info@majlex.com·(+593) 98 436 1361
Español
Legal · Privacy · LOPDP

Privacy &
Cookies Policy

Controller: MAJLEX Boutique Law Firm
Last updated: June 2026
Legal framework: Organic Law on Personal Data Protection (LOPDP, R.O. 459, 26-May-2021) and General Regulation (Executive Decree 1423, R.O. 912, 12-Jan-2023)

This document meets the requirements of Art. 13 LOPDP (transparency principle) and Arts. 15–16 of the General Regulation.

1. Data Controller

FieldInformation
Legal nameMAJLEX Boutique Law Firm
AddressTwin Towers Building, 6th Floor · Av. República del Salvador y Portugal · Quito, Ecuador
Emailinfo@majlex.com
Phone(+593) 98 436 1361
Websitewww.majlex.com
Legal representative & DPOMiguel Ángel Jácome — Managing Partner

As a law firm specialized in data protection, MAJLEX acts as Data Controller and, additionally, serves as Data Protection Officer (DPO) for its own operations and for clients who have appointed it in that role.

2. Data We Collect and Purposes

2.1 Website forms (Legal Desk and general contact)

When you complete any form on this site —general contact, AML/CFT Compliance assessment, Corporate Criminal Liability assessment, DPO tools (LOPDP Evaluator, RAT Generator, ARCO+ Assistant, DPIA Evaluation) or service requests (company incorporation, trademark registration, due diligence)— we collect exclusively the data you enter voluntarily.

Data categoryPurpose
Identification: name, position, company, RUCIdentify the applicant and their organization; handle the inquiry or filing.
Contact: email, phoneCommunicate the result of the assessment or report; follow up on the mandate.
Business data: sector, activity, form responsesPrepare the personalized legal report and the corresponding service proposal.
2.2 Direct communications

When you contact MAJLEX by email, WhatsApp or another channel, we process the data contained in that communication to handle your inquiry and, where appropriate, formalize the professional relationship.

2.3 Browsing data

Este sitio web does not use third-party traffic-analysis tools (Google Analytics, Meta Pixel or similar), nor advertising tracking pixels. No online behavioral profiling is carried out. The only data stored locally is strictly what is necessary to remember your cookie choice (see Section 8).

3. Legal Bases (Art. 18 LOPDP)

All processing carried out by MAJLEX has an explicit legal basis under Art. 18 of the LOPDP:

TratamientoLegal basis
Handling of forms and inquiriesData subject's consent — Art. 18(a)
Performance of the legal-services contractContract — Art. 18(b)
Retention of the professional fileLegal obligation inherent to the practice of law — Art. 18(c)
Follow-up of mandates and service improvementLegitimate interest — Art. 18(f)
Functional preferences cookie (majlex_cookie_consent)Legitimate interest — Art. 18(f) — no prior consent required

Where processing is based on your consent (Art. 18(a)), you have the right to withdraw it at any time without affecting the lawfulness of processing carried out beforehand, by sending your request to info@majlex.com.

4. Retention Periods

In accordance with the storage-limitation principle of Art. 10 LOPDP, data will be retained only for as long as necessary for the purpose that justified its collection:

CategoryPeriodCriterion
Inquiries not converted into a mandate2 yearsFrom the last communication
Active client filesDuring the mandateUntil closure or termination
Closed files and professional correspondence10 yearsProfessional-conduct obligation; limitation period for legal actions
Preferences cookie12 monthsFrom the user's choice

Once these periods have elapsed, the data will be securely deleted or irreversibly anonymized.

5. Recipients and International Transfers

MAJLEX does not transfer, sell or share personal data with third parties for commercial purposes. The only possible recipients are:

  • Web3Forms — web-form service provider. Acts as data processor; receives form data exclusively to route it to MAJLEX's inbox via encrypted transmission (TLS). It does not retain the data beyond what is necessary for delivery.
  • MAJLEX allied firms — only when the mandate requires coordination with another firm and the data subject has been informed in advance.
  • Public authorities and courts — when there is a legal obligation, judicial requirement or professional-conduct duty.
International transfers carried out through Web3Forms are made with the safeguards provided for in Art. 51 LOPDP and in accordance with Articles 40–42 of the General Regulation. MAJLEX has entered into a Data Processing Agreement (DPA) with this provider governing the conditions of processing.

