The controller of your personal data is International Lawyer (the "Firm"), whose parent entity and holding structure is incorporated in the State of Wyoming, United States of America. You may contact our privacy team at privacidad@internationallawyer.com for any matter relating to the processing of your data or the exercise of your rights.
Where the provision of a service requires the involvement of independent collaborating partners in other jurisdictions, those partners may act, depending on the case, as processors on behalf of the Firm or as independent controllers with respect to the processing that local law imposes on them (for example, client-identification or professional-archiving obligations). In each engagement you will be informed of the role of each participant.
This Privacy Notice (the "Notice") describes how we collect, use, disclose, transfer, retain and protect the personal data of website visitors, of people who contact us or book consultations, of newsletter subscribers, and of the Firm's clients and prospective clients, regardless of the country from which they interact with us.
For the purposes of this Notice, "personal data" means any information relating to an identified or identifiable natural person; "processing" means any operation performed on personal data (collection, recording, storage, consultation, disclosure, erasure, among others); and "applicable law" includes, as the case may be, Regulation (EU) 2016/679 (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Brazil's General Data Protection Law (LGPD), U.S. federal and state privacy laws, and the other data-protection rules in force in the jurisdictions where we operate.
We collect only data that is adequate, relevant and limited to what is necessary for the purposes described in this Notice (data-minimization principle). Depending on how you interact with us, the categories processed may include:
Data marked as mandatory in each form is necessary to handle your request; failure to provide it may prevent us from processing it. You are responsible for the truthfulness and currency of the data you provide and, if you disclose third-party data to us, you warrant that you have informed them of this Notice and hold the authority to disclose it.
We process your personal data for the following purposes, on the legal bases indicated in each case:
We do not make decisions based solely on automated processing that produce legal effects on you, nor do we use your data to build commercial profiles. We do not sell or "share" (within the meaning of the CCPA/CPRA) personal data with third parties for behavioral-advertising purposes.
Access to the information in each file is restricted to the staff and collaborating partners strictly assigned to the matter, under contractual confidentiality commitments at least as demanding as those described here. The availability and precise scope of professional privileges depend on the jurisdiction and the type of proceeding; where relevant to your matter, we will explain this to you on an individualized basis.
We do not disclose your personal data to third parties, except in the following cases and with the safeguards indicated:
Given the inherently international nature of our services, your data may be processed and transferred between the different jurisdictions where we operate — including the United States, where our parent entity in Wyoming and part of our systems are located, the European Economic Area, the United Kingdom, Switzerland, Latin America and the United Arab Emirates.
When we transfer data from jurisdictions that restrict international transfers (such as the EEA, the United Kingdom or Brazil) to countries without an adequacy decision, we apply safeguards recognized by applicable law, including: standard contractual clauses approved by the European Commission (and their local equivalents), supplementary technical and organizational measures (encryption in transit and at rest, access controls, pseudonymization where appropriate), transfer impact assessments and, failing that, the derogations provided by law (for example, the necessity of the transfer for the performance of the contract you requested or for the establishment, exercise or defense of legal claims). You may request information about the safeguards applied to your case by writing to privacidad@internationallawyer.com.
We retain data only for as long as necessary for the purposes for which it was collected and, thereafter, duly restricted, for the limitation periods of any legal or professional liabilities that may arise. As a guide:
Once the applicable periods have elapsed, data is securely and irreversibly deleted or anonymized.
We apply technical and organizational measures appropriate to the risk, aligned with recognized information-security standards, including: encryption of communications (TLS) and of sensitive information at rest; access control based on the need-to-know principle and strong authentication; segregation of files; activity logs; backups; periodic vendor assessments; confidentiality and data-protection training for all staff; and security-breach management and notification procedures in accordance with applicable law. No measure guarantees absolute security, but we review and update our defenses continuously.
In accordance with the law applicable to you, you may exercise, among others, the rights of access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent at any time, without affecting the lawfulness of prior processing. If you reside in California or other U.S. states with privacy laws, you also have the rights to know, correct and delete your information, to opt out of the sale or sharing of data (which, as stated, we do not carry out), and not to be discriminated against for exercising your rights.
You may exercise them by writing to privacidad@internationallawyer.com, indicating the right you wish to exercise and providing sufficient information to verify your identity (we may request additional information for this sole purpose). We will respond within the applicable statutory deadlines (generally one month under the GDPR and forty-five days under the CCPA/CPRA, extendable in the cases provided by law). Exercising your rights is free of charge, except for manifestly unfounded or excessive requests.
Please note that certain rights (for example, erasure) may be limited by our legal retention obligations or by professional secrecy; in such cases, we will inform you of the applicable restriction and its basis.
The Site uses only the cookies and technologies strictly necessary for its operation and security, as well as those that may be set by the integrated third-party services (for example, the Calendly widget or font-delivery services) in accordance with their own policies. We do not use advertising or cross-site tracking cookies. You may configure your browser to block or delete cookies; this will not prevent browsing, although it may affect specific features such as the booking calendar.
Certain browsers allow opt-out signals such as "Global Privacy Control" (GPC) to be sent; to the extent applicable to our Site, such signals will be honored.
The Site is not directed at persons under eighteen (18) years of age, and we do not knowingly collect data from minors through it. If a parent or guardian becomes aware that a minor has provided us with data without the required authorization, they may request its erasure at privacidad@internationallawyer.com. Where a professional engagement requires processing minors' data (for example, in immigration or family proceedings), it will be processed only with the appropriate legal basis and with enhanced safeguards.
Given the global nature of our practice, we adapt the processing of your data to the framework applicable to you based on your residence and the jurisdiction of the engagement: the GDPR and national implementing laws in the EEA; the UK GDPR in the United Kingdom; the revFADP in Switzerland; the CCPA/CPRA and other state laws in the United States; the LGPD in Brazil; and the data-protection laws of Mexico, Argentina, Uruguay, Colombia, Panama, the United Arab Emirates and the other jurisdictions where we operate. Where several frameworks concur, we will apply the most protective standard compatible with our legal obligations.
The foregoing does not limit: (a) any rights that the mandatory data-protection law of your place of residence grants you on a non-waivable basis, including the rights granted by the GDPR to data subjects located in the EEA; or (b) your ability to lodge complaints with the competent supervisory authority in accordance with section 16.
We may update this Notice to reflect regulatory, technical or operational changes. We will publish the current version on this page with its date of last update and, if the changes are substantial, we will announce them prominently on the Site or, where we hold your contact details and it is required, by direct notification. We recommend that you review this Notice periodically.
For any matter relating to this Notice or the processing of your data, and to exercise your rights, you may contact privacidad@internationallawyer.us. If you consider that the processing does not comply with applicable law, you also have the right to lodge a complaint with the competent data-protection authority in your jurisdiction (for example, the supervisory authority of your EEA Member State, the UK ICO or the relevant U.S. state authority), without prejudice to any other action available to you.