Privacy notice

Quiroz & Portilla Abogados, S.C. (“QP Abogados”, “the firm” or “we”), with its address at Av. Gustavo Baz número 59, Fraccionamiento Bosques de Echegaray, Municipio de Naucalpan, Estado de México, C.P. 53310, telephone +52 55 8561 9584 and website https://qpabogados.com, is the controller responsible for processing your personal data.

This notice covers both the data you provide to us through this website and the data you provide in the course of a professional relationship with the firm. Throughout the document the two are clearly distinguished, because they are not the same.

QP Abogados processes your personal data under the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality and accountability, and safeguards its confidentiality and security through the administrative, technical and physical measures set out in the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations.

For any matter relating to this notice you may write to us at contacto@qpabogados.com.

The data with which we can identify and contact you is solely what you type into the contact assistant, and we do not obtain it from any other source or from third parties. There are three:

• Name
• Telephone number
• Subject of the enquiry, chosen from a list of our practice areas

There is no other form and no other field, and in particular the site does not ask you for your email address: if you write to us by email or on WhatsApp, all we receive is whatever you chose to put in that message.

Alongside those three items, the assistant keeps a technical record of the enquiry itself. It consists of a random identifier we generate for that conversation, the step you are on or stopped at, the subject you chose, the language you are viewing the site in and the part of the site you opened the assistant from. That record is created the moment the assistant opens — before you type anything — and is sent from your browser to the firm’s spreadsheet described in section 5, operated by Google LLC. It is sent again as you move through the steps and when you leave the conversation.

That technical record contains neither your name nor your telephone number. Those two only leave your browser if you tick the consent box described in section 4; without it they are not sent, not even if you abandon the conversation after typing them. The identifier is random and on its own does not allow you to be identified.

Independently of all the above, and as happens on any website, the hosting provider receives the IP address you connect from together with the technical data of each request — date and time, browser type and operating system — and Google LLC also receives it in the record transmissions described above. This is unavoidable in order to deliver the pages to you and to keep the service secure, it happens with or without analytics tools, and we do not use it to identify you or to build profiles.

If you consent through the cookie banner, we also collect browsing data — browser type, operating system and page interaction data, associated with your IP address — through cookies and local storage, as described in section 9 of this notice. Without that consent it is not collected.

The site does not collect sensitive personal data, asset or financial data, or identification documents. We expressly ask that you not send identification, deeds, contracts or documents of any kind through these channels before we confirm in writing the scope of any potential engagement.

Sending an enquiry from this site does not create an attorney-client relationship, nor does it place what you write under attorney-client privilege.

Engaging a legal service is a different matter. If the enquiry moves forward and you engage the firm, the legal relationship requires data that you provide to us directly and that varies with the matter at hand:

• Identification data: name, age, sex, marital status, handwritten and electronic signature, RFC and CURP tax and population registry numbers, address, telephone and email
• Employment and professional data: the company you work for, position, powers of representation and professional experience
• Asset and financial data: bank accounts, CLABE interbank number, account statements and tax information for invoicing

We do not collect sensitive personal data unless it is strictly necessary to provide a specific legal service, and then only with your express consent.

Primary purposes for the data you leave on this site, necessary for the legal relationship your enquiry gives rise to:

• Receiving, handling and managing your request for information, a quote, an appointment or legal advice, whether it reaches us through this site or through the firm’s institutional channels
• Verifying and confirming your identity
• Contacting you by telephone, WhatsApp or email to attend to your enquiry
• Following up on the enquiry and telling you whether the matter falls within our practice
• Checking that no conflict of interest exists before accepting an engagement
• Keeping an internal record of the enquiries we receive

If you engage the firm’s services, your data is also processed for the primary purposes inherent in that relationship:

• Providing legal services and professional advice
• Drafting, managing and performing agreements
• Invoicing and collecting fees
• Complying with legal, tax and regulatory obligations
• Building physical and digital case files
• Responding to requirements from the competent authorities
• Filing and pursuing electronic procedures on the platforms, systems and portals of the competent authorities — including, without limitation, IMPI and the Ministry of Economy — in order to carry out, follow up and complete the engaged services handled online, such as trademark registration and the incorporation of Simplified Joint-Stock Companies (S.A.S.)
• Communicating with you by email and through the WhatsApp messaging application in order to follow up on the engaged services: sending progress updates, information on their status and notice of their completion

Secondary purposes, which are not necessary in order to assist you and for which your consent is optional: statistical processing, website performance analysis and advertising campaign attribution. They are carried out only on browsing data and only if you authorize them through the cookie banner. We do not use them to build profiles of you or to take automated decisions affecting you. You may refuse or withdraw them at any time through the “Cookie preferences” link in the footer, without affecting how your enquiry is handled.

Before the assistant files your telephone number you are asked to tick an acceptance box. That box is not pre-ticked, and without it the submission is not processed: your consent to the processing of your name and telephone number is prior, informed and express.

The box governs every route those two items could take, not just the send button: if you type your telephone number, do not tick the box and close the window, the number does not leave your browser.

The technical record described in section 2 — conversation identifier, step, subject, language and origin — is sent regardless of that box, even if you open the assistant and close it without typing anything. It is processed on the basis of our legitimate interest in knowing where enquiries break off, it contains no data identifying you, and it is not combined with any other source in order to identify you.

