Privacy policy
Last updated: 11 November 2026
This is a translation for convenience. If there is any discrepancy, the Spanish version prevails.
1. Who is responsible for your data
KuarcTech Solutions S.A., corporate ID (cédula jurídica) 3-101-812076, registered address in La Unión, Cartago, Costa Rica (“KuarcTech”).
Privacy contact: services@kuarctech.com · +506 2279-3721.
2. What data we process and why
| When | What data | Purpose | Legal basis |
|---|---|---|---|
| You write to us through the contact form | Name, email, country, phone (optional), your message, the reason for your message and, depending on the reason, your company, organisation or university, the name of your start-up or the link to your LinkedIn profile or portfolio and, if you are writing about a job, your CV as a PDF | To reply to your message according to its subject: service enquiries and proposals; job applications, to consider you for current or future openings; interest in challenges; and start-up proposals. We also send you a single automatic acknowledgement | Your consent, given by ticking the privacy box |
| You tick the updates box (optional) | Name and email | To send you what you agreed to, depending on the reason: information from KuarcTech about services, events and news, or notices about challenges and opportunities | Your consent, separate and optional; you can withdraw it at any time |
| You accept analytics cookies | Pseudonymous browsing data (pages viewed, device, approximate country) | To understand how the site is used and improve it | Your consent in the cookie banner |
| You use the form | An encrypted, non-reversible code of your email address and IP address | To prevent abuse of the form: limiting submissions and acknowledgements | Legitimate interest in keeping the site secure |
| You visit the site | Server technical logs (IP address, date, page requested) | Security and operation of the site | Legitimate interest in keeping the site secure |
If you are writing about a job and attach your CV, we receive it as an email attachment in the services@kuarctech.com mailbox. The website server only checks that it is a PDF with no known active content and forwards it: it does not store it.
We do not ask for sensitive data, we do not make automated decisions about you and we do not sell your data.
3. Who else receives it
Only the providers we need to run the site, who process the data on our behalf:
- ShockHosting, website hosting;
- Zoho (Zoho Mail and ZeptoMail), email and delivery of form messages;
- Google (Google Analytics), only if you accept analytics cookies.
Some of these providers process data outside Costa Rica. We choose providers with recognised security measures and data protection commitments. We may also disclose data if a competent authority requires it by law.
4. How long we keep it
- Form messages about services and start-ups: for a reasonable period after the last contact, unless they lead to a business relationship; in that case, for as long as the law requires.
- Job applications (including your CV as a PDF, which is kept only in the services@kuarctech.com mailbox) and messages about challenges: up to 12 months after the last contact, to consider you for future opportunities. You can ask us to delete them sooner.
- Encrypted code of your email and IP address: up to 24 hours.
- Consent to receive communications: until you withdraw it.
- Analytics: according to the Google Analytics retention settings.
- Server logs: according to the hosting provider’s policy.
5. Your rights
You can request access to your data, its rectification or erasure, object to its processing and withdraw your consent at any time, without affecting any processing carried out before you withdrew it. Write to services@kuarctech.com stating your request. We will reply within the time limits set by law.
If you believe we did not handle your request properly, you can contact Costa Rica’s data protection authority, the Agencia de Protección de Datos de los Habitantes (PRODHAB).
If you are in the European Union, you also have the right to data portability and to lodge a complaint with the data protection authority of your country.
6. Security
We apply reasonable technical and organisational measures: an encrypted connection (HTTPS), restricted access to the data, and providers with security controls. No system is infallible. If an incident affecting your data occurs, we will act in accordance with the law.
7. Minors
This site is aimed at companies, organisations and adults interested in jobs, challenges or start-ups. We do not seek to collect data from minors.
8. Changes to this policy
If we change this policy, we will publish the new version on this page, showing the date it was last updated.