What I collect, where it lives and how it gets deleted.

Who is responsible

Andrés Camilo Briñez Núñez, Quito, Ecuador. To exercise any right over your data, or to ask what I hold about you: contacto@andresbrinez.com.

What is collected, and why

If you write through the contact form: your name, your email, your organisation and the message. They are used to reply to you and are recorded as a sales opportunity in my own system.

If you take the evaluation: your answers to the twenty-four questions, whether you marked that you can show evidence, whichever figures of your company you entered, and your name, role, email, company, country and size. They are used to work out your result, to generate the report if you buy it, and to send it to you. Your progress while answering is saved only in your browser so you can come back to it; that never travels anywhere.

If you buy the report: the billing details the payment provider asks for. Your card details are handled by that provider; they never pass through this site and I never see them.

If you study on the English course: your progress, your answers, your writing and, if you allow it, your voice. The course is for Spanish speakers and has its own notice, in Spanish, covering what is sent to the AI provider and how long each thing is kept: English course privacy notice.

No sensitive data is asked for or wanted. If you write one into the free-text message, it gets deleted.

On what basis

To deliver what you asked for (the evaluation, the report, the reply to your message): performing the relationship you started yourself. To keep the sales documents: the accounting and tax obligations that apply to me in Ecuador. Nothing is used for advertising.

Where it lives

On a server of my own, in Ecuador, under my physical control, with encrypted backups. There is no third-party cloud holding the content of your evaluation.

Who takes part along the way, each with one bounded task: Cloudflare (delivers the site and protects access; it sees traffic, not the contents of the database), Resend (delivers the emails I send you), the payment provider named at checkout (processes the charge; I issue the invoice), and Google if you write to me, because my inbox is there.

For how long

The evaluations and the reports, for as long as the relationship is alive and it still makes sense for you to return to your link; the sales documents, the seven years Ecuadorian rules require. If you ask me to delete yours sooner, whatever is not bound by that obligation gets deleted.

Your rights

To see what I hold about you, correct it, ask for it to be deleted, object to my using it, or request a copy in a readable format. Write to me and I settle it within fifteen days. Ecuador's Organic Law on the Protection of Personal Data covers these rights, and you can also go to your own supervisory authority.

Cookies

Only the technical ones: the one that keeps your session open in the portal and the one that remembers the language. There is no analytics, no pixels and no third-party advertising cookies. That is also why this site does not show you a cookie banner asking permission for something it does not do.

While a Google Ads campaign is running, the site loads the Google Ads tag, which leaves a cookie to tell whether whoever wrote to me arrived from an ad. It is there to count the enquiries each ad brings in, not to show you advertising, and it does not carry the content of your message.

Confidentiality of what you assess

What your company answers is not published, not quoted in any material and not shared with anyone. On this site clients are described by sector, never by name, and that rule holds for you too.