In order to run the site, deliver your enquiry to the firm and communicate with you while your matter is being handled, your data is processed by the following providers, which act as processors on the controller’s behalf, under confidentiality undertakings and without the firm authorizing them to use it for their own purposes:

• The hosting and delivery provider for this website, which processes the request carrying your data
• The email provider that delivers the notification of your enquiry to the firm’s institutional account
• Google LLC, through Google Sheets, where the record of enquiries received is kept
• Meta Platforms, Inc., through the WhatsApp messaging application, over which the firm communicates with you: your telephone number and the messages we exchange travel through that channel, which is what delivering them requires, and it takes no part in any other processing of your data
• Google LLC, through Google Analytics and the Google Ads conversion tag, which process browsing data only if you consented through the cookie banner

Messaging warrants a clarification, because it is not a service tailored to the firm: WhatsApp runs under Meta’s own terms and privacy policy, which we neither set nor can amend. What is in our hands is the use we make of that channel, and it is the use declared in section 3: attending to your enquiry and following up on the services you have engaged. What we ask in section 2 therefore applies here all the more: do not send identification, deeds, contracts or documents through this channel.

Some of these providers operate servers outside Mexico. Their involvement constitutes a remittance and not a transfer, under the Law and its Regulations.

We do not sell your personal data, we do not rent it and we do not share it for commercial or advertising purposes. The data you leave on this site is not transferred to anyone.

Within an engaged legal service, your data may only be transferred to a third party in the following cases:

• To competent authorities, in order to respond to legal or regulatory requirements
• To accounting and tax service providers, for invoicing and compliance with tax obligations
• To notaries public and judicial authorities, for the formalization of legal acts and the conduct of proceedings

The above are transfers, that is, the cases in which your data passes to a third party that decides on its own what to do with it. This does not cover the involvement of the providers named in section 5 — among them the messaging application we use to communicate with you — which process your data on the firm’s behalf and solely in order to provide us with a service: the Law calls that a remittance and not a transfer, which is why they are declared in that section and not in this one.

The transfers the Law allows without your consent are those set out in its article 37, including where required by a competent authority, a legal provision or a court order. Any additional transfer requiring your authorization will be requested from you in advance and expressly.

You have the right to access your personal data, to rectify it where it is inaccurate or incomplete, to cancel it where you consider it is not required for the stated purposes, and to object to its processing on legitimate grounds.

To exercise any of these rights, send a request to our Personal Data Protection Department, at contacto@qpabogados.com with the subject line “Datos Personales”, or in writing to the address given in section 1, including the following:

• Your name and a means of communicating our response to you
• A copy of official identification proving your identity or, where applicable, the legal representation under which you act
• A clear and precise description of the data concerned and of the right you wish to exercise
• Any information that helps us locate your data

We will respond to your request within a maximum of twenty business days from its receipt and, where it is well founded, we will give effect to it within the fifteen business days following our response. Exercising these rights is free of charge; only justified shipping or reproduction costs may be charged.

You may withdraw at any time the consent you gave for the processing of your personal data, by writing to contacto@qpabogados.com from the address you contacted us from or attaching official identification. Withdrawal takes effect going forward and does not affect the lawfulness of processing carried out before it was received.

Please bear in mind that withdrawing consent for the primary purposes may make it impossible to attend to your enquiry or to continue the contractual relationship, since those are the purposes that make both possible.

Through the same channel you may also ask us to limit the use or disclosure of your data, without fully withdrawing your consent, or register with PROFECO’s Public Registry to Avoid Advertising (REPEP), at https://repep.profeco.gob.mx.

For the secondary purposes described in section 3 — statistical processing, website performance analysis and advertising campaign attribution — you do not need to write to us: they are managed through the “Cookie preferences” link in the footer or from your browser settings, and your choice takes effect immediately.

This site uses cookies, local storage and third-party measurement tools — Google Analytics and the Google Ads conversion tag — alongside the technical cookie that remembers the language you are viewing the site in and the one that records your privacy choice.

No analytics or advertising cookie is set, and none transmits data to third parties, until you give your express consent in the banner shown on your first visit. You may accept all of them, reject the non-essential ones or choose by category, and you may change or withdraw your choice at any time through the “Cookie preferences” link in the footer or from your browser settings.

The detail of every cookie — name, who sets it, what it does and how long it lasts — is in our cookie policy, linked in the footer.

We keep the data from your enquiry for as long as is necessary to attend to it and, thereafter, for as long as a legal obligation or a reasonable need to evidence our conflict-of-interest checks exists. Once that period ends, the data is blocked and deleted.

We apply reasonable administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction, or unauthorized use, access or processing. The site is served over an encrypted connection and access to the record of enquiries is restricted to the people in the firm who need to handle them.

If you believe your right to the protection of personal data has been infringed, you may turn to the competent authority for the protection of personal data held by private parties.

This notice may be amended to reflect changes in our services, in applicable regulation or in how we operate the site. Any amendment is published at this same address and the last-updated date shown above is adjusted accordingly.

This notice was drafted in Spanish. The English version is a courtesy translation and, in the event of any discrepancy, the Spanish version prevails.