Privacy Policy

1. Data controller

The controller responsible for the processing of personal data is HSCO S.A.S. de C.V., doing business as ARKAD Design Group.

• Registered address: Antiguo Cuscatlán, La Libertad, El Salvador.
• Email for privacy matters: info@arkad.com.sv
• Personal Data Protection Officer: Diego Sermeño

2. Personal data we collect

Depending on how you interact with ARKAD, we may collect the following categories of information:

Data provided through the contact form

• First name.
• Last name.
• Business email address.
• Phone number.
• Services you are interested in.
• Message or information you choose to provide about your project.
• Language in which the request was submitted.
• Preference regarding receiving marketing communications.

We ask users to avoid including sensitive personal information that is not necessary to handle their request.

Technical information

When you use our website, our systems or technology providers may process certain technical data necessary for the site's operation, security, and protection, such as IP address, browser type, device, date and time of access, and similar technical logs.

3. Purposes of processing

We may use the personal data we collect to:

• Receive, manage, and respond to requests submitted through our contact form.
• Get in touch with people interested in our services.
• Prepare quotes, proposals, meetings, or conversations related to a project.
• Follow up on business opportunities and previously received requests.
• Identify the services a person has expressed interest in.
• Keep a record of communications related to a request or potential business relationship.
• Manage relationships with clients and prospects.
• Comply with legal, regulatory, administrative, or contractual obligations.
• Prevent abusive, fraudulent, or unauthorized use of our systems and protect the security of the site.
• Send news, resources, commercial information, or promotions only when the person has given consent to receive marketing communications.

We will not use personal data for purposes incompatible with those disclosed at the time of collection without obtaining the corresponding authorization when required.

4. Consent and marketing communications

Submitting a request through our contact form does not automatically mean the user has subscribed to marketing communications.

Subscribing to commercial communications is optional and is requested through a separate option within the form. When a person indicates that they want to receive communications from ARKAD, we may use their name and email address to send information related to our services, news, resources, content, and promotions.

Consent to receive these communications may be withdrawn at any time through the unsubscribe link included in our emails or by sending a request to info@arkad.com.sv.

Withdrawing consent for marketing communications does not affect communications necessary to handle requests, provide services, or fulfill obligations arising from an existing business relationship.

5. Mailchimp and contact management

ARKAD uses Mailchimp, a service operated by The Rocket Science Group LLC d/b/a Mailchimp, as the technology platform for contact management and email communications.

When a person uses our contact form, certain data such as first name, last name, email address, phone number, language, services of interest, and the history related to the request may be stored or processed through Mailchimp.

Contacts who have not authorized marketing communications may remain registered as unsubscribed contacts in order to manage the request, maintain the contact history, and follow up on a potential business relationship. We will only use a contact for marketing campaigns when the corresponding authorization exists.

6. International data transfers

Some of the technology providers used by ARKAD may operate or store information outside of El Salvador. In particular, the use of Mailchimp may involve the processing or transfer of personal data to infrastructure located in the United States and to other providers or international locations used to deliver the service.

When processing involves an international transfer of personal data, ARKAD will seek to use providers that maintain contractual, technical, and organizational measures designed to protect the information, and will carry out such transfers in accordance with applicable law. When legally required, we will request the corresponding authorization from the data subject.

7. Providers and third parties

ARKAD may provide limited access to personal data to providers that are necessary to operate our services, including, as applicable:

• Email marketing and contact management platforms.
• Hosting and technology infrastructure services.
• Email service providers.
• Security, monitoring, and backup services.
• Tools necessary for the operation and maintenance of the website.

These providers must use the information solely for purposes related to the services they provide to ARKAD and in accordance with applicable contractual and legal obligations.

ARKAD does not sell or rent databases, email addresses, or personal information of its users to third parties.

We may also disclose information when necessary to comply with a legal obligation, a request from a competent authority, a court order, or to protect the legitimate rights of ARKAD or third parties.

8. Cookies and similar technologies

Our site may use cookies or similar technologies necessary for its operation, security, session management, or storage of certain preferences.

If analytics, advertising, or other tools that use non-essential cookies are incorporated, ARKAD will inform users about their use and provide mechanisms to manage their preferences where applicable. This Policy will be updated when new technologies are incorporated that involve additional forms of collecting or processing personal data.

9. Data retention

We will retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected. The retention period may vary depending on the existence of an active request or business conversation, a contractual relationship, legal or administrative obligations, the need to keep records to handle claims or protect legitimate rights, and the consent given to receive marketing communications.

When data is no longer necessary and there is no obligation or basis requiring its retention, it may be securely deleted, blocked, or anonymized.

10. Information security

ARKAD adopts reasonable technical, administrative, and organizational measures to protect personal data against loss, alteration, destruction, unauthorized access, disclosure, or misuse. Access to personal data is limited to the people and providers who need to process such information to fulfill the purposes described in this Policy.

Despite these measures, no system connected to the Internet can guarantee absolute security. In the event of a security breach that compromises personal data, ARKAD will take the assessment, mitigation, and notification measures required under applicable law.

11. Data subject rights

Data subjects may exercise the rights recognized by applicable law, including:

• Access: know what personal data we hold and how it is processed.
• Rectification: request the correction or updating of inaccurate, incomplete, or outdated information.
• Cancellation or erasure: request the deletion of data when it is no longer necessary or when legally applicable.
• Objection: request that certain processing of personal data cease, including processing for direct marketing purposes.
• Portability: request, where applicable, your personal data in a structured, commonly used format.
• Erasure from public sources: request, where applicable, the removal of certain personal data published in electronic environments.
• Restriction: request that the processing of certain data be restricted when the conditions provided by applicable law are met.

The data subject may also revoke previously given consent when processing is based on that consent.

12. How to exercise your rights

To exercise rights related to personal data protection, you may contact ARKAD at info@arkad.com.sv. The request must include sufficient information to verify the requester's identity and clearly identify the right you wish to exercise and the data related to the request.

• Personal Data Protection Officer: Diego Sermeño

ARKAD will handle requests within the timeframes established by applicable law.

13. Data of children and adolescents

ARKAD's services are primarily aimed at businesses, professionals, and individuals seeking to hire digital services. We do not intentionally collect personal data from children or adolescents without the required authorization. If we identify that we have collected information from a minor without the corresponding authorization, we will take the necessary steps to delete it or process it in accordance with applicable law.

14. Links and third-party services

Our site may include links to websites, social networks, platforms, or services operated by third parties. ARKAD does not control the privacy practices of such third parties. We recommend reviewing their respective privacy policies before providing them with personal information.

15. Changes to this Privacy Policy

ARKAD may modify this Privacy Policy when necessary to reflect changes in our services, technology tools, internal practices, or legal requirements. The current version will be available on our website and will indicate the date of its last update.

When a change requires new authorization from the data subject, we will request that authorization before applying the new processing, where applicable.

16. Governing law

This Privacy Policy and the processing of personal data carried out by ARKAD will be governed primarily by the laws in force in the Republic of El Salvador on personal data protection, without prejudice to any other applicable rights or obligations.