At Grupo Icaruz we respect your privacy. This policy explains which personal data we process when you visit icaruz.com, fill in the contact form or chat with our automated assistant, what we use it for and what your rights are.
Data controller
The controller of your personal data is Grupo Icaruz, based in El Salvador.
- Legal name: Grupo Icaruz
- Registered address: Santa Tecla, La Libertad
- Registration details: TODO: registration details
- Contact email: info@icaruz.com
Data we collect
We only process the data you give us directly and the minimum technical data needed to run the site securely:
- Contact form: name, company (optional), email address, phone number (optional), service of interest and the message you write.
- Automated assistant (chat): the text you type in the conversation and any contact details you choose to share, such as your name, email or phone number and a description of what you need.
- Technical data: our infrastructure logs (Amazon CloudFront and AWS WAF) record the IP address, user agent (browser and operating system), date and time, and the requested address (URL), for security and to keep the site running.
- Preferences: the functional cookies described in the Cookies section.
We do not ask for sensitive data. Please do not include it in your messages or in the chat.
Purposes and legal basis
We use your data to:
- Answer your requests and quotes, and follow up on any business relationship that results from them. Basis: your request and your consent when you send us your data.
- Provide automated assistance through the site’s assistant. Basis: your decision to use it.
- Protect the site, prevent abuse and detect attacks. Basis: our legitimate interest in the security of our systems.
- Comply with the legal obligations that apply to us.
We do not build profiles, we do not make automated decisions with legal effects on you and we do not sell or rent your data.
Processors and international transfers
To provide the service we rely on providers that process data on our behalf:
| Provider | Service | Location |
|---|---|---|
| Amazon Web Services (AWS) | Site hosting, security and form processing | United States |
| Resend | Email delivery | United States |
| Anthropic | Processing of the automated assistant’s conversations | United States |
| Cloudflare | Anti-bot verification (Turnstile) for the contact form | United States |
By using these services, your data is transferred to and processed in the United States. We only share with each provider the data needed for the corresponding purpose. TODO: legal counsel must confirm the contractual safeguards of each provider
Data retention
- Technical logs: 30 days.
- Contact messages and requests: for as long as the business relationship lasts or until you ask us to delete them, up to a maximum of 2 years.
- Assistant conversations: we do not store their content, only general metrics such as the number of messages, errors or response times. If you share your details in the chat so we can contact you, that request is handled as a contact message.
- Cookies: for the duration shown in the Cookies section.
Your rights
You can exercise your rights at any time:
- Access: find out which of your data we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data.
- Objection: object to a specific processing activity.
- Portability: receive your data in a structured, commonly used format.
To exercise them, email info@icaruz.com with your name, the right you want to exercise and a way to verify your identity. We will reply within 10 business days.
Cookies
This site only uses its own functional cookies, which are needed to remember your preferences. We do not use advertising or tracking cookies.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
lang |
Remember the language you chose in the ES / EN switcher | 1 year | First-party, functional |
consent |
Remember your decision about this site’s cookies | 6 months | First-party, functional |
The Cloudflare Turnstile verification widget, which only loads on the contact page, may use strictly necessary technical storage to tell people and bots apart, in accordance with Cloudflare’s privacy policy.
We currently do not use analytics tools. If we enable them in the future, they will be cookieless solutions and will only run if you accept them in the cookie notice.
How to change your decision: use the “Cookie settings” link at the bottom of any page. You can also delete cookies in your browser settings.
Security
We protect your data with encryption in transit (HTTPS), hosting on AWS infrastructure, access restricted to the staff who need it and safeguards against attacks and abuse.
Minors
This site is intended for businesses and professionals, not for people under 18, and we do not knowingly collect their data. If you believe a minor has sent us information, write to us and we will delete it.
Changes to this policy
We may update this policy to reflect legal changes or changes to our services. We will publish each new version on this page, with its version number and last updated date. If the changes are significant, we will highlight them on the site.
Legal framework
We process your data in accordance with the data protection laws of El Salvador, in particular the Personal Data Protection Act (Ley para la Protección de Datos Personales, Legislative Decree No. 144, published in the Official Gazette on November 15, 2024). TODO: legal counsel must confirm the applicable law and adjust this text