent to Cloudflare Turnstile Siteverify to check the submission. The verification token and request IP address are not written to the application's enquiry table by this website.
Website enquiries that do not become part of an accepted instruction are scheduled for deletion in the first daily cleanup cycle after an enquiry becomes 90 days old, unless a lawful reason requires longer retention. If information becomes part of a separately accepted instruction, any different retention basis will be explained in the engagement documentation. After routine deletion, Cloudflare D1 recovery history may retain a recoverable point-in-time copy for up to 30 further days, depending on the Cloudflare account plan. This recovery history is available only for service restoration and is not part of the live enquiry table.
Your choices and website limits
Control the enquiry record and keep sensitive material outside the first message.
You may ask to access, correct or delete a website enquiry, withdraw consent, request restriction, object to relevant processing, or ask about a suspected personal-data breach. Use the initial enquiry form, choose "Another matter," write "Privacy request" at the beginning of the note and include the contact detail used in the original enquiry.
The website may use session storage to remember whether the opening animation has already played. The current release does not use advertising trackers. Essential hosting and security logs may be created by the hosting provider.
The intake code limits field lengths, allowlists the routing choices, requires successful Turnstile verification before a database write, returns no-store API responses and accesses the database through a server-side D1 binding. These controls do not guarantee that an internet transmission is absolutely secure. Do not include identity numbers, banking information, health or religious information, information about children, passwords, detailed family facts or other sensitive personal information in the initial note. Do not send documents until Haq confirms an appropriate channel.
This notice may be updated when the enquiry process or applicable requirements change. The effective date above identifies the current version.
