Team of three FIP
Global privacy experts are in our team
Privacy policy & Cookie policy
We create privacy policies and cookie policies for websites and apps
Why us?
Separate privacy practice since 2018
We developed hundreds of privacy documents for websites and apps
-
-
Privacy ambassadors
Frequent live and online privacy events
-
Experts in CCPA (CPRA), GDPR, PIPEDA
We have longstanding experience in creating policies for different markets
-
We work with all stakeholders
Businesses, controllers, processors, service providers, and more
How is a privacy policy created? How is a privacy policy created? How is a privacy policy created? How is a privacy policy created?
-
01
We study your product
We analyze which personal data is collected and how it is used -
02
We review the current policy
We assess its compliance with current legal requirements, completeness, and relevance to the product -
03
We create a new policy
If the current privacy policy doesn’t meet legal standards, we draft a new version -
04
We review cookies
We examine your cookie banner design and cookie policy text — and update them if needed -
05
We review consent texts
For cookies, newsletter sign-ups, application forms, and more -
06
We add a DPA
An optional step for companies looking to streamline B2B sales and operate in specific markets
What user rights does it use? What user rights does it use? What user rights does it use? What user rights does it use?
EU
USA
-
Right to access personal data
Find out whether data is being processed and receive a specially formatted archive or document with that data -
Right to rectification of inaccurate data
Data processing systems must include functionality for correcting user records -
Right to erasure (“right to be forgotten”)
This right does not always apply, so it’s important to understand which data your company must delete upon request -
Right to restrict data processing
Systems should be configured to, for example, isolate such data in a separate table or make records read-only in response to this request -
Right to data portability
Affects data format choices, processing systems, protocols, data architecture, and third-party vendors involved -
Right to object to data processing
The user has an absolute right to opt out of marketing, so clear links and mechanisms must be provided to exercise this right -
Right not to be subject to automated decision-making, including profiling
Important for AI systems — there must be a way for human intervention and the ability to override decisions
-
Right to know
What categories and specific pieces of personal data are collected, disclosed to third parties, or sold — and for what purposes -
Right to delete personal information
Similar to the GDPR, but with jurisdiction-specific nuances -
Right to opt-out of the sale or sharing
Applies to businesses that profit (or benefit in other ways) from selling or disclosing data to third parties upon request -
Right of non-retaliation
Guarantees that submitting a request cannot be used by the company to discriminate against the individual -
Right to limit use of sensitive personal information
For example, limiting the duration of use, restricting storage within company systems, or disclosure to certain third parties -
Right to correct personal information
Similar to the GDPR — requires both architectural and procedural updates, such as enabling databases to modify user data or records -
Right to opt-out of automated decision-making technology
Relevant for AI and other automated systems — especially when data is collected directly from the data subject -
Right to refuse targeting / cross-context behavioral advertising (CCBA)
Specific requirements for companies acting as data brokers or using advertising in their business models
We can help with the following:
-
Privacy Policy
We review your current privacy policy or create a new one -
Cookie Policy
We help you draft a new cookie policy or configure a cookie management tool -
“Do not sell/share my PII” page
We help ensure compliance with California’s data protection laws -
Data Processing Agreement
We create annexes to public offers and EULAs to simplify data processing for your B2B clients -
Imprint або Impressum
A dedicated page required under telecom laws in certain EU countries -
Cookie Management Platforms (CMPs)
We support the selection and configuration of the right tool -
Forms for GDPR/CCPA requests
We assist in designing and implementing request forms for data subject rights
How much does it cost?
€100/hour
Depends on the complexity of data flows and processing mechanisms
Team
-
Kateryna Dubas
Head of Privacy Practice at Legal IT Group -
Anton Tarasiuk
Managing partner at Legal IT Group -
Anton Demchuk
Junior IT/Privacy Lawyer at Legal IT Group -
Dmytro Nefodov
Junior AI/privacy lawyer at Legal IT Group
Certified GDPR experts
We hold 10+ certifications in the field of privacy
Our expertise is internationally recognized
Current and practical articles
- Data protection officer
- AI compliance officer
- Data privacy compliance
- Дія.City
- Digital Millennium copyright Act
- Торгова марка в IT
We write about what we practice
IP, GDPR, contracts and disputes, as well as the legal aspects of implementing technologies like artificial intelligence or sharing best practices for delivering practical legal solutions.
-
How do you work with IT companies?
To protect copyrights in IT, it is important to record your authorship (date of creation, registration with Ukrpatent), enter into agreements with clear terms, use product licenses, sign NDAs with partners, and implement digital watermarks or signatures in products. If your rights are violated, contact legal experts, such as Legal IT, who can help you monitor violations and take legal action to protect your intellectual property.
-
How to protect your copyright in IT?
To protect your copyright in IT, it is important to record your authorship (date of creation, registration with Ukrpatent), enter into contracts with clear terms, use product licenses, sign NDAs with partners, and implement digital watermarks or signatures in products. If your rights are violated, contact legal experts, such as Legal IT, who can help you monitor violations and take legal action to protect your intellectual property.
-
How quickly do you respond to requests?
To protect copyrights in IT, it is important to record your authorship (date of creation, registration with Ukrpatent), enter into contracts with clear terms, use product licenses, sign NDAs with partners, and implement digital watermarks or signatures in products. If your rights are violated, contact legal experts, such as Legal IT, who can help you monitor violations and take legal action to protect your intellectual property.
-
How do you ensure privacy?
To protect copyrights in IT, it is important to record your authorship (date of creation, registration with Ukrpatent), enter into contracts with clear terms, use product licenses, sign NDAs with partners, and implement digital watermarks or signatures in products. If your rights are violated, contact legal experts, such as Legal IT, who can help you monitor violations and take legal action to protect your intellectual property.