Legal, Privacy & Disclaimers

What data we collect

When you contact Spain Law NYC through our website forms or by email, we collect the information you provide: your name, email address, phone number, and any details you share about your legal matter or case. If you choose to tell us in your email how you first heard about Spain Law NYC, we also receive that optional answer. The website does not automatically capture an answer to this question. Optional Google Analytics 4 (GA4), Microsoft Clarity, and Cloudflare Web Analytics (RUM) are loaded only after you accept optional analytics. Cloudflare Web Analytics reports page navigation and site performance metrics, using a manually installed beacon instead of Cloudflare's automatic script injection. Clarity, a Microsoft service, measures page navigation, clicks, scrolling and session replay to help us identify usability problems. The ARA dialog and Contact inquiry form are marked for masking so their contents are not included in Clarity recordings. Google Tag Manager (GTM) remains disabled until its tags are reviewed to avoid duplicate tracking. We do not install separate Clarity tracking snippets through GTM. We do not collect case narratives, form field contents, internal-search text, names, email addresses or telephone numbers through website analytics.

How we use your data

We use your contact information to respond to your inquiry, schedule consultations, and provide legal services if you become a client. We may use an optional first-heard source answer to understand, through limited internal review and aggregated summaries, how people find our services. This answer is voluntary, is not proof of any search-engine conversion, and is not sent to GA4 or GTM as a first-party analytics event. Where the GDPR applies, this limited internal assessment is based on our legitimate interest in understanding the effectiveness of our public communications, subject to your right to object by contacting us. We do not sell, rent, or share your personal data with third parties for marketing purposes. If you use a booking tool (such as Calendly) to schedule a call, that tool processes your data under its own privacy policy.

Purposes and legal grounds

For visitors to whom the GDPR applies, we rely as appropriate on steps requested before a potential engagement or legitimate interests to answer voluntary inquiries, on legitimate interests and relevant legal obligations to protect the service from abuse and secure records, and on consent for optional GA4, Microsoft Clarity, and Cloudflare Web Analytics technologies. These are distinct purposes: accepting analytics never authorizes sending a legal inquiry, and submitting a contact request does not authorize optional analytics. You can withdraw analytics permission in the footer without losing access to ARA or Contact. The applicability of a particular law depends on the processing and relevant connection to the jurisdiction, not simply the company's U.S. location.

Website inquiry processing

When you choose to submit the Spain Law NYC contact form, our Cloudflare-hosted intake service uses Turnstile to verify the submission and stores the information you voluntarily provide in a restricted-access Cloudflare D1 database. A Cloudflare Queue processes the delivery notification. Resend, our outbound email provider, sends a limited notice to our Google Workspace address (razvan@spainlawnyc.com) with the inquiry reference, selected service, full name, email address, optional telephone and the short inquiry you explicitly submitted. The rest of the chat transcript and any case documents are not included in this email notification. Cloudflare, Resend and Google may process technical or communication data under their applicable terms and privacy arrangements. The Contact form requires a short inquiry, your name and valid email (telephone optional). The form is for initial inquiries, not sensitive case documents, and it does not confirm a booking or create an attorney-client relationship.

ARA virtual-assistant questions

You can ask ARA general questions about published Spain Law NYC services without providing your name, email, telephone number or agreeing to optional analytics. Individual questions are processed by the Cloudflare Worker to provide a reviewed public-information answer, subject to technical safeguards and rate limiting. Cloudflare may process network and security metadata, such as IP addresses, request times and abuse signals, for service delivery, security and incident response; this is separate from optional website analytics and may be subject to the provider's applicable logging controls. Ordinary questions are not converted into contact inquiries, are not emailed to our team and do not create an identified chat record in our inquiry database. Conversation messages are displayed in your active browser session and cleared when you close the assistant; do not share personal identifiers, confidential records or case documents in informational chat.

