Privacy Policy of Keridine & Requena (KRLEGAL)
Last updated: November 10, 2026.
This policy explains what personal data we collect, what we use it for, who we share it with, how long we keep it and how you can exercise your rights. We treat your data with the same discretion with which we treat our clients’ matters.
1. Data controller
- Controller: Keridine & Requena, a civil partnership registered in the Public Registry of Panama under Folio No. 25039133 ("KRLEGAL" or "we").
- Address: Office 27B, 27th floor, F&F Tower, Calle 50, Panama City, Republic of Panama.
- Privacy contact: info@keridinerequena.com · +507 204-6654.
2. Scope and legal framework
This policy applies to the data we process when you:
- visit keridinerequena.com and its subdomains;
- write to us through a form, email, phone, WhatsApp or social media;
- respond to our ads or forms on platforms such as Meta (Facebook, Instagram), Google or LinkedIn;
- request a quote or hire our services;
- take part in events, fairs or meetings with us.
It also applies to third-party data that our clients provide to us in order to deliver the service, such as shareholders, directors, ultimate beneficial owners, counterparties or dependents. Whoever provides us with that data represents that they are authorized to do so and have informed those persons.
We process data in accordance with Law 81 of March 26, 2019 on Personal Data Protection and its regulations, Executive Decree 285 of May 28, 2021. Where the law of your country of residence also applies, such as the European Union General Data Protection Regulation (GDPR), we will also comply with what that law requires.
3. Data we process
| Category | Examples | Source |
|---|---|---|
| Identification and contact | Name, email, phone, country, company and job title | You, our forms and the forms in our ads |
| Content of your inquiry | Message, documents you attach, details of the matter | You |
| Client due diligence | Identity document or passport, address, occupation, source of funds, ultimate beneficial owner, politically exposed person status, references | You, official public registries and sanctions lists |
| Engagement data | Corporate, asset, immigration, contractual or litigation information required by the service | You, the client and public registries |
| Billing and payment | Billing details, RUC (taxpayer number), payment receipts | You |
| Browsing | IP address (anonymized in analytics), device, browser, pages visited, clicks on WhatsApp, phone or email, cookie identifiers | Your browser and cookies |
| Online advertising | Interaction with our ads, responses to ad forms, advertising identifiers | The platforms where we advertise |
Sensitive data. We do not request it through the website. If a service requires it, for example a health certificate for an immigration procedure, we will process it only with your express consent or where the law permits, with enhanced security measures. Please do not include sensitive data in the contact form.
Data you do not provide to us. When we receive your data from a client, a public registry or an advertising platform, we will inform you of the category of data and its source no later than in our first communication with you.
4. Purposes and lawful basis
We only use your data for the purposes listed in this table. If we wished to use it for a different purpose, we will inform you beforehand and, where appropriate, ask for your consent.
| Purpose | Lawful basis in Panama | Basis if the GDPR applies |
|---|---|---|
| Responding to inquiries and preparing quotes | Your request and the preparation of a contract (Law 81, art. 6, para. 2) | Art. 6(1)(b) |
| Providing the legal services engaged | Performance of the contract (Law 81, art. 6, para. 2) | Art. 6(1)(b) |
| Due diligence and anti-money laundering | Legal obligation (Law 23 of 2015 and Law 124 of 2020, art. 40, para. 11) | Legitimate interest, art. 6(1)(f) |
| Billing, accounting and tax obligations | Legal obligation (Law 81, art. 6, para. 3) | Art. 6(1)(b) and 6(1)(f) |
| Sending newsletters, invitations and legal updates | Consent; for clients, the established business relationship (Law 81, art. 8, para. 5), with an option to unsubscribe in every message | Consent, art. 6(1)(a) |
| Website analytics | Consent where required by law; otherwise, legitimate interest (Law 81, art. 8, para. 9) | Consent, art. 6(1)(a) |
| Personalized advertising and campaign measurement | Consent (Law 81, art. 6, para. 1) | Consent, art. 6(1)(a) |
| Website security and spam prevention | Legitimate interest (Law 81, art. 8, para. 9) | Art. 6(1)(f) |
| Defense of rights and responding to requests from authorities | Legal obligation or legitimate interest | Art. 6(1)(f) |
Our legitimate interests are protecting the website against fraud and spam, understanding in aggregate how it is used, complying with Panamanian anti-money laundering rules and defending ourselves against claims. We have weighed that these interests do not override your rights, and you may object at any time (section 7).
Consent. Where processing is based on your consent, you may withdraw it at any time, as easily as you gave it, without retroactive effect.
Professional secrecy. Information about our clients’ matters is also protected by attorney professional secrecy. We only disclose it with the client’s authorization or by legal or court order.
Automated decisions. We do not make decisions based solely on automated processing of your data that produce legal effects concerning you (Law 81, art. 19). Advertising platforms may use profiles to decide which ads to show you; you may object as described in section 8.
5. Recipients and international transfers
We do not sell or rent your data. We only share it with:
- Technology providers working on our behalf (database custodians): website hosting and security, email, web analytics and client management. They act on our instructions and are bound by confidentiality and security obligations (Executive Decree 285 of 2021, arts. 47 to 49).
