Privacy Policy
How we collect, use, and protect personal data.
Who we are
Descardes Legal Services Inc. Remote legal services for technology and SaaS companies. Contact: dimitri@descardeslegal.com. Privacy Officer: Dimitri Descardes.
What we collect
We collect personal data that you provide directly, including: name, email address, and company information; information submitted through forms or communications; information required to provide legal services. We also collect limited technical data (such as IP address and browser type) for security and basic analytics.
How we use data
We use personal data to: respond to inquiries; provide and manage legal services; communicate with clients and prospective clients; send updates or resources if you choose to receive them. We only use personal data for relevant and proportionate purposes.
Legal basis (where applicable)
Depending on the context, we process personal data based on: your consent; the necessity to provide requested services; our legitimate interest in operating and improving our services.
Service providers
We use a limited number of service providers to operate our practice (such as email, document management, scheduling, and payment tools). These providers process personal data only as necessary and under appropriate confidentiality and security obligations. We do not sell personal data.
Payments
We use third-party payment processors (e.g., Stripe) to process payments securely. Payment information is handled directly by these providers and is not stored on our servers.
International data transfers
We operate remotely. Personal data may be accessed or processed outside of your jurisdiction, including in Mexico and through cloud providers located in other countries. Where applicable, we use appropriate safeguards for cross-border data processing.
Retention
We retain personal data only as long as necessary: inquiries: up to 24 months; client files: as required by professional and legal obligations. Retention periods may vary depending on the engagement.
Security
We implement reasonable technical and organizational measures to protect personal data. Access to data is limited to what is necessary for service delivery.
Your rights
Depending on applicable law, you may have the right to: access your personal data; request correction of inaccurate data; request deletion where appropriate; withdraw consent where applicable. You may also file a complaint with a competent data protection authority.
Updates
We may update this policy from time to time. The most recent version will always be available on our website.
Questions?
For any questions or requests regarding this policy, reach out anytime and we will clarify anything.