Last updated: 2026-05-01

1. Who we are

This website is operated by the Law Office of Amanda M. Bradley, a U.S. immigration law practice based in Madrid, Spain.

Data Controller:
Amanda M. Bradley, Attorney
Law Office of Amanda M. Bradley
Madrid, Spain
Email: amanda@amandabradleylaw.com

2. What this notice covers

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit amandabradleylaw.com, contact us through the website, or complete one of our online intake questionnaires.

We are committed to compliance with the EU General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

3. What data we collect

When you use our contact form: name, email address, phone number, and the content of your message.

When you complete one of our intake questionnaires: the personal data needed to prepare and file your immigration petition. This may include biographical information, identifying numbers (Social Security Number, A-Number, passport number where applicable), 5-year address and employment history, family members, marital and immigration history, and — with your explicit consent — race or ethnicity information requested by USCIS. The intake forms collect this data only inside your own browser until you download a summary file and email it to us.

Automatically: standard server logs (IP address, browser type, pages visited, timestamps) retained briefly for security and troubleshooting. We do not use cookies for analytics or tracking on this site.

4. Why we collect it (legal bases)

  • To respond to your inquiries through the contact form — Article 6(1)(a) GDPR (your consent) and Article 6(1)(f) (our legitimate interest in answering people who write to us).
  • To prepare and file your immigration petition through the intake forms — Article 6(1)(b) GDPR (performance of a contract for legal services).
  • To process race or ethnicity data required by USCIS — Article 9(2)(a) GDPR (your explicit consent).
  • To comply with our professional and legal obligations as an attorney — Article 6(1)(c) GDPR.

5. Who receives your data

  • The attorney (Amanda M. Bradley) and her authorized staff.
  • U.S. Citizenship and Immigration Services (USCIS) and other U.S. government agencies as required to process your petition.
  • Case management software (Infotems) used by the firm to securely store client files.
  • Our hosting provider (GoDaddy), which processes server data on our behalf as a data processor.

We do not sell your data. We do not share it for marketing purposes.

6. International transfer of data

Filing your immigration petition requires transferring your personal data to USCIS in the United States. The U.S. is a “third country” under GDPR. This transfer is necessary for the performance of your contract with the firm — Article 49(1)(b) GDPR.

7. How long we keep your data

Contact form messages are kept for as long as needed to respond and follow up — typically up to two (2) years.

Client files (including completed intake summaries) are retained for the period required by Spanish professional rules and our records-retention policy — typically seven (7) years after the matter closes — and are then securely destroyed.

Server logs are deleted on a rolling basis, typically within 30 days.

8. Your rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure (“right to be forgotten”), subject to our legal retention obligations
  • Restrict or object to processing
  • Receive a copy of your data in a portable format
  • Withdraw your consent at any time (without affecting any prior lawful processing)
  • Lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD, www.aepd.es)

To exercise any of these rights, contact us at amanda@amandabradleylaw.com.

9. Cookies and tracking

This website does not use cookies, web analytics, or third-party trackers for marketing or behavioural profiling. WordPress (the platform that runs this site) may set strictly necessary technical cookies for site functionality, which do not require consent under GDPR.

The intake questionnaires use your browser’s local storage (not cookies) to save your in-progress answers between sessions. This data stays on your device until you download a summary and email it to us.

10. Spam protection on our forms

To prevent automated spam submissions, our forms use a “honeypot” technique — an invisible field that humans do not fill in but that automated bots typically do. Submissions that fill the honeypot are silently rejected. This does not collect any data about you and does not require any third-party service.

11. Security

Our website is served over HTTPS. Your data in transit is encrypted. The intake questionnaires keep your answers in your own browser until you choose to email them to us.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated to existing clients directly.

13. Contact

For any questions about this Privacy Policy or how your data is handled, please contact:

Amanda M. Bradley
Email: amanda@amandabradleylaw.com