Privacy policy

1. Data controller

The controller of your personal data is:

2. Data we collect

We collect the following personal data in connection with our apostille and legalisation services:

2.1. Identity data

• First and last name
• Date and place of birth
• Nationality
• Phone number
• Email address
• Postal address

2.2. Documents you provide

• Copies of documents to be legalised or apostilled
• Proof of identity
• Proof of address

2.3. Order data

• Type of service requested
• Destination country
• Payment information (via a secure payment provider)
• Delivery address

2.4. Browsing data

• IP address
• Cookies
• Pages visited
• Visit duration

3. Purposes of processing

Your personal data is processed for the following purposes:

• Service performance: handling your apostille and legalisation requests
• Customer relationship: communication, request tracking, invoicing
• Legal obligations: document retention as required by law
• Service improvement: statistical analysis and website optimisation
• Marketing: commercial communications (with your consent)

4. Legal basis for processing

Processing is based on the following legal grounds:

• Contract performance: processing necessary to provide the service
• Legal obligation: retention of documents for 10 years (French Commercial Code)
• Legitimate interests: fraud prevention, site security
• Consent: marketing, non-essential cookies

5. Recipients of the data

Your personal data may be accessed by:

• Authorised Legal Express staff: to process your requests
• French Legalisation and Apostille Chamber (Clap): for apostille and legalisation
• Embassies and consulates: for consular legalisation
• Payment providers: for secure payment processing
• Carriers: for document delivery
• Hosting provider: Infomaniak (Switzerland), GDPR-aligned hosting

Important: we never sell your data to third parties.

6. Retention periods

We retain your personal data for the following periods:

7. Data security

We implement technical and organisational measures to protect your data:

• SSL/TLS encryption: all communications are encrypted (HTTPS)
• Restricted access: only authorised staff can access data
• Regular backups: daily data backups
• Secure hosting: ISO 27001-certified servers (Infomaniak)
• Firewall and antivirus: protection against intrusion
• Monitoring: 24/7 access oversight

8. Your rights (GDPR)

Under the GDPR, you have the following rights:

9. Cookies

This site uses cookies to improve your experience:

• Essential cookies: required for the site to work (session, forms)
• Analytics cookies: audience measurement (e.g. Google Analytics) — with your consent
• Performance cookies: site optimisation — with your consent

You can manage cookie preferences via the banner on your first visit or in your browser settings.

10. International transfers

Your data may be transferred to:

• Switzerland: Infomaniak hosting (EU adequacy decision)
• Embassies and consulates: for legalisation in the destination country

All transfers are secured and GDPR-compliant (standard contractual clauses or adequacy decisions).

11. Changes

We may update this privacy policy at any time. Changes take effect when published on the site.

We will notify you by email if changes are material.

12. Complaint to the CNIL

If you believe your rights are not respected, you may lodge a complaint with the CNIL:

13. Contact