Privacy policy

Version of 2 November 2026

LAZARD & FLORA ASSOCIÉS attaches great importance to the protection of your personal data. This policy explains what data is collected on the Site lazardflora-avocats.com, why, and how you can exercise your rights.

1. Data controller

The data controller is LAZARD & FLORA ASSOCIÉS, an association of lawyers with individual professional liability (AARPI), located at 6 rue Bleue, 75009 Paris.

For any question about your personal data, you can contact the Firm at the following address: contact@lazardflora-avocats.com.

2. Data collected

Depending on how you use the Site, the firm may collect:

• your identity and contact details: first name, last name, email address, phone number;
• booking information: service chosen, date and time of the appointment, payment status;
• the lawyer you wish to speak with and, if you wish, a brief description of your situation and the attachments (five at most: PDF, images, Word documents) you add to your appointment request; these items are covered by professional secrecy and we ask you to send only what is relevant to the examination of your request;
• the content of the messages you send us by email or by phone;
• technical connection data (IP address, server logs), kept by the hosting provider for security purposes;
• browsing data, only if you accept the corresponding trackers (see the Cookie settings page).

Your payment details are entered directly on the secure payment page (Stripe, or the payment service you choose): the firm has no access to them and only receives confirmation of the payment and its reference.

3. Purposes and legal bases

• managing bookings, consultations and related exchanges: performance of the contract or of pre-contractual measures taken at your request;
• collecting payments, invoicing and keeping accounts: performance of the contract and legal obligations;
• responding to your contact requests: the firm’s legitimate interest and pre-contractual measures;
• ensuring the security of the Site and preventing abuse (rate limiting, spam filter): the firm’s legitimate interest;
• measuring traffic to the Site and improving its content, using trackers: your consent, which you can withdraw at any time;
• checking for conflicts of interest and complying with the ethical and legal obligations of the legal profession: legal obligations and legitimate interest.

Your data is neither sold nor used for direct marketing.

4. Recipients

Your data is intended for the firm’s lawyers and staff, who are bound by professional secrecy. Where strictly necessary, it may be processed by service providers acting on the firm’s behalf:

• HOSTINGER INTERNATIONAL LTD (hosting of the Site);
• Stripe Payments Europe, Ltd. (online payment) and, where this payment method is chosen, PayPal (Europe) S.à r.l. et Cie, S.C.A.;
• Google Ireland Limited (Google Analytics audience measurement, only if you allow it).

Some of these providers may process data outside the European Union. These transfers are governed by an adequacy decision of the European Commission or by standard contractual clauses.

5. Retention periods

• booking and contact data, including the description and attachments to your appointment request: thirty-six (36) months from the date of the appointment or of the last exchange, unless a case is entrusted to the firm;
• trackers and browsing data: twelve (12) months at most;
• accounting records and invoices: ten (10) years, in accordance with the French Commercial Code;
• technical logs: limited period set by the hosting provider.

If you entrust a case to the firm, the data relating to that case is kept in accordance with the rules specific to the legal profession, set out in the fee agreement.

6. Your rights

You have the right to access, rectify, erase, restrict, object to and port your personal data, as well as the right to set guidelines on what happens to it after your death.

To exercise these rights, you can contact the Firm, specifying your request, at the following address: contact@lazardflora-avocats.com.

The Firm may ask you for proof of identity and undertakes to respond to your request within one month.

If you consider that your rights are not being respected, you can lodge a complaint with the French data protection authority (Commission nationale de l’informatique et des libertés, CNIL), whose contact details are as follows:

Commission nationale de l’informatique et des libertés (CNIL)

3 place de Fontenoy
TSA 80715
75334 Paris Cedex 07
Website: https://www.cnil.fr/

7. Security

The firm implements appropriate technical and organisational measures: secure connection (HTTPS), restricted access to data, attachments stored in a private space that cannot be accessed from the Internet and can only be viewed by the firm’s lawyers and staff, secure payment via Stripe, professional confidentiality.

8. Cookies

Cookies and other trackers are described on the Cookie settings page.

9. Changes to this policy

The firm may change this policy at any time. The version in force is the one published on the Site, with its update date.