Privacy Policy & Personal Data Treatment

1. Data Controller Identification (Responsable del Tratamiento)

In compliance with Statutory Law 1581 of 2012, Regulatory Decree 1377 of 2013, and Circulars issued by the Superintendencia de Industria y Comercio (SIC) of Colombia, Capital M Law is the entity responsible for the collection, storage, and processing of personal data gathered through our website, digital intake forms, legal consultation bookings, and formal client representation.

2. Categories of Information Collected from International Clients

Due to the rigorous nature of Colombian immigration proceedings before the Ministry of Foreign Affairs (Cancillería), real estate registries at Oficinas de Registro de Instrumentos Públicos, and corporate filings with the Cámara de Comercio de Medellín, we may collect and process:

• Identification & Civil Records: Full legal name, date of birth, nationality, passport copy, Cédula de Extranjería, marriage certificates, birth certificates, and apostilles.
• Contact Information: Residential address (abroad and in Colombia), email address, telephone number, WhatsApp number, and emergency contacts.
• Financial & Transactional Records: Foreign and Colombian bank statements, proof of income, foreign direct investment wire receipts, Central Bank exchange declarations (Formularios cambiarios del Banco de la República), and DIAN tax declarations.
• Judicial & Criminal Background Clearances: FBI background checks, police certificates, Interpol records, and certifications legally required by Cancillería for visa eligibility.
• Consultation & Payment Metadata: Payment confirmation records generated via our scheduling partner Calendly, Stripe, Wompi, or PayPal. Note: Capital M Law does not store unencrypted credit card numbers or raw CVV codes.

3. Purpose of Processing & Professional Privilege (Secreto Profesional)

Your personal information is handled under strict legal professional secrecy, protected by Article 74 of the Political Constitution of Colombia and the Código Disciplinario del Abogado (Ley 1123 de 2007). Personal data is used exclusively to:

4. Client Rights under Colombian Law (Derechos ARCO)

As the titleholder of personal data under Law 1581 of 2012, whether you reside in Colombia or abroad, you possess the right to:

1. Conocer (Access): Request confirmation and access to all personal data held in our systems free of charge.
2. Actualizar y Rectificar (Update & Rectify): Correct inaccurate, incomplete, or misleading records.
3. Suprimir (Deletion): Request data erasure when processing does not respect constitutional and legal principles (subject to mandatory legal retention periods under Colombian law).
4. Revocar Autorización (Revoke Consent): Withdraw authorization at any time where no contractual or statutory obligation requires maintenance of records.

5. International Transfers & Technical Security Safeguards

To provide modern legal representation, we utilize cloud infrastructure and booking partners compliant with high international security standards:

• Calendly LLC: Automated appointment management and calendar synchronization (Calendly Privacy).
• Google Workspace: Secure cloud storage, encrypted email, and Google Meet video conferencing.
• Payment Processors: Stripe and Wompi utilizing 256-bit SSL transport layer encryption and PCI-DSS compliance.

Data is retained strictly for the duration of the attorney-client representation and the mandatory statutory limitation periods established by the Colombian Commercial Code and Tax Code (Estatuto Tributario).

6. Questions & Data Protection Officer Contact

If you have any questions regarding this Privacy Policy or wish to review your records, please contact our team: