Personal data processing policy

1. Who processes your data

This policy was drawn up in accordance with the Digital Code of the Kyrgyz Republic, which has governed personal data processing since 5 February 2026. It applies to data received via institucia.kg, by phone, on WhatsApp, Telegram and Instagram, by email and at our office.

2. What data we receive

• your name or how to address you;
• phone number, WhatsApp or Telegram, email;
• the area of your question and the description of your situation you gave in the request;
• case documents and information you give a lawyer for a consultation or representation;
• technical website data (cookies, IP address, device and browser type, pages viewed) — see our Privacy Policy.

We do not ask for passport details through the website forms. We process health information and other special categories of data only when your case cannot be handled without them, and only with your separate consent or where the law expressly permits.

3. Why we process data

• to contact you about your request and provide a free consultation;
• to conclude and perform a legal services contract;
• to represent your interests in courts, government bodies and negotiations — on your instructions;
• to fulfil obligations established by law;
• to improve the website and understand which advertising brings enquiries — in anonymised form.

4. Legal basis

• your consent — when you send a request or message us;
• concluding and performing a contract with you;
• compliance with legal requirements;
• the company's legitimate interest, provided it does not infringe your rights — for example, fraud prevention.

5. How we handle data

We collect, record, store, update, use and delete data only for the stated purposes. Only the lawyers and staff working on your request have access. Case information is protected by professional secrecy: we do not disclose it without your consent, except where the law expressly requires it.

We protect data with organisational and technical measures: restricted access, passwords, and storing documents in secure systems and premises.

6. Who we share data with

We do not sell your data or share it for third-party advertising. Data may be shared only:

• to courts, government bodies and other parties to the case — within your instructions or as required by law;
• to the communication and analytics services you use to contact us or that run on the website (WhatsApp, Telegram, Yandex Metrica, Google Analytics). Their servers may be located outside the Kyrgyz Republic;
• to partner lawyers in Russia — only to handle your case there and only with your consent.

7. How long we keep data

• requests that did not lead to a contract — no longer than 1 year after the last contact;
• client data under a contract — for the term of the contract and 3 years after the case ends, unless the law requires longer storage.

After that, data is deleted or anonymised.

8. Your rights

• find out what data of yours we process and receive a copy;
• demand that inaccurate data be corrected;
• demand that data be deleted or blocked if it is no longer needed or is processed unlawfully;
• withdraw your consent at any time — this does not affect the lawfulness of processing before withdrawal;
• appeal against our actions to the State Agency for Personal Data Protection under the Cabinet of Ministers of the Kyrgyz Republic or to a court.

We respond to requests within the time limits set by the laws of the Kyrgyz Republic.

9. How to withdraw consent or ask a question

Write to pravovoy_institut@mail.ru, on WhatsApp +996 999 333 321 or by post to 35 Erkindik Boulevard, Bishkek. Please give your name and the phone number you contacted us from so we can find your data.

10. Changes to this policy

We may update this policy. The current version is always published on this page, with its date shown at the top.