Privacy Policy

AM Legal Services LLC ("we", "us", "our") operates the website ruleandlaw.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our services.

We are committed to protecting your privacy and handling your data transparently and in accordance with applicable data protection laws, including the Kosovo Law on Personal Data Protection (Law No. 06/L-082) and the EU General Data Protection Regulation (GDPR) where applicable.

AM Legal Services LLC

Prishtina, Kosovo

Email: art@ruleandlaw.com

Phone: +383 49 296 134

• Contact form submissions: Name, email address, phone number (optional), subject, and message content.
• Newsletter subscriptions: Email address only.
• Consultation bookings: Name, email, and scheduling information provided through our Google Calendar appointment booking integration.
• Client engagement: Information provided during the course of legal services, governed by a separate engagement agreement.

• Analytics data: We use Google Analytics 4 (GA4) and Microsoft Clarity to collect anonymised usage data including pages visited, time spent on site, referral source, device type, and approximate geographic location (country/city level). Microsoft Clarity also records masked session replays and heatmaps to help us identify usability issues. Form fields and personal information are automatically masked and never captured in recordings. Both services load only after you accept cookies.
• Cookies: Small text files stored on your device. See our Cookies Statement for full details.
• Server logs: IP address, browser type, operating system, and access timestamps.

We use the information we collect for the following purposes:

• Responding to enquiries: To reply to contact form submissions and provide requested information about our services.
• Newsletter delivery: To send periodic updates about Kosovo business law, tax changes, and company formation insights. You can unsubscribe at any time.
• Service delivery: To provide legal services under a signed engagement agreement.
• Website improvement: To understand how visitors use our site and improve its content and functionality.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

We process your personal data based on:

• Consent: When you submit a contact form, subscribe to our newsletter, or accept cookies.
• Contractual necessity: When processing is necessary to perform our legal services under an engagement agreement.
• Legitimate interests: Website analytics and security, provided these do not override your fundamental rights.
• Legal obligation: Where processing is required to comply with applicable law.

We use the following third-party services that may process your data:

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

• Contact form data: Retained for up to 2 years or until the enquiry is resolved, whichever is later.
• Newsletter subscriptions: Retained until you unsubscribe.
• Client data: Retained in accordance with professional obligations and applicable legal retention requirements (typically 5-10 years after the engagement ends).
• Analytics data: Google Analytics data is retained for 14 months. Microsoft Clarity session data is retained for up to 13 months.

Under applicable data protection laws, you have the right to:

• Access your personal data we hold.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten") of your data where there is no compelling reason to continue processing.
• Restrict processing in certain circumstances.
• Data portability to receive your data in a structured, commonly used format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at art@ruleandlaw.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure third-party service providers
• Access controls limiting data access to authorised personnel
• Regular review of data protection practices

Your data may be processed outside Kosovo by our third-party service providers (such as Google and Vercel, which operate globally). Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. We encourage you to review this page periodically.

Effective Date: March 2026

Last Updated: March 2026