Privacy Policy

Procūra CR(“Procūra”), domiciled in Costa Rica, is the controller of your personal data under Law No. 8968 on Protection of Individuals against Personal Data Processing.

For data-related enquiries: info@procuracr.com

We only collect data you voluntarily provide through our website forms:

• Contact form: name or company, email address, WhatsApp number (optional), service of interest and message.
• Reminders subscription form: name or company (optional), email address and business type.

We do not collect browsing data, tracking cookies or payment information through this site.

Collected data is used exclusively to:

• Respond to enquiries and schedule business meetings.
• Send fiscal deadline reminders relevant to your business profile (only if you subscribed).
• Commercial follow-up related to Procūra services.

We do not use your data for third-party advertising and do not share it for unrelated purposes.

Processing is based on the explicit consent you give by completing and submitting any form on this site, as required by Article 5 of Law No. 8968. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Your data may be processed by these third-party processors under confidentiality agreements:

• Postmark (ActiveCampaign, LLC) — transactional email delivery. Privacy policy: postmarkapp.com/privacy-policy
• Supabase Inc. — encrypted database storage (AES-256 at rest). Privacy policy: supabase.com/privacy

We do not sell, rent or transfer your data to third parties for their own commercial purposes.

The processors above operate in the United States. Both hold SOC 2 Type II certifications and implement adequate transfer safeguards under applicable law.

• Contact enquiries: retained for the duration of the commercial relationship and up to two (2) years after the last interaction.
• Subscribers: retained while the subscription is active. Upon cancellation, data is deleted within 30 days.

Under Law No. 8968, you have the right to:

• Access: know what personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Cancellation: request deletion of your data.
• Opposition: object to processing under certain circumstances.

To exercise any of these rights, email info@procuracr.com with the subject “ARCO Rights”. We will respond within 10 business days.

We implement the following technical safeguards:

• HTTPS/TLS encryption in transit across the entire site.
• AES-256 encryption at rest in the database.
• Service-role-only database access — no personal data is accessible client-side.
• Rate limiting on all endpoints that receive personal data.
• HTTP security headers (CSP, HSTS, X-Frame-Options, etc.).

To cancel your reminders subscription, email info@procuracr.com with the subject “Unsubscribe”. We will process your request within 5 business days.

We may update this policy at any time. The date at the top reflects the latest revision. Material changes will be notified by email to active subscribers.

If you believe your data is being processed unlawfully, you may lodge a complaint with the Agencia de Protección de Datos de los Habitantes (PRODHAB): prodhab.go.cr