Legal

Privacy Policy

Protecta Lawyers — Dimomentum Limited

Last updated: October 8, 2026

1. Data Controller Identity

This Privacy Policy governs the processing of personal data carried out through Protecta Lawyers, a platform operated by Dimomentum Limited, a company incorporated in Malta.

Data Controller Details:

Dimomentum Limited acts as the data controller for the personal data of platform users, in accordance with the European Union General Data Protection Regulation (GDPR), applicable Maltese legislation and other mandatory regulations.

2. Scope of Application

This policy applies to individuals who visit the website, create an account, purchase a subscription, register investments, provide documents, submit inquiries or use the functionalities of Protecta Lawyers.

The platform may be used by individuals from different countries, without prejudice to any applicable legal or commercial restrictions.

3. Personal Data Processed

Depending on the services used, we may process the following categories of information:

  • Identification and contact data: first name, last name, identification document, email address, telephone number, country and other information provided during registration or account updates.
  • Investment information: declared companies or entities, capital and interest owed, amounts claimed and background information related to investments.
  • Documentation: identification documents, contracts, supporting documents, communications, financial files and other documentation voluntarily provided by the user.
  • Advisor data: first name, last name, email address, telephone number and relationship of advisors registered with the declared companies.
  • Inquiries: content of questions, answers, attachments, support history and communications related to advisory services.
  • Contractual and payment information: subscriptions, amounts, billing dates, payment status, transaction identifiers, cancellations, reactivations and refund requests.
  • Technical data: IP address, browser, device, session logs, security events and data necessary for the operation of the service.

We do not request that users provide special categories of personal data, except where strictly necessary for a legitimate purpose and where an appropriate legal basis exists. Documents provided may contain sensitive information, so they should be limited to what is necessary for the inquiry.

4. Purposes and Legal Bases

We process personal data for the following purposes:

4.1. Account and Service Management

Creating accounts, authenticating users, managing declared investments, administering documents, enabling inquiries and providing access to publications.

Legal basis: performance of the contract or taking pre-contractual steps requested by the user.

4.2. Subscriptions and Billing

Calculating monthly payments, processing payments, managing subscriptions, handling cancellations and reactivations, processing refunds and maintaining accounting records.

Legal basis: performance of the contract and compliance with legal obligations.

4.3. Support and Operational Communications

Responding to requests, handling inquiries, communicating incidents, sending account-related information and notifying users of publications where applicable.

Legal basis: performance of the contract and, depending on the nature of the communication, legitimate interest or consent where required.

4.4. Security and Fraud Prevention

Protecting accounts, investigating unauthorized access, preventing abuse and maintaining the security of systems.

Legal basis: the legitimate interest of the data controller and compliance with applicable legal obligations.

4.5. Legal Obligations and Claims

Responding to valid requests from authorities, complying with tax and accounting obligations, and establishing, exercising or defending legal claims.

Legal basis: compliance with legal obligations and other lawful bases permitted under the GDPR.

Where a specific operation requires consent, such consent will be requested separately and may be withdrawn in accordance with applicable legislation.

5. Information Declared by Users

Information regarding investments, companies, capital and interest is initially provided by the user.

The administrative linking of a declared company to the Protecta Lawyers catalog is intended for organizational purposes and access to information. It does not constitute certification of the existence, amount or enforceability of a debt.

We may retain historical records of inquiries and linkages in order to maintain document integrity and comply with contractual or legal obligations.

6. Recipients and Service Providers

Dimomentum Limited does not sell personal data or provide it to third parties for them to commercialize it for their own purposes.

However, certain technology providers may process information to the extent necessary to provide the contracted services, including:

  • Stripe, for payment processing, transaction management and fraud prevention.
  • Hosting, infrastructure, storage and security providers.
  • Email and operational communications providers.
  • Authorized maintenance and technical support providers.

Likewise, lawyers and authorized personnel may access information strictly necessary to provide advisory services and administer the service, subject to the applicable confidentiality and data protection obligations.

Data may also be disclosed to competent authorities where there is a valid legal obligation to do so.

