Privacy Policy

KMR Legal is committed to protecting your personal data in accordance with Law No. 8968 (Protection in the Handling of Personal Data of Individuals) and international best practices. This policy explains how we collect, use, store, and protect your information when you interact with us, whether as a client, website visitor, or other data subject. Our commitment to privacy is an integral part of our professional and ethical practice as lawyers and notaries.

Legal Name: KMR Abogados y Notarios Address: Calle Carmona, 150 meters west of the entrance, KMR building, Grecia, Alajuela, Costa Rica Email: edificiokmr@gmail.com Phone: +506 2494-0809 Alternate Phone: +506 2494-0649

We collect the following types of personal data: Identification Data: Full name, ID or passport number, date of birth, nationality, marital status. Contact Information: Physical and email address, phone numbers, email address. Professional Data: Occupation, company, position, financial information relevant to legal services. Case Data: Information related to legal matters, documents and evidence, legal correspondence, service history. Technical Data: IP address, browser type, cookies, website usage data.

We use your personal data to: • Provide legal services and advice • Perform notarial procedures • Manage judicial and administrative cases • Comply with legal and regulatory obligations • Prevent money laundering and terrorist financing • Maintain records as required by law • Client communication • Billing and collection • Website usage analysis (only with consent) • Direct marketing (only with explicit consent)

We collect and process your data only with your prior, explicit, and informed consent, which may be granted through: • Signed physical or digital forms • Checkboxes on the website • Written communication via email • Documented verbal statement You may withdraw your consent at any time without affecting the lawfulness of prior processing.

As a personal data subject, you have the following rights: Access (A): Know what personal data we have about you and how we use it. Rectification (R): Request correction of inaccurate or incomplete data. Cancellation (C): Request deletion of your data when no longer necessary or when you withdraw consent. Opposition (O): Object to certain processing of your data. Additionally, you have the right to: • Data portability in a structured format • Not be subject to automated decisions • File complaints with PRODHAB (Data Protection Agency) To exercise any of these rights, send us a written request to edificiokmr@gmail.com. We will respond within a maximum of 10 business days.

We implement rigorous technical and organizational security measures: Technical Measures: • SSL/TLS encryption for data transmission • Secure storage with password-protected access • Regular backups • Protection against malware and cyber attacks • Firewalls and intrusion detection systems Organizational Measures: • Staff trained in data protection and confidentiality • Confidentiality agreements with all employees • Internal information security policies • Periodic compliance audits • Access limited only to authorized personnel who require the information to perform their duties

We do not share your data with third parties except: • When required by law (judicial, tax, registry authorities, SUGEF, ICD) • With your explicit consent • With technology service providers under strict confidentiality agreements International Transfers: Any transfer of personal data outside Costa Rica will only be made with your informed consent and adequate protection guarantees, complying with Law 8968 and applicable regulations.

We retain your data for the necessary time according to: • Duration of the contractual or professional relationship • Legal statute of limitations (10 years for civil matters under the Civil Code) • Notarial Code obligations (preservation of protocols) • Anti-money laundering regulations (minimum retention of 5 years) Once the legal periods expire, your data will be securely and irreversibly deleted, anonymized for statistical purposes, or archived in accordance with legal document retention obligations.

We use cookies and similar technologies to ensure site functionality, analyze traffic, and improve user experience. Types of cookies: • Necessary cookies (basic site functionality) • Analytics cookies (Google Analytics, with your consent) • Preference cookies (language, settings) You can manage your cookie preferences at any time through our Cookie Preference Center or your browser settings. For more detailed information, see our Cookie Policy.

In the event of a security breach affecting your personal data: • We will notify PRODHAB within 5 business days • We will inform you directly about the nature of the incident • We will detail the affected data and possible consequences • We will communicate the corrective measures implemented • We will provide recommendations to protect your rights and interests

Our website and services are not directed at individuals under 18 years of age. We do not intentionally collect data from minors without consent from their parents or legal guardians. If a parent or guardian discovers that their child has provided personal information without authorization, they may contact us to request its immediate deletion.

This policy may be updated to reflect changes in legislation or our data processing practices. Modifications will be posted on this page with the corresponding update date. Effective date: 1 de junio, 2025 Continued use of the website after modifications implies acceptance of the changes. We recommend reviewing this policy periodically.

To exercise your ARCO rights, make inquiries, or file complaints about the processing of your personal data, you may contact us: Email: edificiokmr@gmail.com Phone: +506 2494-0809 / +506 2494-0649 Address: Calle Carmona, 150 meters west of the entrance, KMR building, Grecia, Alajuela, Costa Rica Office Hours: Monday to Friday, 8:00 AM - 12:30 PM and 1:30 PM - 5:30 PM Response time: Maximum 10 business days