Privacy policy

Last updated: 3 October 2026

This policy explains what personal data HVC handles through hvc.cr and the contact channels the site offers, what we use it for, and what rights you have over it. It is written to be understood without technical or legal background.

Who is responsible for your data

HVC is the controller of the personal data described in this policy. We operate from Costa Rica and provide technology services to businesses.

Email: [email protected]
WhatsApp: +506 8330 4262
Country of operation: Costa Rica

For anything concerning your personal data, including exercising your rights, write to [email protected].

What data we handle

The site itself collects nothing from you: it has no forms, uses no analytics or advertising tools, and sets no cookies of its own. The personal data we end up holding is what you send us, over WhatsApp or by email — typically your name, your phone number and your email address.

In detail:

Connection data: IP address, date and time, pages requested, browser and operating system. Generated automatically when you visit, and kept in the logs of the server and of the network that protects it.
Language preference: If you pick a language, your browser remembers it in a local storage entry called “hvc-lang”. It never travels to any server, ours or anyone else’s, and you can clear it from your browser settings.
What you send us over WhatsApp or email: This is the only route by which we receive personal data from you, and only if you decide to write. In practice it is your name, your phone number and your email address, plus your company name and the content of your message. None of it is requested or stored by the website.
Business relationship data: If we end up working together, the data needed to deliver and invoice the service: name, role, email, phone and company details.

We do not ask for sensitive data — health, ethnic origin, religious or philosophical beliefs, sex life or sexual orientation, political or trade union membership — and we ask that you not include any in your messages.

What we use it for

Answering your enquiry and preparing a proposal.
Delivering, administering and following up on contracted services.
Keeping the site running and protecting it against abuse and attacks.
Meeting legal, accounting and tax obligations.

We do not use your data for advertising, we do not build profiles or make automated decisions about you, and we do not sell or transfer your data to third parties for commercial purposes.

On what grounds

Your consent: Given when you voluntarily write to us on WhatsApp or by email. You may withdraw it at any time.
The contractual relationship: Performing a contract with you, or the steps leading up to one.
Our legitimate interest: Keeping the site available and secure.
Legal obligations: Those imposed by commercial and tax regulations.

Who else is involved

These third parties are involved in running the site and handling enquiries. Each processes data under its own policy:

Hosting provider: Stores the site files and generates the server logs.
Cloudflare, Inc.: Delivery and protection network. Processes the IP address of each visit to serve the site and filter malicious traffic, and may set a strictly technical security cookie.
Google (Google Fonts): The site loads its typefaces from fonts.googleapis.com and fonts.gstatic.com. In doing so, your IP address reaches Google. If you would rather avoid that, you can block those domains: the site remains readable with your system typefaces.
WhatsApp and Meta Platforms: If you write to us on WhatsApp, the message travels through WhatsApp’s infrastructure and is also subject to the terms and privacy policy of WhatsApp and Meta. Messages are end-to-end encrypted between your device and ours. We answer for what we do with the content of that conversation; Meta answers for its own processing.
Email provider: Receives and stores the emails you send us.

Some of these providers operate outside Costa Rica, so your data may be processed in other countries. We aim to work with providers offering equivalent protection safeguards.

How long we keep it

Server and network logs: The provider’s technical retention period, normally no more than 12 months.
Enquiries that do not lead to an engagement: Up to 24 months, in case you get back in touch.
Client data: For the duration of the relationship and afterwards for the periods required by commercial and tax rules.
Language preference: Until you clear your browser data.

Once data is no longer needed for the purpose that justified it, we delete it.

Your rights

At any time and at no cost, you may:

Access: Find out what data of yours we hold and where it came from.
Rectification: Correct data that is wrong or incomplete.
Erasure: Ask us to delete it.
Objection and withdrawal: Ask us to stop processing it, or withdraw your consent.
Portability: Receive a copy in a readable format.

To exercise any of these, write to [email protected] saying which one. We will reply within five working days, in line with Costa Rica’s Law No. 8968. We may ask you to prove your identity before acting.

How to ask us to delete your data

You can ask us at any time to delete the personal data we hold about you:

Email [email protected] with the subject “Data deletion”, from the address you contacted us from; or
message us on WhatsApp at +506 8330 4262 from the number you contacted us from, asking for deletion.

We will delete everything we are not legally required to keep — accounting records for services already invoiced, for instance — and confirm it to you by the same channel within five working days.

Security

We apply reasonable technical and organisational measures to protect your data: encryption in transit (HTTPS across the whole site), access control on a least-privilege basis, backups and periodic configuration review. No system is infallible; should a breach affect your personal data, we would tell you and report it to the relevant authority.

Minors

The site and our services are aimed at businesses and at adults. We do not knowingly collect data from minors. If you believe a minor has sent us personal data, write to us and we will delete it.

Cookies and local storage

This site sets no cookies of its own, and none for analytics or advertising. It uses a single local storage entry, “hvc-lang”, to remember the language you chose. The protection network may additionally set a strictly technical security cookie. You can clear all of it from your browser settings without losing any site functionality.

Links to other services

The site links to WhatsApp and may link to other external services. Once you leave hvc.cr, the privacy policy of the service you land on applies, not this one.

Applicable law and complaints

We handle your data in accordance with Costa Rica’s Law No. 8968 on the Protection of the Individual with regard to the Processing of their Personal Data, and its implementing regulation. If you believe we have not handled your request properly, you may turn to the Agencia de Protección de Datos de los Habitantes (PRODHAB).

If you write to us from another country in the region, we honour your rights through the same channel and within the same deadlines, taking into account the applicable local rules — among others Mexico’s LFPDPPP, Colombia’s Law 1581 of 2012, Brazil’s LGPD, Argentina’s Law 25.326, Chile’s Law 19.628 and Peru’s Law 29733.

Changes to this policy

We will publish any change on this same page, with a new update date. If a change significantly affects how we handle your data, we will tell you through whatever contact channels we have.