Privacy
What this site collects, why, who processes it, and how to have it deleted.
Last updated: 2026-07-28
Who is responsible
Gabriel Roque, an independent consultant based in Ecuador, is the data controller for this site. For anything on this page, write to [email protected].
What this site collects
Only what you type into the contact form. There is no analytics, no advertising, no tracking pixels and no third-party scripts beyond the anti-spam check described below. Fonts and icons are served from this domain, so loading a page tells no one else that you visited.
The contact form
When you submit it, these fields are sent:
- Name, email address, subject and message — required.
- Company and service of interest — optional; leave them blank if you prefer.
They are used for one purpose: to read your message and reply to it. They are not added to a mailing list, not profiled, and not sold or shared for marketing.
Anti-spam check
The form is protected by Cloudflare Turnstile. To tell a person from a bot, your IP address is sent to Cloudflare along with the challenge token. Cloudflare also hosts this site, so it processes the usual request metadata — IP address, user agent and timestamp — as part of serving pages and blocking abuse.
Cookies
One, and only if you use the language switcher: a cookie named lang holding
either en or es, kept for a year, so the site opens in the
language you chose. It contains no identifier and is not used for tracking. Cloudflare
may set its own security cookies as part of the anti-spam check.
Who else sees your message
- Resend — delivers the message to my inbox, and sends you a confirmation copy so you have evidence it arrived.
- Cloudflare — hosting and the anti-spam check.
Both are based in the United States, so submitting the form involves an international transfer of your data. That transfer happens because it is necessary to deliver the message you chose to send.
Legal basis and retention
The basis is your consent, given by submitting the form. Messages are kept only while there is a reason to keep them — answering your enquiry and any work that follows from it — and are deleted once there is not. You can ask me to delete yours at any time.
Your rights
Under Ecuador's Organic Law on Personal Data Protection (LOPDP) you may request access to your data, correction, deletion, portability, and object to its processing. No decision about you is made automatically. To exercise any of these, email [email protected] — I will respond within the statutory period. If you are not satisfied, you may complain to Ecuador's Superintendency of Personal Data Protection.
If you are in the European Economic Area or the United Kingdom, the equivalent GDPR rights apply and you may complain to your national supervisory authority.
Security
The site is served over HTTPS only, with a content security policy and strict transport security. If you find a vulnerability, the disclosure contact is published at /.well-known/security.txt.
Changes
If the data flow changes, this page changes with it and the date at the top is updated.