Privacy Policy
Courtesy translation. In case of any discrepancy, the Spanish text prevails.
1. Data controller
GRC Abogados Sociedad de Responsabilidad Limitada (GRC Abogados, SRL), legal entity ID 3-102-904229, domiciled at Barrio Los Ángeles, 75 meters south of the ICE offices, Liberia, Guanacaste, Costa Rica (hereinafter, «GRC Abogados»), is the controller of the personal data collected through this website. You can reach us at info@grcabogadoscr.com or +506 8863-7036.
2. Data we collect
Through the inquiry form we collect your name, phone number, email address, the area of interest and the message you write. When you book a meeting through the site’s calendar we collect the data you enter to arrange it and the status of the booking. We also keep the messages you send us by email or WhatsApp.
The server hosting the site may automatically record your IP address, the date and time of your visit and your browser type, solely for security and technical operation. According to its policy, Hostinger records the IP address, browser, internet provider and access time, and does not state a fixed retention period for those logs.
To prevent misuse of the form, the site keeps for one hour a technical code derived from your IP address, solely to limit the number of submissions. It is not used for any other purpose.
Please do not include confidential case information or documents in the form. That information is received afterwards, through the channels we agree on, once the engagement has begun.
3. Purposes
We use your data only to: (a) handle your inquiry and reply to you; (b) arrange and hold the meeting; (c) follow up on your request; and (d) comply with legal obligations. We do not use it for other purposes without your express and separate consent.
4. Legal basis and consent
We process your data with your consent, which you give by ticking the box on the form after reading this notice, and where necessary to handle your request for information or to comply with a legal obligation. You may withdraw your consent at any time by writing to info@grcabogadoscr.com; withdrawal does not affect what was done before it.
5. Confidentiality
Data is treated with strict confidentiality, particularly where it relates to legal matters. Only the people at GRC Abogados who handle your request and the providers listed in the next section have access to it, and they are bound to use it only to provide us with their service.
6. Providers and transfers
To run the site and handle your requests we use technology providers: Hostinger (website hosting and the firm’s mailbox and outgoing mail server), Google (Google Calendar, where booked appointments are synchronized), the Simply Schedule Appointments scheduling software installed on our own WordPress site and, if you write to us there, WhatsApp (Meta). We do not sell or rent your data, and we do not share it with third parties except where legally required, with your consent, or when necessary to provide the service.
Some of these providers store or process data outside Costa Rica: the site is hosted on Hostinger servers in the United States, and Google and Meta may process data in several countries. Hostinger’s email service may be processed on servers located in Europe. When that happens, we require reasonable protection measures and limit use to what the service needs.
7. Retention
If you do not engage our services, we keep your inquiry data for one year from the last communication and then delete or block it. Appointment records follow the same rule; canceling an appointment does not automatically delete its record, and you may ask for its deletion at any time.
If you engage our services, data is kept during the relationship and for the periods required by law. In no case do we keep data that may affect you for more than ten years from the event it refers to, unless a special provision requires otherwise.
8. Security
We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration, including encrypted communication (HTTPS) and access limited to those who handle your request. The hosting provider makes periodic backups of the site.
9. Cookies and similar technologies
See our Data Processing and Cookies page for details on cookies, analytics and similar technologies.
10. Your rights
Under Law 8968, on the Protection of Individuals regarding the Processing of their Personal Data, you may request access to your data, its rectification or update, its deletion or blocking, object to its processing and withdraw your consent. To exercise these rights, write to info@grcabogadoscr.com stating your name and the right you wish to exercise; we may ask you to verify your identity. We will respond within five (5) business days from receiving your request. If you believe your data has been processed improperly, you may go to the Agency for the Protection of Individuals’ Data (Prodhab).
11. Minors
This site is intended for adults. We do not knowingly collect data from minors.
12. Changes to this notice
We may modify this notice. The current version is the one published on this page with its date. If a change affects the purpose of processing, we will ask for your consent again.
13. Governing law
This notice is governed by the laws of the Republic of Costa Rica, in particular Law 8968 and its Regulations.
14. Contact
For any question about this notice or the processing of your data: info@grcabogadoscr.com · +506 8863-7036.