Documents · LGPD

Privacy and personal data processing policy

How the firm collects, uses, stores and protects the personal data of those who reach us through this website, by e-mail, by phone or on WhatsApp. This is a courtesy translation: in case of divergence, the Portuguese version prevails.

In force since September 7, 2026 Version 1.0 Law No. 13,709/2018 (LGPD)
01

Controller and data protection officer

The controller of the personal data processed through this website is Murray Legal Advogados Associados, with address at Av. Brigadeiro Faria Lima, 3729 — 5th floor, São Paulo, SP, 04538-905, Brazil.

Requests, questions and the exercise of rights should be addressed to the data protection officer at contact@murray-legal.com.br, with the subject line "LGPD".

02

Data we collect

We collect only what is necessary to respond to those who contact us and to carry out the engaged work.

Contact form

Name, e-mail, phone, company when provided, the selected subject and the content of the message.

Subscription to publications

E-mail address, for sending the firm’s analyses and updates. Unsubscribing is available in every message sent.

WhatsApp, e-mail and phone

Identification data and the content of the conversation, when the contact is initiated by the interested person through those channels.

Browsing data

We may process technical browsing data, such as IP address, device type, browser, pages visited and access origin, for security and to measure the use of the website.

We do not request sensitive personal data in the initial contact and recommend that confidential documents or information not be sent through the form before the engagement is formally opened. This website is not directed at children or adolescents.

03

Purposes and legal bases

Responding to inquiries and assessing whether we can act
Pre-contractual procedures
Providing the engaged legal services
Performance of contract
Defending rights in judicial, administrative and arbitral proceedings
Regular exercise of rights
Complying with legal, regulatory and anti-money-laundering obligations
Legal obligation
Sending the firm’s publications and invitations
Consent, revocable
Keeping the website secure and measuring its use
Legitimate interest

We do not use personal data for automated decision-making and do not sell it or hand it over for third-party advertising purposes.

04

Professional confidentiality

Everything entrusted to us, including in consultations that do not result in an engagement, is protected by the lawyer’s duty of professional confidentiality — established in the Brazilian Advocacy Statute and the OAB Code of Ethics and Discipline. That duty of confidentiality is broader than the obligations of this policy and prevails over it.

Sending a message through this website does not, by itself, create an attorney-client relationship, which is established only upon the firm’s formal acceptance of the work.

05

Sharing

We share personal data only when necessary for the work or required by law, and always to the minimum extent:

Correspondent lawyers and partner firms in Brazil and abroad, when the matter requires work in another jurisdiction.

Experts, translators, accountants and other professionals engaged for the case, under confidentiality undertakings.

Technology providers that operate our hosting, e-mail and publication mailing, acting as processors and under our instructions.

Judicial and administrative authorities, when there is a legal requirement or a competent order.

06

International transfers

As part of our work crosses borders, personal data may be transferred to other countries — to local correspondents and to technology providers with servers abroad. In those cases, the transfer relies on the performance of the contract, the regular exercise of rights or contractual protection clauses equivalent to those required by Brazilian law.

07

Retention

Contact messages that do not result in an engagement are kept for up to 24 months. Client data and case documents are kept for the duration of the relationship and, afterwards, for the applicable limitation periods and the retention periods required of the legal profession and of accounting and tax records. Email addresses used to subscribe to publications are retained until the subscriber unsubscribes.

08

Security

We adopt technical and administrative protection measures: encrypted transmission on this website, need-based access control, strengthened authentication on the firm’s accounts, backups and confidentiality undertakings with everyone working on the matters. Relevant security incidents are reported to data subjects and to the National Data Protection Authority (ANPD) as required by law.

09

Cookies and browsing

We use cookies necessary for the operation of the website and audience measurement cookies. We do not use behavioral advertising cookies. Cookie blocking can be configured in the browser itself, without affecting the reading of the pages.

10

Data subject rights

At any time, the data subject may request confirmation of processing, access to their data, correction of incomplete or outdated data, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, withdrawal of consent and objection to processing based on legitimate interest.

We respond within 15 days. Requests may be denied, with justification, when retention is required by law, by the duty of professional confidentiality or by the regular exercise of rights in proceedings.

How to exercise

Write to contact@murray-legal.com.br with the subject line "LGPD", indicating your request. We may ask for additional information to confirm identity before responding.

11

Changes

This policy may be revised to keep up with changes in legislation, in the services or in the providers we use. The version in force is always the one published on this page, with the date indicated at the top. Relevant changes are communicated to those subscribed to our publications. This English version is a courtesy translation of the Portuguese policy; in case of divergence, the Portuguese version prevails.

Questions about your data?

We speak directly with the data subject — no intermediate form and no unnecessary waiting.

Write to the officer Back to home