Service providers acting as data processors shall be subject to the contractual safeguards required by applicable law. Where a recipient acts as an independent data controller, it shall process the data in accordance with its own legal obligations.

7. Payments Through Stripe

Subscription payments are processed through Stripe.

Stripe may process payment, identification, transaction and security data necessary to process transactions and prevent fraud.

Dimomentum Limited receives the information necessary to determine payment status and administer subscriptions, without needing to store the full card numbers used.

Information regarding the processing carried out by Stripe is available at: https://stripe.com/privacy

8. International Transfers

Due to the international nature of the service and the use of technology providers, certain data may be processed outside Malta or the European Economic Area.

Where an international transfer is subject to the GDPR, a valid mechanism complying with its requirements shall be used, such as an adequacy decision, standard contractual clauses or another legally recognized safeguard.

Users may request information about applicable transfers and the safeguards used by contacting info@protectalawyers.com.

9. Data Retention

Data shall be retained only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations and protect legitimate rights.

The retention criteria are as follows:

  • Account data: for the duration of the contractual relationship and thereafter for as long as there is a legal obligation or justification for retention.
  • Investment and inquiry documentation: for the duration of the service and for the time necessary to comply with contractual obligations, claims or legal liabilities.
  • Payment and billing data: for the periods required by applicable tax, accounting and contractual regulations.
  • Technical and security records: for periods proportionate to their purpose, in accordance with the internal retention policy.
  • Privacy and support requests: for the time necessary to resolve them and demonstrate compliance with legal obligations.

Specific retention periods or the criteria used to determine them may be requested from the data controller.

Once the applicable retention periods have expired, data shall be deleted, anonymized or retained only where a valid legal basis exists.

10. Data Subject Rights

Under the GDPR and other applicable legislation, users may exercise, where applicable, the following rights:

  • Access to their personal data.
  • Rectification of inaccurate data.
  • Erasure of data.
  • Restriction of processing.
  • Objection to processing.
  • Data portability.
  • Withdrawal of consent, where processing is based on consent.
  • The right not to be subject to certain decisions based solely on automated processing, where applicable.

To exercise these rights, users may write to: info@protectalawyers.com

We may request reasonable information to verify the identity of the requester.

We will respond within the time limits established by applicable legislation, generally within one month of receiving the request, without prejudice to legally permitted extensions.

Users also have the right to lodge a complaint with the competent data protection authority, including the Information and Data Protection Commissioner (IDPC) of Malta: https://idpc.org.mt

11. Third-Party Information

When a user provides data relating to advisors, representatives or other individuals, they must have a lawful basis for sharing such data and comply with any applicable information obligations.

Dimomentum Limited shall process such data only for legitimate purposes related to the service and in accordance with applicable legislation.

12. Information Security

We implement appropriate technical and organizational measures to protect the confidentiality, integrity and availability of information.

These measures include access controls, authentication mechanisms, encrypted communications where appropriate, restrictions on access to private documents and infrastructure protection measures.

Access to data is limited according to the corresponding roles and authorizations.

No technological system can guarantee absolute protection against all risks.

13. Cookies

The website and portal may use technical cookies and similar technologies necessary for authentication, sessions, security, preferences and the operation of the services.

Non-essential cookies that require consent will only be used after obtaining such consent through the corresponding mechanisms.

If the website incorporates analytics, advertising or other non-essential technologies, additional information will be provided regarding their purposes, providers and duration.

14. Minors

The services are intended for individuals with sufficient legal capacity to enter into contracts.

They are not intended for minors who do not have such capacity under applicable law.

15. Amendments

We may update this Privacy Policy to reflect legal, technological or operational changes.

The current version will be available on our website, indicating its date of update.

Where applicable, we will communicate material changes or request new consent.

16. Contact

Dimomentum Limited — Protecta Lawyers

Level 3A, Centris Business Gateway II, Triq is-Salib tal-Imriehel, Central Business District, CBD3020, Birkirkara, Malta.

Privacy: info@protectalawyers.com

Customer Support: clients@protectalawyers.com

Website: https://protectalawyers.com