Privacy Policy
Scope
This Policy explains how we collect and use personal data when you visit our website, contact us, book a call, or engage our services. We provide legal operations and coordination for Costa Rica company formation and compliance. We are not a law firm. Final legal work is performed by licensed Costa Rican counsel.
Data we collect
We collect only what we need for the purposes below.
Website and technical data
IP address, device and browser details, pages viewed, events, cookies or similar identifiers.
Contact and lead data
Name, email, phone, company, role, country, notes from calls or forms, project details you choose to share.
Service and account data
Engagement documents, corporate filings, contracts, questionnaires, and timeline data.
KYC and AML data
Identity document details, proof of address, company registers, UBO information, source of funds information, sanctions screening results.
Billing data
Invoicing details, payment references, amounts and dates. We do not store full card details.
Communications
Emails, messages, attachments, and call recordings where permitted by law and notified in advance.
Sources of data
We obtain data from you or your company, from our service providers, from licensed counsel and notaries working on your matter, and from public or official sources such as company registers and sanctions lists.
Respond to inquiries and provide our website. Legal basis: legitimate interests Art. 6(1)(f) or consent Art. 6(1)(a) for optional cookies.
Prepare proposals, onboard clients, perform a contract. Legal basis: contract Art. 6(1)(b).
Legal basis: legal obligation Art. 6(1)(c). If special category data appears in AML records, we rely on Art. 9(2)(g) substantial public interest as permitted by law.
Security, fraud prevention, service improvement, analytics. Legal basis: legitimate interests Art. 6(1)(f). Analytics that require consent use Art. 6(1)(a).
Marketing communications. Legal basis: consent Art. 6(1)(a). You can withdraw consent at any time.
Retention
We retain data only as long as needed.
Leads and general correspondence. Up to 24 months from last contact.
Contracts, invoices and accounting records. Statutory periods, typically 7 to 10 years.
AML and KYC records. As required by law, typically up to 5 years after the end of the relationship.
Website analytics and cookies. Per tool settings and your consent choices.
Sharing and processors
We share data with service providers under written data processing terms. Typical processors include:
Website and hosting: Framer
Scheduling: Calendly or Cal.com
CRM and automation: HubSpot Free or Airtable, Zapier or Make
Email and collaboration: Google Workspace
Transactional email: Postmark or SendGrid
Analytics: Google Analytics 4 or Plausible
Document storage: Google Drive or equivalent
We also share data with licensed Costa Rican counsel and notaries for your matter, and with authorities where required by law. We do not sell personal data.
International transfers
Your data may be transferred outside the EEA or the UK, for example to the United States or Costa Rica. We use appropriate safeguards such as the EU Standard Contractual Clauses, the UK IDTA or Addendum, and any other safeguards required by law. Copies of relevant safeguards are available on request.
Your rights
You have the right to request access, rectification, erasure, restriction, portability, and to object to processing where applicable. You can withdraw consent at any time. To exercise rights, contact [privacy@licenseguardians.com]. We respond within one month where possible.
You can lodge a complaint with your data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens. See https://autoriteitpersoonsgegevens.nl
We do not use solely automated decisions that produce legal or similarly significant effects. If we ever introduce automated screening that does so, we will inform you and explain your rights.
Security
We apply role based access, least privilege, secure passwords, encryption in transit, and secure storage. No system is perfectly secure. Please do not send more data than we request for your matter.
Cookies and similar technologies
We use cookies to run the site and to measure performance. You can accept, reject, or manage categories through our banner. See our Cookie Policy for details.
Children
Our services are for business users. We do not knowingly collect data from children under 18.
Third party links
Our site may link to third party sites or tools. Their privacy practices are governed by their own policies.
Changes to this Policy
We may update this Policy. The latest version applies. Material changes will be communicated on our website or by email.
Contact
For privacy questions or requests contact:
[privacy@licenseguardians.com]
If you operate in the EEA you do not need an EU representative. If your controller is outside the EEA and you target the EEA you may need to appoint an EU representative. If you operate in the UK and target the UK you may need to appoint a UK representative.
