Personal data
This notice explains what personal data we collect through this website, what we use it for, and how you can exercise your rights over it.
Last updated:
Quiroz & Portilla Abogados, S.C. (“QP Abogados”, “the firm” or “we”), with its address at Av. Gustavo Baz número 59, Fraccionamiento Bosques de Echegaray, Municipio de Naucalpan, Estado de México, C.P. 53310, telephone +52 55 8561 9584 and website https://qpabogados.com, is the controller responsible for processing your personal data.
This notice covers both the data you provide to us through this website and the data you provide in the course of a professional relationship with the firm. Throughout the document the two are clearly distinguished, because they are not the same.
QP Abogados processes your personal data under the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality and accountability, and safeguards its confidentiality and security through the administrative, technical and physical measures set out in the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations.
For any matter relating to this notice you may write to us at contacto@qpabogados.com.
The data with which we can identify and contact you is solely what you type into the contact assistant, and we do not obtain it from any other source or from third parties. There are three:
There is no other form and no other field, and in particular the site does not ask you for your email address: if you write to us by email or on WhatsApp, all we receive is whatever you chose to put in that message.
Alongside those three items, the assistant keeps a technical record of the enquiry itself. It consists of a random identifier we generate for that conversation, the step you are on or stopped at, the subject you chose, the language you are viewing the site in and the part of the site you opened the assistant from. That record is created the moment the assistant opens — before you type anything — and is sent from your browser to the firm’s spreadsheet described in section 5, operated by Google LLC. It is sent again as you move through the steps and when you leave the conversation.
That technical record contains neither your name nor your telephone number. Those two only leave your browser if you tick the consent box described in section 4; without it they are not sent, not even if you abandon the conversation after typing them. The identifier is random and on its own does not allow you to be identified.
Independently of all the above, and as happens on any website, the hosting provider receives the IP address you connect from together with the technical data of each request — date and time, browser type and operating system — and Google LLC also receives it in the record transmissions described above. This is unavoidable in order to deliver the pages to you and to keep the service secure, it happens with or without analytics tools, and we do not use it to identify you or to build profiles.
If you consent through the cookie banner, we also collect browsing data — browser type, operating system and page interaction data, associated with your IP address — through cookies and local storage, as described in section 9 of this notice. Without that consent it is not collected.
The site does not collect sensitive personal data, asset or financial data, or identification documents. We expressly ask that you not send identification, deeds, contracts or documents of any kind through these channels before we confirm in writing the scope of any potential engagement.
Sending an enquiry from this site does not create an attorney-client relationship, nor does it place what you write under attorney-client privilege.
Engaging a legal service is a different matter. If the enquiry moves forward and you engage the firm, the legal relationship requires data that you provide to us directly and that varies with the matter at hand:
We do not collect sensitive personal data unless it is strictly necessary to provide a specific legal service, and then only with your express consent.
Primary purposes for the data you leave on this site, necessary for the legal relationship your enquiry gives rise to:
If you engage the firm’s services, your data is also processed for the primary purposes inherent in that relationship:
Secondary purposes, which are not necessary in order to assist you and for which your consent is optional: statistical processing, website performance analysis and advertising campaign attribution. They are carried out only on browsing data and only if you authorize them through the cookie banner. We do not use them to build profiles of you or to take automated decisions affecting you. You may refuse or withdraw them at any time through the “Cookie preferences” link in the footer, without affecting how your enquiry is handled.
Before the assistant files your telephone number you are asked to tick an acceptance box. That box is not pre-ticked, and without it the submission is not processed: your consent to the processing of your name and telephone number is prior, informed and express.
The box governs every route those two items could take, not just the send button: if you type your telephone number, do not tick the box and close the window, the number does not leave your browser.
The technical record described in section 2 — conversation identifier, step, subject, language and origin — is sent regardless of that box, even if you open the assistant and close it without typing anything. It is processed on the basis of our legitimate interest in knowing where enquiries break off, it contains no data identifying you, and it is not combined with any other source in order to identify you.
In order to run the site, deliver your enquiry to the firm and communicate with you while your matter is being handled, your data is processed by the following providers, which act as processors on the controller’s behalf, under confidentiality undertakings and without the firm authorizing them to use it for their own purposes:
Messaging warrants a clarification, because it is not a service tailored to the firm: WhatsApp runs under Meta’s own terms and privacy policy, which we neither set nor can amend. What is in our hands is the use we make of that channel, and it is the use declared in section 3: attending to your enquiry and following up on the services you have engaged. What we ask in section 2 therefore applies here all the more: do not send identification, deeds, contracts or documents through this channel.
Some of these providers operate servers outside Mexico. Their involvement constitutes a remittance and not a transfer, under the Law and its Regulations.
We do not sell your personal data, we do not rent it and we do not share it for commercial or advertising purposes. The data you leave on this site is not transferred to anyone.
Within an engaged legal service, your data may only be transferred to a third party in the following cases:
The above are transfers, that is, the cases in which your data passes to a third party that decides on its own what to do with it. This does not cover the involvement of the providers named in section 5 — among them the messaging application we use to communicate with you — which process your data on the firm’s behalf and solely in order to provide us with a service: the Law calls that a remittance and not a transfer, which is why they are declared in that section and not in this one.
The transfers the Law allows without your consent are those set out in its article 37, including where required by a competent authority, a legal provision or a court order. Any additional transfer requiring your authorization will be requested from you in advance and expressly.
You have the right to access your personal data, to rectify it where it is inaccurate or incomplete, to cancel it where you consider it is not required for the stated purposes, and to object to its processing on legitimate grounds.
To exercise any of these rights, send a request to our Personal Data Protection Department, at contacto@qpabogados.com with the subject line “Datos Personales”, or in writing to the address given in section 1, including the following:
We will respond to your request within a maximum of twenty business days from its receipt and, where it is well founded, we will give effect to it within the fifteen business days following our response. Exercising these rights is free of charge; only justified shipping or reproduction costs may be charged.
You may withdraw at any time the consent you gave for the processing of your personal data, by writing to contacto@qpabogados.com from the address you contacted us from or attaching official identification. Withdrawal takes effect going forward and does not affect the lawfulness of processing carried out before it was received.
Please bear in mind that withdrawing consent for the primary purposes may make it impossible to attend to your enquiry or to continue the contractual relationship, since those are the purposes that make both possible.
Through the same channel you may also ask us to limit the use or disclosure of your data, without fully withdrawing your consent, or register with PROFECO’s Public Registry to Avoid Advertising (REPEP), at https://repep.profeco.gob.mx.
For the secondary purposes described in section 3 — statistical processing, website performance analysis and advertising campaign attribution — you do not need to write to us: they are managed through the “Cookie preferences” link in the footer or from your browser settings, and your choice takes effect immediately.
We keep the data from your enquiry for as long as is necessary to attend to it and, thereafter, for as long as a legal obligation or a reasonable need to evidence our conflict-of-interest checks exists. Once that period ends, the data is blocked and deleted.
We apply reasonable administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction, or unauthorized use, access or processing. The site is served over an encrypted connection and access to the record of enquiries is restricted to the people in the firm who need to handle them.
If you believe your right to the protection of personal data has been infringed, you may turn to the competent authority for the protection of personal data held by private parties.
This notice may be amended to reflect changes in our services, in applicable regulation or in how we operate the site. Any amendment is published at this same address and the last-updated date shown above is adjusted accordingly.
This notice was drafted in Spanish. The English version is a courtesy translation and, in the event of any discrepancy, the Spanish version prevails.