- Advertising platforms where we advertise, such as Meta and Google, only if you accept advertising cookies or interact with our ads (section 8).
- Third parties involved in your matter, with your knowledge: notaries, the Public Registry, the National Immigration Service and other authorities, banks, allied firms abroad and accountants when you request it.
- Companies in our group, such as BROKRS Corp., when you request joint services and only for the purposes for which the data was collected (Law 81, art. 33, para. 5).
- Judicial or administrative authorities, when required by law and to the extent strictly necessary (Law 81, art. 24).
International transfers. Some providers process data outside Panama, mainly in the United States and the European Union. We make these transfers on the basis of your consent, the need to perform the contract or our relationship with you, contractual clauses with protection safeguards, or the recipient being part of our group (Law 81, arts. 5 and 33; Executive Decree 285 of 2021, arts. 51 and 53). Where the law of your country requires it, we use the safeguards that law provides, such as the standard contractual clauses approved by the European Commission.
6. Retention, security and minors
| Data | Retention period |
|---|---|
| Inquiries that do not lead to an engagement | 2 years from the last contact |
| Client file and due diligence | For the duration of the relationship and at least 5 years after it ends (Law 23 of 2015, art. 29), or longer if another rule requires it or for the defense of claims |
| Billing and accounting | The period required by tax and commercial legislation |
| Newsletters and communications | Until you unsubscribe |
| Cookies | As set out in the Cookie Policy |
When the period expires, we delete or anonymize the data (Executive Decree 285 of 2021, art. 7).
Security. We apply technical and organizational measures such as encryption in transit (HTTPS), access limited to staff who need the data for their work, and confidentiality commitments from the whole team and our providers. If a security breach occurs that poses a risk to your data, we will notify the National Authority for Transparency and Access to Information (ANTAI) and the affected data subjects within 72 hours of becoming aware of it (Executive Decree 285 of 2021, art. 37).
Minors. Our services are not directed at persons under 18. We only process minors’ data when necessary for a service, for example as dependents in an immigration procedure or beneficiaries of a foundation, and with the authorization of their father, mother or guardian (Executive Decree 285 of 2021, art. 18).
7. Your rights
You may exercise the following rights at any time, free of charge (Law 81, arts. 15 to 19):
- Access: to know whether we process your data, which data, for what purpose, where it comes from and who we share it with.
- Rectification: to correct inaccurate or incomplete data.
- Cancellation: to ask us to delete your data when it is no longer necessary, you withdraw your consent or it has been processed without a legal basis.
- Objection: to object to processing on grounds relating to your particular situation and, without needing to give reasons, to the use of your data for marketing purposes, including profiling (Executive Decree 285 of 2021, art. 29).
- Portability: to receive the data you provided to us in a structured, commonly used format.
- Withdrawal of consent, without retroactive effect.
- Not to be subject to decisions based solely on automated processing.
How to exercise them. Write to info@keridinerequena.com with the subject "Privacy rights", state your name, the right you are exercising and the data it refers to, and attach a copy of your identity document. If you are acting on behalf of another person, attach the document proving your authority to represent them.
Deadlines. We respond to access requests within a maximum of 10 business days (Law 81, art. 16) and correct inaccurate data within 5 business days of the request (Law 81, art. 17). We respond to all requests, even if we hold no data about you.
Limits. We may refuse or limit a request when we must retain the data due to a legal obligation, professional secrecy, an ongoing administrative or judicial proceeding, or for the defense of claims (Law 81, art. 23; Executive Decree 285 of 2021, arts. 28 and 31). If we do so, we will explain the reason.
Complaints. If we do not respond in time or you are not satisfied with our response, you may contact ANTAI (Law 81, art. 18). If you reside outside Panama, you may also contact the authority in your country.
8. Cookies and online advertising
We use technical cookies, which are necessary for the website to work, and, only if you accept them where the law requires it, analytics cookies and advertising cookies. If you visit the website from the European Economic Area, the United Kingdom or Switzerland, we do not activate analytics or advertising cookies until you accept them. Details are in our Cookie Policy.
Ads and forms on Meta. When you accept advertising cookies on our website, or complete a form within one of our ads on Facebook or Instagram, Meta receives data about that interaction. We use that data to measure our campaigns and show relevant ads. For users in the European Economic Area, KRLEGAL and Meta Platforms Ireland Limited are joint controllers for the collection and transmission of that data (art. 26 GDPR); KRLEGAL provides you with this information and Meta handles the rights relating to the processing it subsequently carries out on its own account, described in its Privacy Policy.
Custom audiences. If you gave us your email or phone number and agreed to receive communications, we may upload them in encrypted form to the platforms where we advertise in order to show you relevant ads or to exclude you from them. The platform uses that data only to perform the match and then discards it. You can object by writing to us.
How to limit advertising. You can adjust your ad preferences in each platform’s settings, and block or delete cookies from your browser.
9. Changes and governing law
We may update this policy when our services, our providers or the law change. We will publish each version with its date on this page. If the change is substantial, we will announce it on the website and, where appropriate, by email or by asking for your consent again.
This policy is governed by the laws of the Republic of Panama, without prejudice to the rights granted to you by the law of your country of residence and your right to contact ANTAI or the relevant data protection authority.