Privacy Policy

The controller of your data is Cavidas LLC ("Cavidas", "we"), with its registered address at [ADDRESS] (United States).

For any privacy-related question or to exercise your rights, contact us at [email protected].

This policy applies to the information we process when you visit our website, complete our forms, or book a call with us. We serve clients in the United States, Latin America, and Spain.

We only collect the data you voluntarily provide and the minimum technical data required to run the service:

• Contact form: first name, last name, email, phone (optional), service of interest, business type (optional), the message you send us and, if you tick the box, your consent to receive marketing communications.
• Strategy call booking: first name, last name, email, phone, additional notes (optional), and the selected time slot.
• Technical and usage data: IP address, device and browser type, and access logs automatically generated by our hosting infrastructure for security and operational purposes.

We do not collect special categories of data (health, beliefs, etc.) and we do not use analytics or advertising cookies. See our Cookies Policy for details.

• Responding to your enquiries and contact requests — legal basis: your consent and pre-contractual steps taken at your request.
• Managing and confirming strategy-call bookings — legal basis: pre-contractual steps and our legitimate interest in arranging appointments.
• Sending you marketing communications and news, only if you ticked the relevant box — legal basis: your consent, which you can withdraw at any time.
• Ensuring security, preventing fraud, and keeping the site running — legal basis: our legitimate interest.

We do not sell your personal data. We share it only with service providers (processors) that help us operate, under appropriate data processing agreements:

• EmailJS — delivery of the email notifications generated by our forms.
• HighLevel (GoHighLevel / LeadConnector) — CRM and booking-calendar management; stores your contact details when you request information or book a call.
• Amazon Web Services (AWS S3) — file and media hosting.
• MongoDB — the database where platform content and records are stored.
• Vercel — website hosting and technical logs.

We may also disclose data where required by law or a competent authority.

Some of our providers are located in the United States or other countries outside the European Economic Area. When we transfer data outside the EU/EEA, we rely on appropriate safeguards such as the Standard Contractual Clauses (SCCs) approved by the European Commission.

We keep your data for as long as necessary to handle your request and, afterwards, for the period legally required or needed to address potential liabilities. If you withdraw your consent, we will stop processing your data for that purpose.

Under the GDPR (EU) you may exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time.

If you are a California resident (CCPA/CPRA), you have the right to know what data we process, to request its deletion, and not to be discriminated against for exercising your rights. We do not sell or share personal data within the meaning of the CCPA.

To exercise your rights, email us at [email protected]. You also have the right to lodge a complaint with the competent supervisory authority.

Our site and services are directed at professionals and businesses. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us and we will delete it.

We may update this Privacy Policy to reflect legal or service changes. The current version will be published on this page along with its update date.

For any question about this policy or the processing of your data, email us at [email protected].