About This Page

This privacy notice and cookie policy explains how Oropeza Law (“Oropeza”, “we”, “our”, “us”) processes the personal data of visitors to and users of (“Users”, “you”, “your”) our website hosted at www.oropeza-law.com  and www.attorneyinheels.com (the “Site”), including how we use cookies on the Site. This privacy notice concerns our processing of personal data of Users based in the United States where we are offering goods or services to you in the US or where our Site may be used to monitor Users’ behavior as far as it takes place in the US. Please note that this privacy notice has general application to Users from anywhere in the world, although the section on “Users’ rights in relation to personal data” shall not apply to Users located outside of the US.

This privacy notice and cookie policy forms part of and is incorporated into the Terms of Use Agreement applicable to the use of the Site, which are set out in the Site’s Disclaimer wording.

Oropeza Law  is the ‘data controller’ of your personal data and is subject to the US laws under the state attorney general and the Federal Trade Commission (the “FTC”) with effect from 25 May 2018. Oropeza is a ‘data controller’ subject to the FTC only insofar as we are offering goods or services to individuals in the US or where our Site may be used to monitor individuals’ behavior as far as it takes place in the US. Nevertheless, this privacy notice is a general description of how we process Users’ personal data, regardless of where those Users are from.

We may amend this page from time to time. You should check this page periodically for any changes. This page was last updated on June 8th, 2018.

How We Collect Users’ Information

When you use the Site, we collect your personal data in the following ways:

• When you access and navigate around the Site (please see the Cookie Policy below);
• When you communicate with us by email or via the Site, for example when you request support or submit an enquiry; and
• When you sign up to receive our newsletters and other updates.

Where you provide us with personal data relating to others (for example, your colleagues, clients or other contacts based in the US), we understand that you are authorized to provide that information to us, and that you have provided this website privacy notice and cookie policy to them, as appropriate.

The Types of Information We Collect

We may collect the following types of personal data about Users of the Site:

• Names and contact details, including email addresses and telephone numbers;Other information that Users provide through the Site, for example in messages, forms or in emails, including company or organization details and information about any legal services that Users seek;
• Information about Users’ browsing activity collected through the use of cookies including details of your domain name, location and internet protocol (IP) address, operating system, browser version, language, the content viewed during a particular browsing session, and how long a User stayed on a particular page. Please see the Cookie Policy below

We may also collect ‘sensitive personal data’, for example, information concerning health and medical conditions but only where Users volunteer this information in a message, form or email to us.

The legal grounds and purposes for processing Users’ information and how we use it

(i) We may process your personal data because it is necessary for our or a third party’s legitimate interests. Our “legitimate interests” include our interests in operating our firm and the Site in a client focused, efficient and sustainable manner.

In this respect, we may use your personal data for the following:

• to assess the information that you provide through the Site (for example in messages, forms or in emails) and to find out more about you before contacting you in response, where appropriate;
• to interact with you via the Site (for example, to send you promotional material or answer enquiries about our services);
• for record keeping purposes, so that we have a record of the enquiries we receive through the Site;
• outsourcing selected website administration functions to third parties for the purposes of the efficient management of the Site;
• to monitor and evaluate the performance and effectiveness of our services and the Site, including by training our staff or monitoring their performance, and to administer, support or improve the Site.

(ii) We may also process your personal data for our compliance with our legal obligations. In this respect, we may use your personal data in order to assist with investigations (including criminal investigations) carried out by the police and other competent authorities, where those authorities are acting in compliance with US law or the law of an US Member State.
(iii) We may also process your personal data for additional reasons where:

• it is necessary for reasons of substantial public interest(for example, where the due diligence checks we carry out involve our processing data relating to criminal convictions and offences);
• it is necessary for the establishment, exercise or defense of legal claims(for example, to protect and defend our rights or property include the Site and its content); and
• we have your specific or, where necessary, explicit consentto do so (for example, where we process sensitive personal data concerning your health or medical conditions because you have provided this in communications by email or through the Site).

Sharing Users’ Information With Others

For the purposes referred to in this privacy notice and relying on the bases for processing as set out above, we may share your personal data with certain third parties, including:

• our employees, agents and contractors where there is a legitimate reason for their receiving the information, including:

1. those of our staff and consultants who may provide or offer to provide services to        you in response to a request for support or an enquiry made through the Site;
2. providers of outsourced services to us (for example, any third party we engage to administer the Site on our behalf);

• internal and external auditors;
• with a third party in a business transaction, in the event that all or part of Oropeza is sold, merged, dissolved, acquired, or involved in a similar transaction which involves the transfer of the Site.

How Long Users’ Information is Kept

We will retain your personal data for as long as we are interacting with you via the Site, and for as long as permitted or required for legal and regulatory purposes after the last such interaction between you and us.
Subject to any other notices that we may provide to you, we will typically retain your personal data for a period of up to two years after our last interaction with you. However, some information may be retained for longer than this, for example where we need to retain it for the purposes of litigation.

Users’ Rights in Relation to Personal Data

This section is for Users located in the US.
Under the FTC, with effect from 25 May 2018, you have the following rights in relation to our processing of your personal data.  Please note that these rights are not absolute, and we may be entitled to refuse requests where exceptions apply.

• to obtain access to, and copies of, the personal data that we hold about you;
• to require us to correct the personal data we hold about you if it is incorrect;
• to require us to erase your personal data in certain circumstances;
• to require us to restrict our data processing activities in certain circumstances;
• to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on you;
• to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller; and
• where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal.

Note: If you have given your consent and you wish to withdraw it, please contact  voropeza@outlook.com. Please note that where our processing of your personal data relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services.

If you are not satisfied with how we are processing your personal data, you can make a complaint to a data protection supervisory authority in the US, including the data protection regulator in the US country where you or your organization is located.

Contact us

If you have any queries about this privacy notice or how we process your personal data, or if you wish to exercise any of your rights under applicable law, you may contact us via email at voropeza@outlook.com .