Translation. This is an English translation provided for convenience. In case of any discrepancy, the Spanish version prevails.
At Vera Gutiérrez Abogados we treat personal data with the same confidentiality we apply to our clients' information. This policy explains what data we collect through veragutierrez.cl and the contact channels we publish, why we use it, who we share it with, how long we keep it and how you can exercise your rights.
Processing is governed by Chilean Law No. 19.628 on the protection of private life and, from 1 December 2026, by the regime established by Law No. 21.719. This policy has been drafted in accordance with both.
1. Data controller
| Controller | Vera Gutiérrez Abogados SpA |
|---|---|
| Tax ID (RUT) | 78.209.416-5 |
| Address | Av. Presidente Kennedy 5600, of. 507, Vitacura, Santiago, Chile |
| Privacy contact | contacto@veragutierrez.cl |
2. What data we process
a) Data you provide
- Contact form: name, email, phone and company (the last two are optional), subject, the content of your message, the page from which you send it, the site language and your acceptance of this policy.
- Meeting booking: name, email, selected date and time, and any answers you enter when booking.
- Email and WhatsApp: contact details and the content of the communications you choose to send us.
Please do not include sensitive data (for example, health information) or unnecessary third-party data in your first message. If you do, we will process it only to reply to you and subject to professional secrecy.
b) Technical browsing data
When you visit the site, the hosting provider automatically logs technical data such as your IP address, browser type, requested page and the date and time of the visit. We use it only for the operation and security of the site.
c) What we do not do
- We do not use analytics, advertising or tracking cookies, or third-party measurement tools.
- Fonts, images and other site resources are served from our own domain, with no calls to external services when pages load. The cover photograph comes from Unsplash but is hosted on our server: your visit does not share data with Unsplash.
- We do not profile users or make decisions based solely on automated processing.
- We do not sell or transfer personal data for commercial purposes.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Answering your enquiry and arranging a meeting. | Your consent, given when you submit the form or contact us, and pre-contractual steps taken at your request. |
| Checking for conflicts of interest before accepting an engagement. | Compliance with the lawyer's professional ethics duties and our legitimate interest. |
| Preparing a service proposal, if you request one. | Pre-contractual steps at your request. |
| Keeping the site secure and preventing form abuse. | Our legitimate interest in protecting the site and its users. |
| Complying with legal obligations or requests from competent authorities. | Compliance with a legal obligation. |
If an enquiry leads to a professional engagement, the processing of client data will also be governed by the services agreement and by professional secrecy.
4. Who we share your data with
We do not disclose your data to third parties, except to the following providers, who process it on our behalf as processors and only as necessary to provide their service:
| Provider | Service | Location |
|---|---|---|
| Netlify, Inc. | Website hosting | United States |
| Formspree, Inc. | Receiving and forwarding form messages | United States |
| Calendly LLC | Meeting scheduling, if you book one | United States |
| Corporate email provider | Sending and receiving email | Depending on the provider |
If you choose to contact us via WhatsApp, that platform processes your data under its own policies, as an independent controller.
We may also disclose data when required by law or ordered by a competent judicial or administrative authority, within the limits of professional secrecy.
5. International transfers
The providers listed above store information on servers outside Chile, mainly in the United States. These transfers rely on the contractual data protection safeguards offered by those providers and, where applicable, on your consent, which you may withdraw at any time.
6. How long we keep data
- Enquiries that do not lead to an engagement: up to 24 months from the last contact, to handle follow-ups and manage potential conflicts of interest. They are then deleted.
- Client data: for the duration of the professional relationship and, after it ends, for the limitation period of any related claims and as required by applicable legal obligations.
- Technical browsing logs: for the period set by the hosting provider for security and operational purposes.
- Messages in Formspree: we periodically delete them from the platform once they have been added to our enquiry records.
7. Your rights
As a data subject, you may exercise the rights of:
- Access: to know whether we process your data and obtain information about that processing.
- Rectification: to correct inaccurate, outdated or incomplete data.
- Erasure: to request deletion of your data where applicable.
- Objection: to object to specific processing, including processing based on our legitimate interest.
- Portability: to receive your data in a structured, commonly used format.
- Blocking: to request temporary suspension of processing in the cases provided by law.
You may also withdraw your consent at any time, without affecting the lawfulness of prior processing.
How to exercise them
Send an email to contacto@veragutierrez.cl with the subject line "Data subject request", stating your name, the right you wish to exercise and a means of reply. If needed to verify your identity, we will ask for additional information. Exercising these rights is free of charge.
We will reply within the legal deadlines. Under Law 21.719, the deadline is thirty calendar days from receipt of the request, extendable once for up to thirty additional days.
If your request is denied or not answered in time, you may file a complaint with the Personal Data Protection Agency, once it begins operating, or with the competent courts under Law 19.628.
8. Security
We apply technical and organisational measures proportionate to the risk: encrypted communications via HTTPS, security headers on the site, restricted access with two-factor authentication to accounts containing data, and the confidentiality imposed by professional secrecy on all information received. If a security breach affecting your data were to occur, we would manage and report it in accordance with the law.
9. Minors
This site is intended for adults. Enquiries concerning a minor must be made by their parents or legal guardians.
10. Changes to this policy
We may update this policy to reflect regulatory changes or changes to our services. Each new version will be published on this page with its effective date.