Only if you voluntarily choose to contact our human team and explicitly submit a request will we collect your full name, a valid email address, an optional phone number and the short inquiry summary you review or edit. Contact submissions use Cloudflare Turnstile, a private D1 record, a Queue and Resend to our Google Workspace mailbox. The conversation history is not automatically included. Submission is not a confirmed appointment or an attorney-client relationship. Previously collected identity-bound ARA contact records from the earlier workflow remain subject to their existing 30-day rolling retention and deletion maintenance; changing the current chat does not erase those historical records. Optional aggregated topic analytics and separate third-party AI classification remain disabled unless separately approved and disclosed. When the ARA conversational model is enabled, the Cloudflare Worker passes the screened public question and up to two preceding screened questions to Cloudflare Workers AI for a short answer using our reviewed published service facts. This is necessary conversational processing, not an analytics-cookie preference, and does not by itself submit an inquiry to our team. The application does not save informational conversation transcripts in D1 or send them to advertising, Google Analytics, Google Workspace or Resend. Cloudflare may process the supplied content and technical metadata under its applicable AI service terms, privacy terms and security settings; do not submit personal details, sensitive legal facts or case documents. If the inference service is unavailable, ARA can refer you to our human team without forwarding your chat. ARA is software, not a lawyer and does not give legal advice. To request access, correction or deletion, contact the address below.

Data retention

We retain contact requests for the period reasonably needed to respond and for applicable legal, professional, security or dispute obligations; the precise schedule depends on the record category and cannot be inferred from the separate historical ARA chat-contact 30-day cleanup. If you become a client, matter records follow applicable professional retention obligations. Any optional first-heard source answer stays within the original inquiry communication and follows the same retention criteria as that communication, including applicable legal recordkeeping or dispute obligations. We do not set a separate identifiable source-tracking retention period; any non-identifying aggregate channel totals may be retained for business review. You may request erasure by emailing razvan@spainlawnyc.com; some records may need to be retained when required by law or legitimate legal obligations.

Cookies

Only necessary site operations (including the basic ARA answer route, form delivery, security and fraud prevention) work without analytics consent. We offer one optional analytics choice for Google Analytics 4 and Microsoft Clarity, without separate chat checkboxes. GTM is currently disabled. GA4/Clarity scripts are not loaded before an affirmative choice; rejecting leaves these tags unloaded. This site stores the yes/no preference locally in your browser. The browser's Global Privacy Control signal, when enabled, is conservatively treated as a request to keep optional Google analytics off even if a prior browser preference says otherwise. You can review your choice through Analytics preferences in the footer. After acceptance, Google may set first-party analytics cookies such as _ga and _ga_*, and Clarity may set _clck and _clsk; you may later withdraw permission, at which point the page reloads to stop the already-loaded scripts and attempts to remove accessible first-party analytics cookies. Withdrawal does not recall data already transmitted or guarantee removal of third-party/server records. Our own analytics instrumentation does not transmit internal-search wording, inquiry content or ARA chat text. Any new GTM tags, advertising or AI analytics require separate review before activation.

Your rights

Depending on the applicable law and exceptions, you may have rights to access, correct, erase or object to certain processing, restrict processing, or request data portability. Requests can be made to razvan@spainlawnyc.com; we assess and answer within the deadline applicable to the request and jurisdiction. Where California privacy law applies to our processing, applicable opt-out rights and recognized browser preference signals are honored. We do not treat optional analytics consent as permission to sell or share data for cross-context behavioral advertising.

Third-party tools

If you consent to analytics, Google LLC may receive the Google Analytics and Tag Manager requests necessary to process page views and coarse interaction events (phone/email/WhatsApp link click, consultation-page click, and a count of internal-search submissions), including standard technical/browser information. Events exclude search terms, form fields and contact destination values. We do not send arbitrary URL query strings or case-specific contents as analytics page locations. Google processes any data under its service terms and privacy documentation. We recommend that visitors avoid including sensitive case information in page URLs. External booking and communication providers separately process information under their own policies. We use analytics for measuring website effectiveness, not to give individual legal advice or create user profiles for advertising.

Contact for privacy questions

For questions about this privacy policy or your data, email razvan@spainlawnyc.com.