Privacy Policy

Last updated: 1st January 2026

Data Controller Information

unifra S.L. is the data controller responsible for your personal data. Our company registration number is B59037218, and our VAT number is ESB84261973. We are located at Avenida del Puerto 164, 30412 Murcia, Spain.

Data Collection

We collect personal data that you provide to us directly and automatically through your use of our website. The data we collect includes information you provide when contacting us for legal services, subscribing to our communications, or using our website. This may include your name, email address, phone number, company information, and details about your legal requirements. We also collect technical information automatically, such as your IP address, browser type, pages visited, and usage patterns to improve our website functionality and user experience.

Information You Provide

• Contact information (name, email address, phone number)
• Company or organisation details
• Legal enquiry details and requirements
• Communication preferences
• Any other information you choose to provide

Information Collected Automatically

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent on our website
• Referral sources

How We Use Your Information

We use the personal data we collect for legitimate business purposes and to provide you with our legal services. How we use your information depends on the services you use and your relationship with us. We use your data to respond to your enquiries, provide legal consultation services, send you information about our services, improve our website, and comply with legal obligations. All data processing is conducted in accordance with applicable data protection laws and based on lawful grounds including your consent, contractual necessity, legitimate interests, and legal compliance.

Legal Basis for Processing

• Consent: When you provide explicit consent for specific processing activities
• Contract: To perform our legal services and fulfil contractual obligations
• Legitimate Interest: To improve our services and communicate with you about relevant legal matters
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal data to third parties except as described in this policy. We may share your information with trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep this information confidential. We may also disclose your information when required by law or to protect our rights and interests.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The retention period depends on the type of data and the purpose for which it was collected. For client data related to legal services, we typically retain information for seven years after the conclusion of our services or as required by professional regulations. Website usage data is generally retained for up to two years. You may request deletion of your data at any time, subject to our legal and professional obligations.

Your Rights

Under the GDPR and applicable data protection laws, you have several rights regarding your personal data. You have the right to access, rectify, erase, restrict processing, object to processing, and data portability. You also have the right to withdraw your consent at any time where we rely on consent as the legal basis for processing. To exercise any of these rights, please contact us using the details provided below.

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Object: Object to certain types of processing
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Withdraw Consent: Withdraw your consent for data processing

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience and provide personalised content. For detailed information about the cookies we use and how to manage your cookie preferences, please see our Cookie Policy.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website with a new "last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us using the information below. We are committed to addressing your concerns and will respond to your enquiry promptly.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates applicable data protection laws. In Spain, the relevant supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos).