Legal

Privacy policy

How Lexrova collects, uses and protects personal data.

Last updated: October 23, 2026

Who we are

Lexrova ("we", "us") operates an online directory of law firms at lexrova.com. For questions about this policy or your data, contact us through our contact page.

What we collect

  • Visitors: technical data needed to deliver the site, such as IP address, browser type and pages requested. We do not require you to create an account to browse.
  • Contact form: your name, email, optional phone number and message.
  • Account holders: name, email address, a securely hashed password, and the firms you claim or manage.
  • Claims and payments: your role at the firm and any notes you send us. Payments are processed by Stripe; we receive confirmation of payment and subscription status but never see or store full card details.
  • Firm listings: business information about law firms (name, address, phone, website, practice areas, ratings and similar) compiled from publicly available sources or supplied by the firm.

Why we use it

  • To run the directory and show firm profiles (legitimate interests).
  • To answer messages and verify profile claims (legitimate interests and, where you claim a profile, performance of a contract).
  • To manage subscriptions and billing (performance of a contract; legal obligations for accounting).
  • To keep the site secure, prevent abuse and fix errors (legitimate interests).
  • To show advertising, where you have agreed to it where consent is required (see our cookie policy).

Who we share it with

We use carefully selected service providers who process data on our behalf: Cloudflare (hosting, database, security and file storage), Stripe (payments), our email delivery provider, and Google (advertising). We do not sell personal data. We may disclose information if required by law.

International transfers

Our providers may process data in countries other than yours. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

  • Contact messages: deleted once no longer needed, normally within 24 months.
  • Accounts: while the account is active, and deleted on request.
  • Payment records: as long as required by tax and accounting law.
  • Firm listings: while the information remains publicly relevant, or until a valid removal request.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. Lawyers and firms can ask us to correct or remove listing information. To make a request, contact us. You also have the right to complain to your local data protection authority.

Security

We protect data with encryption in transit, hashed passwords, access controls and rate limiting. No system is perfectly secure, but we work to protect your information and will notify you where the law requires.

Children

The site is not directed at children under 16, and we do not knowingly collect their data.

Changes

We may update this policy. Material changes will be highlighted on this page with a new "last updated" date.