LEGAL INFORMATION
Privacy policy
How we handle the information you share with ARCO when visiting this site or asking about our services.
Updated: 24 October 2026
Who is responsible
Facundo Guardia is the controller of personal data processed through this site and operates under the ARCO brand. Privacy contact details are provided at the end of this policy.
The data we process
The enquiry form collects your first name, last name, email, company, team size and any tools, needs, timing and context you choose to share. We also record the language, source page and submission date. Follow-up may include notes and communications related to the enquiry. We do not need sensitive data; please avoid including it in free-text fields.
Purposes and legal bases
We use your information to handle your enquiry, understand your team’s needs, respond and, where appropriate, prepare a proposal. This is based on the precontractual steps you request or our legitimate interest in responding to professional communications when you represent a company. The acknowledgement email confirms receipt and does not subscribe you to a marketing list. Site and private-access security rely on our legitimate interest in protecting systems and preventing abuse.
Regional selection
When you open the main address, we first respect any valid regional preference you have chosen and saved. Otherwise, we select an initial version using the approximate country reported by our hosting provider and, where applicable, your browser’s language preferences. We do not request GPS access or store your IP address or city for this personalisation. You can change versions using the selector; regional links keep the selected version.
Optional analytics
Only with your permission, Microsoft Clarity may process pseudonymous identifiers, visited pages, clicks, scrolling and device information to produce metrics, heatmaps and recordings. Forms are masked and private access and CRM pages are excluded. You can decline or withdraw this consent through Cookie settings without losing access to the site. With your permission, we store UTM campaign tags, the landing-page path and the referring domain in sessionStorage for up to 30 minutes. If you submit an enquiry during that period, these details are associated with it to understand which campaigns generate opportunities; they follow that enquiry’s retention period. We do not store complete URLs or other query parameters. Do not put personal data in campaign tags. We do not use these tools to make automated decisions with legal effects on you.
Providers and transfers
We use Vercel for hosting, Neon for the database, Resend for transactional email and Microsoft Clarity for authorised analytics. These providers may process data outside your country, including in the United States. Where required by applicable law, transfers must be covered by an adequacy decision or other valid safeguards, such as standard contractual clauses. You can ask the controller about applicable destinations and safeguards. We do not sell your data.
Retention
We automatically delete closed enquiries after 12 months without recorded activity. Active enquiries, those with a future follow-up and those linked to customers are retained. If a contractual relationship begins, information needed to manage it and meet applicable legal obligations is retained accordingly. Backups and technical logs follow their retention and deletion cycles. According to Microsoft’s documentation, Clarity keeps ordinary recordings for 30 days and heatmaps, click data and marked sessions for up to 9 months.
Your rights
You can request access to your data, correction, deletion, restriction of processing and, where applicable, data portability. You can also object to the processing of your data. You can withdraw analytics consent anytime; this does not affect processing before withdrawal. We may need to verify your identity proportionately when handling a request. You can complain to the competent data protection authority where you live or where a possible infringement occurs.
Security and updates
CRM access is restricted to the administrator account with two-factor authentication, and encrypted connections are used. This policy may be updated as our services or processing change. If a new purpose requires consent, we will request it before applying the change.
Google Analytics 4
With your consent we use Google Analytics 4, provided by Google, to measure visits, campaign sources and aggregate actions such as opening the demo, progressing through a form or confirming an enquiry. We do not send form fields, CRM identifiers or private URLs. Location and device information are approximate provider measurements. Analytics does not replace enquiries stored in the CRM. Google Signals and advertising personalisation are not enabled. See Google’s privacy policy for processing and international transfer information.
Cloudflare Turnstile
We use Cloudflare Turnstile in the final form step to reduce automated and abusive submissions. Cloudflare processes technical browser and connection signals, including the IP address. Our integration does not send names, email addresses or form answers to Turnstile. Security verification operates independently of optional analytics. See Cloudflare’s policy for information about data processing and international transfers.
Cloudflare · Privacy policyPrivacy contact
Facundo Guardia · ARCO · Spain
hello@arcoteams.comLanguage
Choosing a regional variant saves a functional preference cookie for 180 days so the homepage can remember that choice. It contains no IP address or detected country and does not enable analytics.
More about our analytics provider: Microsoft Clarity · Microsoft Privacy · Google Analytics 4 / Google Privacy