Privacy policy

Data controller

• Controller: Andy Macas, an individual offering services under the trade name Forjia.
• Address: Quito, Ecuador.
• Phone: +593 98 305 1718.
• Email: [email protected].

We have not appointed a data protection officer because our processing does not currently fall within the cases where one is mandatory. Any privacy question can be sent to [email protected].

What data we process and where it comes from

We obtain all data directly from you. We do not buy databases or collect information from public sources.

• Contact form: name, email, the service you are interested in, budget range (optional) and your message.
• Email or WhatsApp: the data you send us through those channels, including your phone number if you use WhatsApp.
• Technical data: the website host automatically logs data such as IP address, browser and visit date, for security and operation.

We do not ask for sensitive data (health, ethnic origin, beliefs, biometrics, etc.). Please do not include it in your messages.

Why we use your data

• To answer your enquiry and continue the conversation you started.
• To prepare and send you a proposal, if you ask for one.
• To schedule the discovery call.
• To keep the website secure and prevent abuse of the form.

We do not use your data for any other purpose, we will not send you advertising you did not ask for, and we do not sell or share your data for commercial purposes. If we ever wanted to use it for something else, we would ask for your consent again.

Legal basis

We process your data on the basis of your consent, given by ticking the form checkbox or by contacting us on your own initiative, and to take pre-contractual steps you request, such as preparing a proposal (article 7 of the LOPDP).

Technical browsing data is processed on the basis of our legitimate interest in keeping the website secure and available.

Types of processing

We collect, record, store, consult and, when appropriate, delete your data. We process it electronically and do not use it for profiling.

We do not make decisions about you based solely on automated assessments. Although we work with artificial intelligence on client projects, this website does not use AI to evaluate the people who contact us.

How long we keep it

• Enquiries that do not become a project: up to 24 months after the last contact, then deleted.
• If you hire us: for the duration of the contract and afterwards for the periods required by applicable tax, accounting and liability rules.
• If you withdraw consent or ask for deletion, we erase the data within 15 days, unless a legal obligation requires us to keep it.

Data is kept in a contact database under our responsibility, in the company email account and in the form service described below.

Who we share your data with

To run the website we use providers that process data on our behalf (processors), bound by contractual confidentiality and security terms:

• Cloudflare, Inc. (United States): hosts the website, receives the contact form on its network and logs technical visit data. We do not store messages in any database.
• Resend (United States): delivers form messages to our inbox by email.
• Zoho Corporation (United States): provider of the [email protected] mailbox, where correspondence is stored.

Because some of these providers are outside Ecuador, submitting the form involves an international data transfer. We carry it out with your consent and with the contractual safeguards these providers offer, in line with articles 55 onwards of the LOPDP and the Superintendency’s transfer rules.

If you choose to message us on WhatsApp, your data is also processed by WhatsApp LLC / Meta Platforms under their own terms and privacy policy. That channel is optional: you can always use the form or email.

We will only disclose data to authorities when there is a legal obligation or court order.

If you do not give us your data, or it is wrong

Name, email and message are needed to reply. Without them we cannot handle your request through the form, although you can reach us another way. The other fields are optional.

If the data you give us is wrong or inaccurate, we may be unable to contact you or the proposal may not fit your case. You can correct it at any time.

Your rights and how to exercise them

Under the LOPDP you have the right to:

• Access: know what data of yours we process and how.
• Rectification and updating: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data.
• Objection: object to a specific processing.
• Portability: receive your data in a structured, commonly used format, or have us send it to another controller.
• Suspension of processing: ask us to temporarily stop processing it in the cases provided by law.
• Not be subject to decisions based solely on automated assessments.
• Withdraw your consent at any time, without retroactive effect.

To exercise them, email [email protected] with the subject “Data protection”, state the right you want to exercise and attach a document proving your identity (or your representative’s). It is free and we reply within 15 days at most.

Where to file a complaint

You can send us any complaint at [email protected] or at our address. If you are not satisfied with the answer, or do not receive it in time, you can contact the Superintendency of Personal Data Protection, Ecuador’s supervisory authority (www.spdp.gob.ec).

Cookies and browser storage

This website does not use first- or third-party cookies, nor analytics, advertising or tracking tools. Fonts, images and videos are served from the website itself, with no external services. That is why we do not show a cookie notice.

If we ever add tools that use non-essential cookies, we will ask for your consent before enabling them and update this policy.

Security

We apply reasonable technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access to the accounts where messages are kept, two-step authentication and providers with their own security measures. If a security breach affected your data, we would notify the Superintendency and, where applicable, you, within the legal deadlines.

Minors

Our services are aimed at companies and professionals. The website is not intended for children or adolescents, and we do not knowingly collect data from people under 18.

Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The date of the last update appears at the top. If a change affects the purpose of processing, we will let you know and, where applicable, ask for your consent again.