Privacy Notice
Carolina Solís Law, Panama ("Carolina Solís Law", "we", "us") is responsible for the personal information described in this notice. For privacy questions or to make a request, contact info@carolinasolislaw.com.
Why we process information
We process the limited information needed to respond to an enquiry, assess whether an initial conversation is appropriate, coordinate a consultation, conduct conflict, jurisdiction and eligibility screening, protect the site and records, document consent, and understand in aggregate which public pages and contact routes are useful. A separate, optional permission is required for educational/newsletter communications. No marketing automation or AI tool makes a legal conclusion, accepts or rejects a matter, or creates a lawyer-client relationship by itself.
Information we may process
The public routing-only enquiry form uses name, email, optional phone number when the person chooses phone or WhatsApp, preferred contact channel, language, broad need category, broad Panama connection, urgency band, controlled source information, and privacy-notice acknowledgment. We may also process consent/version evidence and limited technical security records needed to operate and protect the site.
Do not send confidential facts, financial or health information, IDs, account numbers, documents, exact asset values, dispute details, opposing-party information, beneficiary details, legal narratives, or files through a public form, ordinary email, WhatsApp, URLs, or campaign parameters. The routing-only public form is designed not to request those details. After the appropriate professional and engagement gates, we will identify an approved secure channel if documents are needed.
Website measurement
We use limited first-party measurement to understand in aggregate which public pages and routes are useful. Measurement records contain only the allowed interaction type, query-free route, language, controlled source and medium, environment, and rounded UTC time. They exclude names, email addresses, phone numbers, IP addresses, full user agents, form values, documents, legal, financial or health details, and visitor or client identifiers. We honor Do Not Track and Global Privacy Control signals, suppress automated agents we detect, and exclude tests and previews from production reports. Hosting providers may process operational technical data as described in the provider and retention sections of this notice. Google Search Console provides aggregate search reporting. A click does not establish that an enquiry was received or an appointment booked. A form-accepted indicator means that the sending provider accepted the request; it does not confirm delivery, professional review, or acceptance of a matter.
Legal grounds
We process information when it is needed to respond to a person’s request, with consent where required, to meet applicable professional or legal obligations, and for legitimate operational security and record-protection purposes where applicable law permits. Newsletter communications rely on separate, optional consent and may be stopped at any time. This description does not replace a case-specific professional assessment.
Providers and international processing
Vercel hosts the public site and its routing endpoint. Private Vercel Blob storage holds limited request-deduplication and consent/notice evidence. Resend transmits the limited routing fields to Carolina’s Google Workspace Gmail inbox for delivery and replies. The configured sending domain has open and click tracking disabled. Calendly handles scheduling logistics, and Google Search Console supplies aggregate search reporting.
These providers may process or store data outside Panama, including in the United States, under their applicable contracts and safeguards. Provider data-processing terms: Vercel — https://vercel.com/legal/dpa; Resend — https://resend.com/legal/dpa; Google Workspace — https://workspace.google.com/terms/dpa/terms_dpa.html. Provider-controlled service logs, backup copies and recovery systems are distinct from records that Carolina directly controls; their retention and deletion follow the applicable provider arrangements.
Retention
We retain unconverted enquiries for up to 12 months after the last meaningful interaction and consent/notice evidence for that period plus 12 months. Newsletter records are retained until consent is withdrawn or the program ends; a minimal suppression record may be retained while the outreach program operates plus three years to prevent unwanted recontact. Accepted, declined, conflict, and client-matter records follow separate professional and client-record policies.
These periods apply to records under our control. First-party measurement events without identifiers are deleted from active storage within 90 days. Tests and previews do not count as real demand. The retention periods and obligations for enquiries, consent evidence and matter records apply separately as described above. Deleting an active record does not establish immediate deletion from provider-controlled logs, backups or recovery systems.
Your rights and how to use them
Subject to applicable law, you may request access, correction, cancellation/deletion where applicable, opposition, portability, or withdrawal of consent without affecting processing already carried out lawfully. Send requests to info@carolinasolislaw.com. We may use proportionate verification before acting on a request. You may also contact Panama’s National Authority for Transparency and Access to Information (ANTAI) regarding personal-data protection. We will document and respond to requests through the appropriate controlled process, rather than through the public marketing form.
Security and changes
We use proportionate organizational and technical controls, including purpose limitation, access restrictions and protected provider configurations. No internet transmission or storage method is risk-free. We will update this notice when a material processing practice changes, show the effective date and version, and provide appropriate notice of material changes before applying them where required.
Submitting a form, receiving a response, or participating in an initial fit conversation does not create a lawyer-client relationship. A relationship begins only when Carolina Solís confirms acceptance of the matter and the parties complete the applicable engagement and consent process.