Privacy Policy · CRBytes

1. Who is responsible for your information

The data controller is CRBytes S.A., business registration ID 3-101-928509, with address at Condominio Hacienda las Flores, San Joaquin de Flores, Heredia, Costa Rica. You can contact us at any time at privacy@crbytes.com.

2. Information we collect

We only collect information that we need in order to operate our website and serve our clients:

Information you give us directly. When you complete the contact form, send us an email, or contact us by phone or messaging apps, we receive your name, email address, telephone number, company name and the content of your message.
Client and project information. If you become a client, we process contact details of your staff, billing information and any data required to deliver the agreed services under a separate contract or data-processing agreement.
Technical information collected automatically. Our web server records standard log data such as IP address, browser type and version, operating system, referring page, pages visited, and date and time of access. This is used for security, abuse prevention and troubleshooting.
Cookies and similar technologies. See section 6 below.

We do not knowingly collect information from children under 13 years of age, and our website is not directed to children.

3. Why we use your information and our legal basis

To respond to your inquiry and provide the information or quotation you requested — based on your consent and on steps taken at your request prior to entering into a contract.
To provide our services and manage the client relationship, including invoicing and support — based on performance of a contract.
To operate, secure and improve our website, prevent spam, fraud and abuse — based on our legitimate interest in running a safe service.
To comply with legal, accounting and tax obligations applicable in Costa Rica — based on compliance with a legal obligation.
To send occasional business communications about our services, only where you have asked for them or where permitted by law. You can opt out at any time.

We do not sell your personal information, and we do not use your information for automated decision-making that produces legal effects about you.

4. How we share information

We share personal information only with:

Service providers that operate our infrastructure on our behalf, such as cloud hosting, email delivery, customer relationship management and analytics providers. These providers act under contract and may only process data on our instructions.
Professional advisors such as accountants and lawyers, where necessary.
Authorities, when we are required to do so by law, regulation or valid legal process.
A successor entity, in the event of a merger, acquisition or sale of assets, subject to this Policy.

Some of our providers are located outside Costa Rica, including in the United States and the European Union. When we transfer personal information internationally, we require appropriate safeguards, such as standard contractual clauses, from those providers.

5. Social media platforms and advertising

We may maintain business pages on social media platforms such as Facebook, Instagram and LinkedIn, and we may run advertising campaigns on those platforms. If we advertise on Meta platforms, we may use tools such as the Meta Pixel, the Conversions API, Lead Ads or Facebook Login. When those tools are enabled:

They may collect information about your interaction with our website or advertisements, such as pages viewed, actions taken, device information and identifiers.
That information may be shared with Meta Platforms, Inc. and processed according to Meta's own data policy, and it may be used to measure campaign performance and show you relevant advertising.
If you submit a Lead Ad form or use Facebook Login, we receive the information you authorize the platform to share with us (typically name, email address and phone number) and we use it solely to respond to your request.

You can control personalized advertising through your settings in each platform and through your browser's cookie controls. As of the date of this Policy, advertising and analytics tracking technologies are only used where indicated in the cookie banner or notice shown on our site.

6. Cookies and tracking technologies

A cookie is a small text file stored on your device by your browser. We use:

Strictly necessary cookies, required for the website to function, to keep your session secure and to protect forms against cross-site request forgery. These cannot be disabled.
Preference cookies, such as the language version of the site you are viewing.
Analytics and marketing cookies, only if and when we enable analytics or advertising tools. Where required by law, we will request your consent before setting them.

You can delete or block cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the website from working correctly.

7. How long we keep information

Contact form messages and related correspondence: up to 24 months after our last interaction, unless a commercial relationship begins.
Client records, contracts and invoices: for the period required by Costa Rican commercial and tax law.
Web server logs: normally up to 12 months.

When information is no longer needed, we delete it or irreversibly anonymize it.

8. How we protect information

We apply technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS), access control on a least-privilege basis, hardened cloud infrastructure, logging and regular updates. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the competent authority if a breach affecting your rights occurs.

9. Your rights

Depending on where you live, you may have the right to access, correct, update, delete, restrict or object to the processing of your personal information, to withdraw consent at any time, and to receive a copy of your data in a portable format. Residents of Costa Rica have these rights under Law No. 8968 on the Protection of the Person against the Processing of their Personal Data; residents of the European Economic Area and the United Kingdom have equivalent rights under the GDPR.

To exercise any of these rights, write to privacy@crbytes.com. We will respond within the timeframe required by applicable law. You also have the right to file a complaint with the competent data protection authority — in Costa Rica, the Agencia de Protección de Datos de los Habitantes (PRODHAB).

10. Third-party links

Our website may link to third-party sites that we do not control. This Policy does not apply to them, and we encourage you to read their own privacy notices.

11. Changes to this Policy

We may update this Policy to reflect changes in our practices or in the law. The version published on this page is always the current one, and the date of the latest revision is shown at the top.

12. Contact

CRBytes S.A.
Condominio Hacienda las Flores, San Joaquin de Flores, Heredia, Costa Rica
Email: privacy@crbytes.com
Phone: +506 8703-0711