Privacy Policy
How the firm handles the personal data it receives through this website and through its internal tools.
Effective October 9, 2026. Last updated: October 9, 2026.
1. Data controller
The controller of the personal data covered by this policy is Murillo y Guzmán Abogados y Notarios, with offices in Barrio San Martín (Gamonales), across from the EBAIS (public health clinic), Ciudad Quesada, San Carlos, Alajuela, 21001, Costa Rica.
- Email: murilloyguzman@gmail.com
- Phone: +506 2460-7226
This policy is governed by Costa Rica’s Law on the Protection of Individuals with Regard to the Processing of Their Personal Data (Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales, Law No. 8968) and its regulations, and it supplements the website’s Legal Notice.
The English version of this policy is a translation of the Spanish original. If there is any discrepancy between the two versions, the Spanish text prevails.
2. What data we receive through this website, and why
This website has no database or server of its own that receives or stores your data. It is a static website: it has no user accounts, does not ask you to register, and does not set its own cookies or use any analytics or advertising tools.
The firm receives only the data you choose to send:
- Quote request form. The form does not send anything to the website: using the information you enter (name, phone number or email, service, timeframe, preferred format and a description of your matter), your own browser prepares a WhatsApp message or an email, which you review and send if you wish.
- WhatsApp, email and phone. The links on this website open the WhatsApp app, your email program or a phone call on your device. We receive whatever you write to us or tell us through those channels.
- Appointments and payments. If you request an appointment, we will exchange with you the information needed to schedule it and, where applicable, your payment receipt. The firm does not receive or store card data: if online payment links or an online booking calendar are enabled, those services are provided directly by their providers, under their own privacy policies.
We use this data solely to respond to your inquiry, prepare a quote, schedule your appointment and, if you engage us, provide our professional services. We do not sell it, we do not transfer it to third parties, and we do not use it for advertising. We keep it for as long as necessary for those purposes and for the periods required by law and by professional rules.
Please do not send confidential documents or information until the firm has confirmed its engagement.
3. Website hosting
This website is hosted on GitHub Pages, a service of GitHub, Inc. Like any web server, GitHub may log technical data about each visit (for example, your IP address and browser type) for security and operational purposes. The firm has no access to those logs and does not use them. See the GitHub General Privacy Statement.
4. Third-party services used by this website
- Google Maps. The home page and the contact page display an embedded Google Maps map, which is loaded from Google’s servers and may receive your IP address and use Google cookies.
- Google Fonts. The website’s typefaces are downloaded from Google Fonts servers, which receive your IP address and technical data about your browser.
- WhatsApp. Messages you send via WhatsApp are transmitted through that service, which is owned by Meta Platforms, Inc.
These services apply their own policies: the Google Privacy Policy and the WhatsApp Privacy Policy.
5. Professional secrecy
Information you share with the firm in connection with a consultation or a matter is protected by the professional secrecy (secreto profesional) that Costa Rican law imposes on attorneys and notaries public (civil-law notaries). The firm’s attorneys and staff keep it strictly confidential and disclose it only when required by law or authorized by you.
6. Your rights and how to exercise them
Under Law No. 8968, you have the right to:
- Access: know what data about you the firm holds and how it is used.
- Rectification: request that inaccurate or incomplete data be corrected or updated.
- Deletion: request that your data be deleted, except for data the firm must keep under a legal or professional obligation (for example, data contained in a court file or in the notarial protocol).
- Consent: withdraw any consent you have given and object to the transfer of your data.
To exercise these rights, write to murilloyguzman@gmail.com or visit our office, and include your name, the right you wish to exercise and a way to reply to you. We may ask you to verify your identity. There is no charge, and we will respond within the time limit set by law. If you believe your request was not properly addressed, you may file a complaint with Costa Rica’s data protection authority, the Agency for the Protection of Residents’ Data (Agencia de Protección de Datos de los Habitantes, PRODHAB).
7. Internal tools that use Google services
The firm uses its own internal tool that connects to Google Calendar to keep its work schedule. It is not an app offered to the public: it is used only by the firm, with the firm’s own Google account.
- What it does: it creates, searches for and deletes, in the firm’s own calendar, events for court deadlines and judicial auction (remate) dates, and invites the internal accounts of the firm’s staff to those events.
- What permission it requests: only the
https://www.googleapis.com/auth/calendar.eventsscope, which allows it to view and edit calendar events. It does not request access to email, contacts, Google Drive or any other service. - Which account it accesses: only the firm’s Google account. The tool does not access the accounts or calendars of clients, website visitors or anyone else.
- How data is stored: access credentials are stored only on the firm’s computers. Events remain in the firm’s Google calendar. Data obtained from Google is not sold, is not shared with third parties, is not used for advertising, and is not used to train artificial intelligence models.
- How to revoke access: the account holder may withdraw the permission granted to the tool at any time at myaccount.google.com/permissions.
The use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. Changes to this policy
The firm may update this policy when the website, its tools or the applicable law change. The current version is always the one published on this page, with its last-updated date.
9. Contact
For any questions about this policy or about your personal data, write to murilloyguzman@gmail.com or call +506 2460-7226.