Privacy Policy
What we collect when you use this website, why we collect it, and the choices you have.
Last updated:
Who is responsible for your data
BuildCresco is the data controller for personal data processed through this website. BuildCresco is based in Nicaragua and provides business process automation services.
If you have any question about this policy or about how your data is handled, contact us using the details at the end of this page.
What this policy covers
This policy covers this website. It does not cover data we process on behalf of a client under a separate written services agreement — in that arrangement the client is the controller and BuildCresco acts as a processor on their instructions.
What we collect
We collect three kinds of information, and only the third is optional to you in any meaningful sense.
- Information you send us. When you submit the contact form, we receive the details you enter: your name and email address, and — where you choose to provide them — your company, phone or WhatsApp number, industry, company size, a description of the process you want to automate, how often it runs, the tools involved, and your preferred contact method. Only name, email and the process description are required.
- Technical information needed to serve the site. Our hosting provider processes your IP address and basic request information in order to deliver pages and to limit abusive traffic. We use your IP address in memory to rate-limit form submissions; we do not store it in our own records. Your approximate country, derived from that request, is attached to a submitted enquiry so we can respond in the right language and time zone.
- Measurement information, only if you agree. If you accept analytics in the cookie banner, we record which pages you view, which problems and solutions you select, and which campaign brought you to the site. If you do not accept, none of this is collected and nothing is written to your device for this purpose.
What we do not collect
We do not use advertising pixels, social media trackers, session recording, heat mapping, or fingerprinting. We do not buy personal data, and we do not sell or rent yours. We do not make decisions with legal or similarly significant effects about you by automated means.
Please do not send confidential information, personal data about other people, or special categories of data — health records, financial account details, identity documents — through the contact form. If you need to share a sample document so we can assess a process, we will agree a secure route and, where appropriate, a confidentiality agreement first.
Why we process it, and on what legal basis
Under Nicaraguan Law No. 787 on the Protection of Personal Data, we process personal data on the basis of the consent you give when you submit the form and when you answer the cookie banner. You can withdraw that consent at any time.
If you are in the European Economic Area or the United Kingdom, we rely on the following bases under the GDPR: your consent for analytics; taking steps at your request prior to entering into a contract, and our legitimate interest in responding to business enquiries, for the contact form; and our legitimate interest in keeping the site available and secure for the technical processing described above.
Who we share it with
We do not sell your personal data or share it for anyone else's marketing. We share it only with service providers who process it on our instructions and under contract, in these categories:
- Hosting and content delivery, to run this website.
- Email and business communication tools, so we can reply to you.
- Customer relationship and workflow automation tools, where an enquiry is recorded so it can be followed up.
- Where we are legally required to disclose data, or need to establish or defend a legal claim.
Text messaging information is never shared
Mobile information collected for text messaging — your mobile number and your SMS consent — is excluded from every category of sharing described above. It will not be shared with or sold to third parties or affiliates for their marketing or promotional purposes under any circumstances.
The only party that receives your number is the messaging provider that delivers our messages, under contract and solely for that purpose. See the SMS Messaging Terms for how the programme works and how to stop it.
International transfers
Our service providers may process data on servers outside Nicaragua, including in the United States and the European Union. Where we transfer personal data internationally, we do so under the provider's contractual commitments and, for transfers from the EEA or the UK, on the basis of Standard Contractual Clauses or another recognised transfer mechanism.
How long we keep it
Enquiries are kept for up to 24 months from our last contact with you, so we can follow up on a conversation and keep a record of the consent you gave. If we go on to work together, records related to that engagement are kept for as long as the relationship lasts and for any period required by applicable accounting and tax rules.
Analytics attribution stored on your device expires automatically 90 days after your first visit. If you withdraw consent, it is deleted immediately.
You can ask us to delete your enquiry sooner, and we will unless we are required to keep it.
Your rights
Under Nicaraguan Law No. 787 you have the rights of access, rectification, cancellation and opposition in relation to your personal data. You may also withdraw a consent you have given at any time, without affecting processing carried out before you withdrew it.
If you are in the EEA or the UK, you additionally have the rights to restriction, to data portability, to object to processing based on legitimate interests, and to lodge a complaint with your local supervisory authority.
To exercise any of these rights, contact us using the details below. We will respond within the period required by applicable law. We may ask you for information to confirm your identity before acting, and we will not charge you for a reasonable request.
Cookies and local storage
This site sets only what is strictly necessary until you choose otherwise. The Cookie Policy lists every cookie and storage item by name, what it is for, and how long it lasts, and explains how to change your choice at any time.
Security
The site is served over HTTPS. We limit access to enquiry data to the people who need it, we keep the data we collect to what the enquiry actually requires, and we do not store your IP address or payment details on this website.
No system is perfectly secure. If a breach affects your personal data and applicable law requires it, we will notify you and the relevant authority within the required timeframe.
Children
This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
If we change how we handle personal data, we will update this page and change the date above. If the change is significant, we will ask for your consent again where the law requires it.
Contact
BuildCresco