1. Who We Are
Izquierdo Advisory ("we," "us," "our") is an AI governance and intellectual property advisory firm operated by Andrés Izquierdo, with a principal place of business at 4300 Nebraska Ave NW, Washington, DC 20016, United States. We operate the platforms accessible at andresizquierdo.com.
For EU/EEA data subjects, Izquierdo Advisory acts as the data controller for personal data processed through these platforms.
2. Data We Collect
Data you provide directly
- Contact information (name, email address, organisation) when you submit enquiries or contact forms
- Professional information (job title, company, jurisdiction) provided in platform queries
- Query content — the descriptions of AI systems, compliance questions, and context you input into the platforms
- Payment information (processed securely by third-party payment processors; we do not store card data)
Data collected automatically
- Usage data: pages visited, features used, session duration, click patterns
- Technical data: IP address, browser type, operating system, referring URLs
- Cookie data: as described in our Cookie Policy
3. How We Use Your Data
We use your personal data for the following purposes:
- Service delivery: Processing your platform queries, generating AI outputs, and delivering results
- Communication: Responding to enquiries, delivering requested reports, and providing service updates
- Attorney Review Service: Sharing relevant documents with reviewing attorneys where you have requested this service
- Platform improvement: Analysing usage patterns to improve platform accuracy and user experience
- Legal compliance: Meeting our obligations under applicable law, including data retention requirements
- Marketing (with consent): Sending regulatory updates, commentary, and service information where you have opted in
Query content you submit to our platforms is processed by AI systems. We do not use your specific query content to train or fine-tune AI models without explicit consent. Query content may be logged for quality assurance and retained for a limited period as described in Section 6.
4. Legal Basis for Processing (EU/GDPR)
For EU/EEA data subjects, we process personal data on the following legal bases:
- Contract performance (Art. 6(1)(b)): Processing necessary to deliver the Services you have requested
- Legitimate interests (Art. 6(1)(f)): Platform improvement, security, and fraud prevention
- Consent (Art. 6(1)(a)): Marketing communications and non-essential cookies
- Legal obligation (Art. 6(1)(c)): Data retention and regulatory compliance requirements
5. Data Sharing
We do not sell your personal data. We share data only in the following circumstances:
- Attorney Review Service: Documents submitted for attorney review are shared with the reviewing attorney under confidentiality obligations
- Service providers: Hosting, analytics, and payment processing providers operating under data processing agreements
- Legal requirements: Where disclosure is required by law, court order, or regulatory authority
- Business transfer: In connection with a merger, acquisition, or sale of the firm, with appropriate protections
6. Data Retention
- Contact enquiry data: 3 years from last contact, unless an ongoing relationship exists
- Platform query logs: 12 months for quality assurance purposes
- Attorney Review Service files: 7 years (legal professional retention obligations)
- Cookie data: As specified in our Cookie Policy
7. Your Rights (EU/GDPR)
EU/EEA data subjects have the following rights regarding their personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data in certain circumstances ("right to be forgotten")
- Restriction: Request restriction of processing in certain circumstances
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests or for direct marketing
- Withdraw consent: Withdraw consent at any time where processing is consent-based
To exercise any of these rights, contact: info@andresizquierdo.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
8. International Transfers
We are based in the United States. If you are located in the EU/EEA, your data will be transferred to and processed in the US. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) where required under GDPR.
9. Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption in transit, access controls, and regular security review.
10. Cookies
We use cookies and similar tracking technologies. For full details, please see our Cookie Policy.
11. Contact & Data Protection Officer
For privacy-related enquiries, to exercise your rights, or to raise a concern, contact: info@andresizquierdo.com
Izquierdo Advisory · 4300 Nebraska Ave NW · Washington, DC 20016