Sumadda

Privacy policy

This policy explains what personal data we collect through this website, what we use it for, who we share it with, and how you can exercise your rights over it.

Last updated:

Data controller

Eduardo Galarza — Sumadda

RUC: 1803448511001

Ecuador

contacto@sumadda.com

What data we collect

We only process the data you give us voluntarily when you contact us. The contact form asks for: name, email address, company (optional), service of interest (optional) and the message you write.

If you reach us through WhatsApp or email, we process the data contained in that conversation: your phone number or email address and the content of your messages.

If you arrive from an advertisement, the address may include campaign parameters (utm_source, utm_medium, utm_campaign, utm_term and Google's click identifier, gclid). We keep them only for the duration of your visit, to know which ad prompted your enquiry, and we attach them to any message you send us.

Cookies and measurement technologies

We use strictly necessary first-party cookies so the site can work: remembering whether you chose the light or dark theme, and storing your decision about this very cookie notice. They require no consent because without them the site cannot deliver what you asked for.

We also use third-party Google cookies: Google Analytics 4, to understand in aggregate which content is consulted and how the site is navigated, and Google Ads, to measure whether our advertising campaigns generate real enquiries and, where applicable, to show ads to people who already visited us. These cookies do process data that may be considered personal.

We also use the Meta pixel, the measurement technology behind Facebook and Instagram, for the same purpose: to know whether the ads we run on those platforms generate real enquiries, and to be able to show ads to people who already visited this site. The pixel includes an advanced matching feature that may transmit to Meta — always encrypted through an irreversible hash — the data you type into our contact form, such as your email address or phone number. Meta never receives that data in the clear.

None of these analytics or advertising cookies is activated until you expressly accept them in the notice shown on arrival. While you have not accepted — and equally if you reject — we apply Google's consent mode with every category denied: no advertising or analytics cookies are set, no identifiers are sent, and advertising data redaction is enabled.

With Meta the protection is stricter still, because its pixel supports no equivalent consent mode: it simply is not loaded. Until you accept, your browser never opens a single connection to Meta's servers from this site.

The legal basis for these cookies is your consent, given through a clear affirmative action. Rejecting is as easy as accepting and does not limit your use of the site.

You can withdraw your decision at any time by clearing this site's data in your browser: on your next visit the notice will reappear and you can choose again. You can also block or delete cookies from your browser settings.

Google and Meta act as independent controllers for the data they collect through these tools and may process it on servers outside Ecuador. You can consult Google's policy at policies.google.com/privacy and the terms of its advertising products at policies.google.com/technologies/partner-sites; Meta's is at facebook.com/privacy/policy.

How we use your data

To answer your enquiry and follow up commercially: preparing a proposal, scheduling an intro call, or resolving your questions about our services.

We do not use your data for any purpose other than the one you contacted us about, and we will not send you bulk marketing communications without your prior consent.

Legal basis

Processing is based on your consent, given when you submit the form or write to us through the published channels, and on the legitimate interest of handling the pre-contractual relationship created by your request.

Who we share your data with

We do not sell, rent or transfer your personal data to third parties for commercial purposes.

The contact form is processed through Web3Forms, an external service that receives the message and forwards it to us by email. This provider stores a temporary copy of the submission according to its own retention policy.

The site is hosted on Hostinger which, like any web server, logs technical access data (IP address, date and time, browser) for security and operational purposes.

If you accept the measurement cookies, Google and Meta receive data about your browsing through Google Analytics, Google Ads and the Meta pixel, on the terms described in the cookies section.

How long we keep your data

We keep your message for as long as the commercial relationship lasts and, afterwards, for the period needed to meet legal obligations or handle potential claims. If you ask us to delete it and no legal obligation requires us to keep it, we will do so.

Your rights

You may request at any time access to your data, its rectification if inaccurate, its deletion, the restriction of or objection to its processing, and the portability of the information you have provided.

To exercise any of these rights, write to contacto@sumadda.com stating which one you wish to exercise. We will respond within the periods set out by applicable law.

If you believe your request has not been handled properly, you may file a complaint with the competent data protection authority in Ecuador.

Security

The site is served entirely over HTTPS and applies security headers that restrict the origin of loaded resources. We apply reasonable technical and organisational measures to protect the information, although no internet-connected system can guarantee absolute security.

Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The date of the latest update always appears at the top of this page.