Privacy and data processing policy

The data controller is Alberth Gerardo Méndez Rodríguez, Costa Rican ID 2-0627-0652, operating under the registered trademark Almendro from San Ramón, Costa Rica.

This is the person before whom you exercise the rights granted by Costa Rican law 8968, and who answers for the use given to your data.

Questions about this policy and about your data: info@almendro.cr.

Contact form: name, email address and the message you write. To answer you and, where appropriate, prepare a proposal.

Support request: the client code and the description of the problem. To handle and follow up the case.

Portal account: name, email address, phone number and the company you belong to. To give access and follow up projects, quotes and tickets.

Browsing data: pages viewed, date and referrer. To learn which content is useful. This is aggregate measurement, not individual profiling.

No sensitive data is requested, and no card data is requested, because projects are paid by bank transfer.

Processing follows Costa Rican law 8968 on the protection of individuals regarding the processing of their personal data, and its regulation.

For public forms, the basis is your consent, given when you submit them. For portal accounts, the basis is performance of the contract between Almendro and the company you belong to.

Nobody signs themselves up. Accounts are created by Almendro at the request of the contracting company, which designates the people who will have access.

That means account data comes from that company. If you received an account and want to know what data about you is held, or ask for it to be corrected, write to info@almendro.cr.

Your data is neither sold nor rented.

It is shared only with the providers needed to run the service, such as application hosting and email delivery, and with a competent authority when the law requires it.

The site uses a session cookie, needed for the portal to work and to protect the forms.

Your theme preference (light or dark) and your language preference are stored in your browser, not on a server.

Almendro keeps its own record of page views, aggregate and without profiling. If third party measurement or advertising tools are enabled from the panel, those tools are governed by their own policies.

Account and project data is kept for as long as the client relationship lasts and afterwards for the period required by accounting and tax rules.

Contact messages that do not lead to a project are purged periodically.

You may request access to your data, its correction or its deletion, and withdraw any consent you gave.

Write to info@almendro.cr from the email address you were registered with. Law 8968 sets a five working day deadline to answer an access request.

If deletion affects data Almendro must keep for accounting or tax reasons, you will be told which data and for how long.

Traffic travels encrypted (HTTPS). Passwords are stored hashed, never in the clear, and nobody at Almendro can read them.

Portal access requires an authenticated session and permissions are granted by role: each person sees their own account and nothing else.

The service is aimed at companies and at adults. Almendro does not knowingly collect data from minors.

If this policy changes, the new version is published on this same page with its date.

Last updated: 16 August 2026.