Privacy and Personal Data Processing Policy
Last updated: September 3, 2026
I. Data controller
The controller of personal data collected through this website is Ibarra & Compañía, Abogados Asociados Limitada, Chilean tax ID RUT No. 77.341.790-3, with address at Alonso de Córdova 2860, Office 402, Vitacura, Santiago, Chile (the "Firm").
Contact point for personal data matters: privacy@ibarrayasoc.com.
II. Scope
This policy applies to the processing of personal data carried out by the Firm through ibarrayasoc.com.
It does not apply to processing carried out by the Firm under an accepted professional engagement. That processing is governed by the engagement agreement, by professional secrecy, and by the rules governing the practice of law.
III. What data we process, why, and for how long
| Category | Purpose | Retention |
|---|---|---|
| The content of your enquiry and contact details you include in your email, such as your name, company, email address, and telephone number. | To answer your enquiry and, where appropriate, assess whether the Firm can take on the matter. | Six months from the last contact, where the enquiry does not lead to an engagement. |
| Minimum conflict-of-interest record: date, who enquired, name of the opposing party, and general subject matter. | To evidence, if needed, what information the Firm received and from whom, protecting both the enquirer and the Firm's clients. | Six months from the last contact. |
| Technical browsing data, such as IP address, device, browser, pages visited, date, and time. | To keep the website operating and secure and to prevent abuse. | For the period needed to operate and secure the service, according to the hosting provider's operational logs. |
The Firm does not build profiles for advertising purposes, does not sell personal data, and does not take automated decisions producing legal effects on users.
IV. Basis for processing
You decide what information you provide and when. The Firm does not require data that is unnecessary for the purpose stated in each case.
Until November 30, 2026, processing is based on the data subject's authorization and on the legal provisions that permit it, under Law No. 19,628. From December 1, 2026, when Law No. 21,719 enters into force, the Firm will identify for each processing activity the lawful basis applicable under the new regime and will state it in this policy.
V. What to tell us, and what not to, by email
You may tell us the general subject matter of your case, for example, "dismissal", "supplier contract", or "debt collection", and the name of the opposing party where relevant. That is enough to route you to the appropriate lawyer.
Please do not send the details of your case, health information, or the names of other people. A lawyer reviews those materials, through a secure channel, after the first contact.
- Before an attorney-client relationship exists, the information you send may not be covered by professional secrecy.
- If you turn out to be the opposing party of a client of the Firm, receiving your materials may create a conflict of interest that harms you both.
- An account of a matter may contain sensitive medical, family, or judicial data, which the Firm has not requested and has no basis to process at that stage.
If you send materials nonetheless, the Firm may decline to review them and may delete them, and will tell you so.
VI. Who personal data is shared with
The Firm does not sell or disclose personal data to third parties for commercial purposes.
To operate the website and its communications, the Firm uses Netlify as its hosting provider and Google Workspace as its email provider. Those providers may process personal data to provide those services.
Google Fonts provides the typefaces used on this website. When those fonts load, your browser may communicate technical data, such as your IP address and browser, to Google, according to that third party's policies.
Data may also be disclosed where a competent authority so requires under the law, subject to the constraints imposed by professional secrecy.
VII. International transfers
The technology providers listed above may host or process information outside Chile. The Firm will update this policy when appropriate to reflect the countries of processing and safeguards applicable to those transfers.
VIII. Security
The Firm applies reasonable technical and organizational measures to protect data against loss, misuse, unauthorized access, and disclosure. These include encrypted transmission between your browser and the website, access controls, and confidentiality commitments from everyone involved in the processing.
Those who work on the processing of this data are bound to keep it confidential, a duty that survives the end of the relationship that gave rise to it. The Firm's lawyers are additionally bound by professional secrecy.
No system is infallible. Should a breach affecting your personal data occur, the Firm will act in accordance with the notification duties imposed by the law in force at that time.
IX. Your rights
You may ask the Firm, in respect of your own personal data, for:
- Access, to know what data the Firm processes about you, for what purpose, where it came from, and to whom it has been disclosed.
- Rectification, if data is inaccurate, incomplete, or out of date.
- Erasure, objection, and temporary blocking of processing, where permitted by law.
- Portability, from the entry into force of Law No. 21,719, where its legal requirements are met.
To exercise these rights, write to privacy@ibarrayasoc.com, identifying yourself and stating which right you are exercising. The Firm will respond within the legal time limits. Exercising these rights is free of charge.
If you are not satisfied with the response, you may apply to the authority or court designated by law.
X. Cookies
As of the date of this policy, the website does not use its own non-essential cookies or analytics and advertising cookies. Google Fonts may receive technical data to deliver typefaces, but it is not used to create advertising profiles through this website.
XI. Minors
The website is aimed at companies and professionals. It is not directed to minors, and the Firm does not knowingly collect their personal data through it.
XII. Third-party links
The website may link to third-party websites. The Firm does not control their privacy policies or processing activities and recommends reviewing them before providing personal data.
XIII. Applicable legal framework and change of regime
As of the date of this policy, the processing of personal data in Chile is governed by Law No. 19,628. Law No. 21,719, which replaces that regime and creates the Personal Data Protection Agency, enters into force on December 1, 2026.
The Firm will update this policy before that date to reflect the incoming regime.
XIV. Changes to this policy
The Firm may amend this policy. The version in force is the one published on the website, with its last updated date shown at the beginning. Where a change is substantial, notice will be given prominently on the website.
XV. Contact
Questions about this policy or the processing of your personal data: privacy@ibarrayasoc.com.