GUÍÑEZ GALAZ ABOGADOS
Privacy Policy
Last updated: June 14, 2026
1. Data Controller
Guíñez Galaz Abogados, domiciled at Calle Hernán Correa 2140, Galilea, Curicó, Maule Region, Chile, is the controller of personal data collected through www.guinezgalaz.cl.
Privacy enquiries: dguinezlegal@gmail.com
2. Data We Collect
2.1 Contact form
- Full name
- Email address
- Type of legal enquiry
- Message text
- IP address (to prevent spam and abuse)
2.2 Online payments
Payments are processed by Transbank Webpay Plus. We do not store full card numbers. We retain only:
- Payer name and email (for receipt)
- Service description and amount
- Purchase order number and authorisation code
- Last 4 card digits (provided by Transbank)
- Transaction status and date
2.3 Web analytics
We use Google Analytics 4 with IP anonymisation enabled. Analytics data is only collected if you give your explicit consent via the cookie banner.
3. Purposes and Legal Basis
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form data | Respond to your legal enquiry | Consent (Law 19.628, art. 4) |
| Payment data | Process transaction & accounting obligations | Contract performance & legal obligation |
| IP address | Prevent spam and rate-limit abuse | Legitimate interest |
| Analytics (GA4) | Improve site content and usability | Consent |
4. Third-Party Recipients
- Transbank S.A. — Chilean payment processor. See Transbank's privacy policy.
- Supabase Inc. — cloud database (AWS, us-east-1 or EU). Encrypted at rest and in transit.
- Resend Inc. — transactional email service for contact notifications and payment receipts.
- Google LLC (Analytics) — only with consent. Anonymised data. See Google's privacy policy.
- Vercel Inc. — hosting infrastructure. Server logs retained for 30 days.
We do not sell or share your personal data with third parties for commercial purposes.
5. Retention Periods
- Contact messages: 2 years from receipt, or until you request deletion.
- Payment records: 6 years (Chilean Tax Authority requirement, Tax Code art. 200).
- IP logs: 90 days.
- Analytics data: 14 months (GA4 default).
6. Your Rights
Under Chilean Law N.º 19.628 on the Protection of Private Life you have the right to:
- Access: request what personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Cancellation: request deletion when data is no longer needed.
- Opposition: object to processing in certain circumstances.
To exercise your rights, email dguinezlegal@gmail.com with subject line "Privacy Request". We will respond within 30 business days.
7. Security
We implement TLS encryption in transit, encryption at rest (Supabase/AWS), role-based access control, Row Level Security on the database, and two-factor authentication (TOTP) for administrative access.
8. Cookies
We only set analytics cookies (Google Analytics) with your explicit consent. You may withdraw consent at any time by clearing cookies in your browser or declining the cookie banner on your next visit.
We do not use advertising tracking cookies or third-party cookies without your consent.
9. Changes to This Policy
We may update this policy periodically. The "Last updated" date at the top of this page always reflects the current version. Material changes will be announced via a prominent notice on the site.
10. Governing Law
This policy is governed by the laws of the Republic of Chile. Any dispute shall be submitted to the ordinary courts of Curicó, Maule Region, Chile.