6. Your ARCO+ Rights and How to Exercise Them

Under Arts. 26–33 LOPDP, you have the right to:

RightBasisWhat it covers
AccessArt. 26 LOPDPKnow which of your personal data we process, for what purpose, for how long and who receives it.
RectificationArt. 27 LOPDPRequire the correction of inaccurate, incomplete or outdated data.
Erasure / DeletionArt. 28 LOPDPRequest the deletion of your data when it is no longer necessary for the purpose, you withdraw your consent, or the processing is unlawful.
ObjectionArt. 29 LOPDPObject to processing in certain circumstances, including direct marketing.
PortabilityArt. 30 LOPDPReceive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
No automated decision-makingArt. 31 LOPDPNot to be subject to decisions based solely on automated processing that produce significant legal effects.
RestrictionArt. 32 LOPDPRequest the suspension of processing while a challenge to accuracy or lawfulness is verified.
How to exercise your rights: send an email to info@majlex.com with the subject "Exercise of ARCO+ rights — LOPDP", stating: (1) the right you wish to exercise, (2) your identification details, and (3) a clear description of your request. We will respond within a maximum of 15 business days conforme al Art. 33 LOPDP.

If you believe that the processing of your data does not comply with the regulations, you may file a complaint with the Superintendency of Personal Data Protection of Ecuador.

7. Information Security

MAJLEX adopts the technical and organizational measures required by Art. 37 LOPDP and Arts. 30–34 of the General Regulation, proportionate to the risk of each processing activity:

  • Encrypted data transmission via TLS/HTTPS across all website communications.
  • Restricted access to personal data under the principle of necessity (need-to-know).
  • Agreements of confidentiality with the firm's staff and collaborators.
  • Documented management of security incidents with a containment and notification protocol.
  • Notification to the supervisory authority and the data subject in the event of a breach with high risk, in accordance with Art. 42 LOPDP and Arts. 35–37 of the Regulation, within the legal time limits.

8. Cookie Policy

A cookie is a small text file that a website places in your browser when you visit it. This site uses only the following cookie:

CookieTypePurposeDurationOwner
majlex_cookie_consentFirst-party · FunctionalStores the user's choice regarding the cookie notice (accepted / rejected), so the banner is not shown again on subsequent visits.12 monthsMAJLEX
Cookies we do NOT use

Este sitio does not use behavioral advertising cookies, third-party tracking cookies, social-media pixels, or traffic-analytics tools (Google Analytics, Meta Pixel or others). There is no advertising profiling through this domain.

Legal basis for cookies

The only cookie used is functional and is based on MAJLEX's legitimate interest (Art. 18(f) LOPDP), since its sole function is to remember the user's own choice. It does not require prior consent because it does not involve tracking or profiling.

How to manage or delete cookies

You can delete or block cookies from your browser settings. Deleting majlex_cookie_consent will cause the notice to appear again on your next visit. Managing cookies does not affect the site's operation.

  • Chrome: Settings → Privacy and security → Cookies and other site data.
  • Safari: Preferences → Privacy → Manage website data.
  • Firefox: Settings → Privacy and security → Cookies and site data.
  • Edge: Settings → Cookies and site permissions.

9. Minors

MAJLEX's services are directed exclusively at persons over 18 years of age and at legal entities. We do not knowingly collect personal data from minors. If you become aware that a minor has provided data through this site, please notify us at info@majlex.com so that we may proceed with its immediate deletion.

The processing of minors' data is subject to the strengthened requirements of Arts. 36 and 38 LOPDP, which require the consent of parents or legal guardians when the minor is under 15 years of age.

10. Changes to this Policy

MAJLEX may update this Privacy Policy to reflect regulatory changes, modifications to the services provided, or improvements in data-protection practices. The date of last update appears in the header of this document.

Where changes are substantial, MAJLEX will notify the data subjects whose data is being processed through a notice on this website or by email, as appropriate. Continued use of the site after the publication of a revised version implies acceptance of the updated terms.

Contact and Exercise of Rights

To exercise your ARCO+ rights, resolve questions about the processing of your data, withdraw your consent, or report any privacy incident, contact us through:

MAJLEX Boutique Law Firm
Miguel Ángel Jácome — Managing Partner y DPO
info@majlex.com
(+593) 98 436 1361
Edificio Twin Towers, Piso 6 · República del Salvador y Portugal · Quito, Ecuador