Updated October 3, 2026
Privacy
Quirós & Quirós is responsible for processing the data it receives through this website. You can contact us about privacy at legal@quirosyquiros.com. This notice distinguishes form inquiries, portal access and optional website analytics.
Inquiries and consent
The form asks for your consent to receive, assess and follow up on your inquiry. We may receive your name, email address, telephone number, legal area, a brief description and, if you provide them, your country, preferred language and how you found the firm. We use these details to handle your inquiry and reply through your chosen contact method. You may withdraw that consent by writing to our privacy email address; withdrawal does not affect earlier lawful processing.
Sending information does not by itself create an attorney-client relationship or mean that the matter has been accepted. Do not submit secrets, sensitive evidence or case documents through the public form. Consent to the inquiry does not constitute acceptance of optional analytics.
Portal access
To handle an access request, we verify the email address using a code sent through Resend or, if you choose that option, through OpenAI’s Sign in with ChatGPT. The firm must approve the account and assign permissions before allowing access to private information. Verifying an identity does not confirm that a matter has been accepted.
Where a professional services contract exists, the processing necessary to provide those services is based on that contractual relationship. This basis does not automatically extend to every access request, optional purposes or every document a person sends. Legal duties to process or retain data must be identified for the relevant service and data; no general duty is presumed for all portal information.
Optional analytics
We activate optional analytics only after you accept it. It is based on consent, which you may refuse or withdraw at any time through “Privacy preferences”, without preventing access to the website or submission of inquiries. Withdrawal stops future analytics events; you can write to our privacy email address to request erasure of data already recorded.
If you accept, we record navigation and interaction events, the public page, source or campaign, device type, language and, when available, approximate country and region. Events use pseudonymous identifiers to measure usage and improve the website. Analytics records do not retain plain-text IP addresses, full referring URLs or organic search terms. Pseudonymisation does not make these data anonymous.
Protection and retention
The inquiry’s name, email, telephone and description fields are encrypted before storage. Administrative access requires verified identity and authorisation. Inquiries submitted through the form have a retention period of 180 days from registration and are deleted by maintenance tasks after that period expires. This period applies to the form record, not to every chat, account or professional case file.
Analytics events are retained for 90 days from each event and deleted by maintenance tasks after that period expires. Your choice to accept or reject analytics is remembered in your browser for up to 180 days to avoid repeating the request; you can change it earlier through “Privacy preferences”. This preference has a separate purpose and retention period from analytics events.
Email access codes expire after 10 minutes. Email sessions last no more than 8 hours and expire after 30 minutes of inactivity; expired technical records are deleted during maintenance. Session expiry does not itself delete the account or its documents.
Retention of accounts, communications and documents related to professional services is determined by the need to manage access or the matter, its closure, the applicable periods for bringing or responding to claims, and any specific legal duties that apply. There is no universal 180-day period for these categories. You may request information about the criteria applicable to your data and ask for erasure when the data are no longer needed.
Providers and recipients
We do not sell personal data. The website uses Cloudflare infrastructure for operation and storage, Resend to send verification emails and notifications, and OpenAI when you choose Sign in with ChatGPT. These providers participate in the stated functions and may process the data needed for them. Data are also accessible to firm personnel authorised to handle the inquiry or service.
Naming these providers does not mean that all data are stored in Panama or, by itself, establish an international-transfer safeguard. You can request information about the recipients and transfers applicable to your processing through our privacy email address.
Rights and contact
You may request access, rectification, erasure, objection or portability of your data and withdraw your consent, where applicable, by writing to legal@quirosyquiros.com. We may need to verify your identity to handle the request. If a specific duty prevents erasure of certain data, we will inform you of its applicable basis and scope.
Terms of use
The content is informational and does not constitute legal advice. The availability of a form or portal does not confirm representation. No legal outcome is guaranteed. For emergencies or immediate deadlines, contact us directly at +507 6200-6863.