Privacy Notice

The data controller responsible for your personal information is:

KNR USMCA is a professional limited liability company organized under the laws of the State of Texas. Our practice is focused on cross-border legal services for U.S. companies operating in Mexico and Latin America.

A. Information You Provide Directly

When you use our contact form, send us an email, or engage with our services, we may collect:

• Identification data: full name, job title, professional role
• Contact data: email address, phone number (optional), company name
• Inquiry data: topic of your inquiry, the message or description of your legal situation that you choose to share with us
• Foreign law expert applicant data: if you apply to join our foreign law experts network, we may collect professional credentials, areas of expertise, curriculum vitae, and contact information

B. Information Collected Automatically

When you visit our website, our servers and third-party tools may automatically collect:

• Usage data: pages visited, time spent, referral URL, links clicked
• Device and technical data: IP address, browser type and version, operating system, screen resolution, language preferences
• Cookie data: see Section 6 (Cookies and Tracking Technologies) below

C. Information We Do Not Collect

We do not intentionally collect sensitive personal information such as Social Security numbers, government-issued identification numbers, financial account credentials, health or medical data, or precise geolocation data through this website. We do not knowingly collect personal information from children under the age of 13.

We use the personal information we collect for the following purposes:

• Responding to inquiries: to contact you in response to the message or inquiry you submitted through our website
• Evaluating potential engagements: to assess whether we are able to assist with your legal needs and, if so, to initiate an engagement
• Conflict-of-interest screening: to conduct required legal and professional checks before agreeing to represent a client
• Foreign law expert network management: to evaluate and communicate with candidates who apply to our foreign law experts roster
• Website operation and improvement: to monitor website performance, diagnose technical issues, and improve user experience
• Legal and compliance obligations: to comply with applicable law, court orders, professional responsibility rules, or regulatory requirements

We do not sell your personal information to third parties. We do not use your information for behavioral advertising or algorithmic profiling for purposes other than those listed above.

Under the Texas Data Privacy and Security Act (TDPSA) and general U.S. privacy principles, we process your personal information based on the following grounds:

• Consent: when you voluntarily submit a contact form or email inquiry, you consent to our use of that information to respond to you
• Contractual necessity: when processing is necessary to take steps at your request prior to entering into, or to perform, an engagement or service agreement
• Legitimate interests: to operate and improve our website, conduct conflict checks, and maintain professional standards required by Texas and ABA rules of professional conduct
• Legal obligation: when processing is required to comply with applicable law or regulatory requirements

We do not sell, rent, or trade your personal information. We may share personal information only in the following limited circumstances:

• Service providers: we engage third-party vendors (e.g., email hosting, website analytics, cloud storage) that process personal information on our behalf under contractual obligations of confidentiality and appropriate security standards
• Associated counsel and co-counsel: in the course of providing legal services, we may share information with local counsel and foreign law experts in Mexico or Latin America who are contractually bound to treat such information as confidential
• Legal and professional requirements: we may disclose information when required by law, subpoena, court order, or to comply with our professional obligations under Texas Disciplinary Rule 1.05
• Business transfers: in the unlikely event of a merger, acquisition, or dissolution of the firm, personal information may be transferred to a successor entity subject to equivalent privacy protections
• With your consent: we may share information for any other purpose with your explicit prior consent

Our website may use cookies and similar technologies to operate and improve the site. Cookies are small text files stored on your device.

We do not use cookies for targeted advertising, retargeting, or cross-site behavioral tracking. To opt out of analytics cookies, you may use your browser's cookie settings to block or delete cookies from this site. Most modern browsers also accept opt-out signals such as Global Privacy Control (GPC). We honor GPC signals from Texas residents as required by the TDPSA.

We retain personal information only for as long as necessary to fulfill the purposes described in this Notice, or as required by law:

• Website inquiries that did not result in an engagement: retained for up to 24 months from the date of last contact, unless you request deletion earlier
• Client engagement records: retained in accordance with Texas State Bar requirements and applicable statutes of limitation — generally a minimum of 7 years following the conclusion of representation
• Foreign law expert applicant records: retained for up to 36 months unless you request removal or we engage you, in which case engagement-related records are retained per our standard retention policy
• Website analytics data: retained in aggregated, anonymized form for up to 26 months

We implement reasonable and appropriate technical, administrative, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS/HTTPS), access controls, and secure hosting environments.

In the event of a data breach that affects Texas residents, we will provide notification without unreasonable delay and no later than 60 days after discovery of the breach, in accordance with Texas Business & Commerce Code, Chapter 521. If the breach affects 250 or more Texas residents, we will also notify the Texas Attorney General.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Under the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024, Texas residents have the following rights with respect to their personal data processed by controllers subject to the Act:

How to Exercise Your Rights

To submit a privacy rights request, please contact us at [email protected] with the subject line "Privacy Rights Request." We will respond within 45 days of receiving a verifiable request. If we need additional time, we will notify you and may extend the response period by an additional 45 days (total 90 days) where reasonably necessary.

We will not discriminate against you for exercising your privacy rights. We may need to verify your identity before processing your request.

Applicability and Exemptions

Certain personal data may be exempt from TDPSA rights requests, including data subject to attorney-client privilege, data processed solely in the context of an employment relationship with our firm, or data required to be retained under Texas State Bar rules, applicable statutes of limitation, or other legal obligations.

If you contact us by email or through our contact form, we may communicate with you by email. Our communications are transactional and limited to responding to your inquiry or managing a legal engagement. We do not send promotional or marketing emails without your express consent.

Any email communication you receive from KNR USMCA complies with the federal CAN-SPAM Act of 2003. Each communication will include a clear identification of the sender, an honest subject line, and a mechanism to opt out of future non-essential communications. We will honor opt-out requests within 10 business days.

This website is intended exclusively for business professionals and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will promptly delete such information in accordance with the Children's Online Privacy Protection Act (COPPA).

Our website may contain links to third-party websites, including professional directories, bar associations, or news sources. These third-party sites operate independently and have their own privacy policies. KNR USMCA is not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy notice of any third-party site you visit.

KNR USMCA is a U.S.-based law firm and this website is operated from the United States. If you access this website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country of residence. By using this website, you acknowledge and consent to this transfer and processing.

Because our work frequently involves clients and contacts in Mexico and Latin America, we endeavor to handle personal data from those regions with sensitivity to applicable local data protection frameworks, including Mexico's Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) where relevant.

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective date" at the top of this page. We encourage you to review this Notice periodically. Your continued use of this website after any changes constitutes your acceptance of the updated Privacy Notice.