Privacy Policy
Last updated: July 21, 2026
This policy explains what personal data we process when you use this site, for what purpose, and on what legal basis. It is written to comply with Costa Rica's Law No. 8968 on the Protection of Individuals with regard to the Processing of their Personal Data and its regulations (PRODHAB), and it incorporates the rights afforded to California residents under the CCPA/CPRA.
1. Data controller
ZENITAR Global, a consulting firm based in Costa Rica, is the controller of the personal data collected through this site.
To protect our team from automated spam, this site does not publish email addresses or phone numbers as text. All requests, including requests to exercise your rights, are handled through the contact form.
2. What data we collect
We only process the data you voluntarily provide through the forms on this site:
- Your name and, optionally, your company.
- Your email address and, optionally, your WhatsApp number.
- The service you are interested in and the description of your project or situation, in your own words.
- The stage your project is in, when you tell us.
- Your browsing language, the date and time of submission, and the record of your consent.
We also use aggregated, cookieless traffic analytics (Cloudflare Web Analytics), which cannot identify you or build a profile.
This site does not process payments, does not request financial data, and is not designed to collect special categories of data (health, racial origin, political opinions, biometric data or sexual orientation). Please do not include that type of information in free-text fields.
3. How we use your data
- To answer your request and prepare the first conversation with real knowledge of your case.
- To follow up commercially on the service you asked about.
- To keep an internal record of requests as the basis of our commercial relationship.
- To comply with legal obligations and respond to competent authorities.
We do not sell or rent personal data. This site runs no targeted advertising, remarketing or advertising-related profiling.
4. Legal basis for processing
We process your data on the following grounds:
- Your informed, express consent, given through the acceptance checkbox on the form (article 5 of Law 8968). You may withdraw it at any time.
- The performance of pre-contractual or contractual steps you requested.
- Compliance with applicable legal obligations.
- Our legitimate interest in site security and the prevention of abuse or spam.
7. International transfers
Our technology providers operate infrastructure outside Costa Rica, primarily in the United States. These transfers are made under article 40 of Law 8968, supported by your consent and by the data protection contractual clauses signed with each provider.
8. How long we keep your data
- Contact requests and commercial data: up to 5 years from the last contact, or until you withdraw your consent.
- Aggregated traffic analytics: up to 24 months.
- Minimum retention period: 6 months, to meet operational and legal requirements.
Once the period has elapsed, data is deleted or irreversibly anonymized.
9. Information security
We apply technical and organizational measures proportionate to the risk: encryption in transit (TLS), server-side form processing, access control over records, credentials kept out of the source code, and validation against automated submissions.
No system can be guaranteed 100% secure; we commit to maintaining and reviewing these measures on an ongoing basis.
10. Breach notification
In the event of a security breach affecting your personal data, we will notify the affected individuals and Costa Rica's Data Protection Agency (PRODHAB) within the timeframes required by applicable law.
11. Your rights
Under Law 8968 you may exercise your rights at any time to:
- Access: know what data of yours we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request the deletion of your data.
- Objection and withdrawal of consent: ask us to stop processing.
- Portability: receive your data in a commonly used format.
- File a complaint with PRODHAB if you believe your rights have been violated.
To exercise them, send your request through the contact form stating which right you wish to exercise. We respond within the legal period of five business days.
12. California residents (CCPA/CPRA)
If you reside in California, you also have the right to:
- Know what categories of personal information we collect and for what purpose.
- Request deletion or correction of your personal information.
- Opt out of the sale or sharing of personal information. We neither sell nor share personal information for behavioral advertising, so there is no sale to opt out of.
- Limit the use of sensitive personal information. We do not collect that type of information through this site.
- Not be discriminated against for exercising any of these rights.
We honor Global Privacy Control (GPC) signals sent by your browser.
13. Children
This site and our services are aimed at individuals and companies in a professional context. They are not directed to children under 13 in the United States, nor to anyone under the applicable age of digital consent in other jurisdictions. We do not knowingly collect data from minors; if we identify such a case, we delete the information.
14. Use of artificial intelligence
We may rely on automated tools to organize and prioritize the requests we receive. No decision producing legal or similarly significant effects on a person is made without human review and oversight.
15. Changes to this policy
We may update this policy to reflect legal or operational changes. Each version is published on this page with its update date; we recommend reviewing it periodically.
16. Contact
For questions about this policy or to exercise your rights, reach us through the contact form. Controller: ZENITAR Global, Costa Rica.