Privacy policy

Who is responsible

The data controller is D-Legacy SAS, a company incorporated in Ecuador and based in Quito, operating under the Daleki Lab brand. For any personal data matter, write to dalekilab@gmail.com.

What data we process

This website has no forms, accounts, newsletter or bookings, and it does not store personal data in a database of its own. ARCO and the demonstrations run in your browser and do not record what you choose.

• If you write to us on WhatsApp or by email: the data you decide to share, such as name, company, contact details and the content of your message.
• Technical connection data: the hosting provider processes IP address, browser and access logs to serve and protect the website.
• If we work together: data about the people responsible for the project and the information needed to deliver it, as we agree.

We do not use analytics, advertising, profiling or session recording.

What we use it for

1. Answering your inquiries and following up.
2. Preparing a proposal when you ask for one.
3. Delivering, invoicing and supporting a contracted project.
4. Meeting legal, tax and corporate obligations.
5. Keeping the website secure.

We only send you marketing communications if you expressly agreed. We do not make automated decisions that produce legal effects on you.

Legal basis

• Your consent, when you write to us or agree to receive communications.
• Pre-contractual measures or the performance of a contract, when we prepare a proposal or work with you.
• Compliance with legal obligations.
• Our legitimate interest in answering inquiries you started and in protecting the website.

You can withdraw your consent at any time, without affecting what was done before.

How long we keep it

• Inquiries that do not lead to an engagement: up to 24 months from the last contact.
• Clients: for the duration of the relationship and 7 years after, due to tax and corporate obligations.
• Technical logs: according to the hosting provider's policy.

Once that period ends, data is deleted or anonymized.

Who else processes it

• Vercel Inc.: hosting and delivery of the website.
• Google: email.
• Meta (WhatsApp): messaging, when you choose to write to us through that channel.
• The project providers we agree on with you in the proposal.

We do not sell your data or share it for advertising purposes.

Transfers outside Ecuador

These providers operate servers outside the country, mainly in the United States and the European Union. Transfers are made with the safeguards provided by law and by each provider's policies.

Your rights

Ecuador's Organic Law on Personal Data Protection grants you the right to:

• Access the data we hold about you
• Rectify it if it is wrong or incomplete
• Delete it when it is no longer needed or you withdraw consent
• Object to a specific processing activity
• Temporarily suspend processing
• Port it to another controller in a readable format
• Not be subject to decisions based solely on automated processing

Write to us at dalekilab@gmail.com. We respond within 15 days of receiving your request. If you believe we did not handle your request properly, you can file a complaint with Ecuador's Superintendency of Personal Data Protection.

How we protect it

The website is served only over HTTPS, with security headers and no exposed databases or credentials. In our projects we apply least privilege access, data separation and human approval for sensitive actions. If a breach affecting your data occurs, we will notify you and the authority, as required by law.

Minors

This website is intended for companies and professionals. We do not knowingly collect data from minors.

Cookies

This website does not use cookies. Details are in our cookie policy.

Changes

If this policy changes, we publish the new version with its effective date.