Controller and scope
Ferreyra Abogados & Consultores Asociados, whose office is at Calle José Mártir Olaya 129, Torre A, Oficina 1405, Miraflores, Lima, is responsible for the processing described here. This policy covers use of the website and initial communications that you choose to send by email or WhatsApp.
We process personal data under Peru's Law No. 29733, its current Regulations and the principles of legality, purpose limitation, proportionality, security and transparency.
Data we may process
The information depends on how you use the website:
- Navigation and security: IP address, browser or device type, date, time and requested resource where logged by our hosting and security infrastructure.
- Preferences: your audience-measurement and external-content choices are stored locally in your browser.
- Optional analytics: visit, page, device and approximate referral data, only with your permission.
- Voluntary contact: name, contact details, organisation, description of your enquiry and documents you choose to provide.
Where a communication requires follow-up, relevant data may be included in the firm's internal “Contacts and enquiries” personal data bank. The website has no public contact form: email and WhatsApp buttons open third-party services selected by you. We do not sell personal data or use behavioural advertising.
Purposes and legal basis
We use relevant data to answer an initial enquiry, check potential conflicts of interest, arrange a meeting and, where appropriate, prepare an engagement proposal. Providing it is voluntary; without a name or response channel and enough information to understand the enquiry, we may be unable to respond. Technical records support security, abuse prevention and website continuity.
Audience measurement and third-party maps or videos require prior consent. Refusal or withdrawal does not limit access to essential content. We do not use an enquiry for marketing without separate permission, nor make automated decisions that have legal effects on you.
Enquiries, confidentiality and sensitive data
Sending a message does not by itself create a lawyer-client relationship or confirm that the firm has assumed a deadline or representation. An engagement begins only after express acceptance and the applicable checks.
Until we confirm an appropriate channel, please do not send full case files, identity documents, health or criminal information, passwords or other sensitive material. Once an engagement is formalised, professional secrecy and confidentiality duties also apply.
Recipients and external services
Internal access is limited to lawyers and authorised staff who need the information for the relevant purpose. We may use hosting, security and email providers subject to reasonable technical and contractual safeguards.
If you choose WhatsApp, Meta/WhatsApp also processes the communication. Google may support email, analytics and maps; YouTube or Vimeo may provide embedded videos. These services may involve processing or storage outside Peru under the provider's policies. Maps, videos and analytics remain disabled until authorised. We do not disclose data for third-party resale.
Retention
We retain data only as long as reasonably necessary. Enquiries that do not become engagements will generally be deleted or anonymised within twelve months of the last interaction, unless a minimal record is required for conflict checks, legal claims or compliance.
Client files are retained for the engagement and applicable legal, contractual and professional-liability periods. Technical logs remain only for the shortest operational period compatible with security. Preferences stay in your browser until changed or deleted.
Security and incidents
We use access controls, need-to-know criteria, backups and reasonable safeguards against loss, unauthorised access, alteration or disclosure. No internet-connected channel is completely secure, so confidential information should not be sent through a channel we have not agreed.
If an incident creates a material risk, we will comply with applicable containment, documentation and notification duties under Peruvian law.
Your rights
You may request information, access, rectification, updating, inclusion, cancellation or erasure, objection, withdrawal of consent and portability where applicable. Exercise of these rights is free.
Email ferreyraabogadosyconsultores@gmail.com with “Personal data” in the subject line, your name, a response channel, the specific request and enough information to verify identity. We request only what is necessary to prevent disclosure to someone else.
General statutory time limits are eight days for information, twenty days for access and ten days for rectification, cancellation or objection, subject to permitted extensions. You may seek protection from Peru's National Authority for Personal Data Protection if your request is not satisfactorily addressed.
Children
The website is intended for adults and does not knowingly seek children's data. Enquiries involving minors should be made by their legal representative, except where the law provides otherwise.
Legal framework and updates
This policy is governed by Law No. 29733 and the Regulations approved by Supreme Decree No. 016-2024-JUS. We may update it when the website, providers or law changes. The current version date appears above.
Official sources: Law No. 29733, current Regulations and the ANPD rights guide.

