Privacy Policy

The data controller for your personal data is Cacao Technologies (Dominican taxpayer ID, RNC 133232421), located at Enriquillo 10, No. 401, Sector Quisqueya, Santo Domingo de Guzmán, Dominican Republic.

If you have questions about this policy or your data, email us at [email protected].

You can browse the site without creating an account or filling in any form, because there are no visitor accounts or private areas. Apart from the technical data your browser sends when it connects (explained below), we only receive the data you choose to send us, mainly through the contact form and the job application form.

Contact form: we store your name, the email address you enter, your company (if you provide it), the topic you choose and your message. Each message is also stored with the date and time it was sent, the language you were viewing the site in and the IP address it was sent from.

Job application form: when you apply for an opening from its page, we store your name, the email address you enter, the link to your LinkedIn profile or portfolio (if you provide it) and your résumé (CV) as a PDF. Each application is also stored with the opening and the role title as it was published, the date and time it was sent, the language you were viewing the site in and the IP address it was sent from. During the hiring process, our team records the status of your application in the admin panel (for example, in review, interviewing or hired).

How you found the site: along with your message we store the first page of the site you opened during your visit and the page that sent you to us (the "referrer" your browser reports, if any). If you arrived through a campaign link, we also store its utm_source, utm_medium and utm_campaign parameters (for example, the name of the social network or campaign). This is only stored with your message if you send the contact form; we don't store it with job applications. If you accepted analytics, Google Analytics also records, on its own, where you came from (see "Cookies and similar technologies").

Technical visit data: as with any website, your browser sends technical information when it connects, such as your IP address, your browser and device type, and your language settings. Cloudflare, which delivers and protects the site, processes this information so the site works. To decide whether to show you the site in Spanish, English or Norwegian, we use the language you picked earlier in the language switcher, if you did; otherwise the approximate country you're connecting from (Cloudflare derives it from your IP) or, if that isn't available, your browser's language setting. We don't store your country or your browser's language for this; Google Analytics does record them if you accept it.

Direct emails: if you prefer, you can apply or send us your résumé by writing to our careers address, and product quote requests are also made by email. Those links open your email program, and what you send that way doesn't go through the site or get stored on it. Except in the case explained next, we use whatever you send us by email only to handle your request or evaluate your application.

Open applications: if you send us your résumé without applying for a specific opening (for example, with the "Send us your CV" button on the careers page, when you don't see a role that fits or there are no open roles), we review it and also keep it so we can consider you for future openings that match your profile. That button also opens your email program, so your résumé reaches our inbox and isn't stored on the site.

We don't ask for sensitive data, such as health information, religious beliefs or political opinions. Please don't include it in your message or your résumé.

To reply to your message in the language you used and follow up on your inquiry.

If your inquiry moves forward, to prepare a proposal and manage the business relationship with you or your company.

If you apply for an opening, to evaluate your application (reviewing your résumé and profile against what the role requires) and to contact you during the hiring process.

If you send us your résumé without applying for a specific opening, to evaluate your profile, consider you for future openings that match it and contact you when one comes up.

To protect the forms from spam and abuse. The Cloudflare Turnstile check and your IP address help us tell people apart from automated programs.

To learn which channels bring us inquiries (search engines, social networks, campaigns or links from other sites). We see this from the landing page, referring page and utm parameters, and it helps us improve how we promote our services.

To remember the language you chose in the language switcher.

If you accept analytics cookies, to understand in aggregate how the site is used so we can improve it (Google Analytics 4).

We don't sell or rent your data, and we don't use it for purposes other than those described here.

Law 172-13 requires the free, express and knowing consent of the data subject to process personal data, except in the cases the law itself exempts.

You send the contact form or the job application form voluntarily, with this policy available to you. Sending it is your consent for us to process your data for the purposes described here. The same applies if you email us your résumé without applying for a specific opening: by sending it you agree that we keep it to consider you for future openings. If your inquiry or application leads to a business, employment or contractual relationship with us, we will also process your data because it is necessary to carry out and fulfill that relationship, a case provided for in Article 27, item 4, of Law 172-13.

The language cookie is only created when you choose a language in the switcher. The technical processing that Cloudflare and our server carry out to show you the site is necessary for it to work and stay secure.

Google Analytics only loads if you accept it in the cookie notice shown on your first visit. If you decline or don't answer, it doesn't load or set its cookies. You can withdraw that consent at any time under "Cookie preferences" at the bottom of every page.

You can withdraw your consent at any time by emailing [email protected]. Withdrawing it doesn't affect what we did with your data before your request.

We don't disclose your data to third parties for their own purposes. Only the providers we need to run the site are involved, and they process your data only to provide their service to us:

Hosting: the server (and, where applicable, its provider) that runs the site, the database where contact form messages and job applications are stored, and the private folder where résumés are stored.

Cloudflare, Inc.: all site traffic passes through Cloudflare's network, which delivers it (content delivery network) and protects it from attacks. Cloudflare also provides the Turnstile anti-spam service. When you send a form, we send Cloudflare the verification code generated in your browser together with your IP address to confirm you're a person.

Email service: the provider through which we receive the emails you send us directly.

Google LLC: provides Google Analytics 4, which is only used if you accept analytics cookies (see "Cookies and similar technologies").

We may also disclose data when a law or a court order requires us to.

International transfers: Cloudflare and Google are U.S.-based companies that operate data centers in many countries, so your data may be processed outside the Dominican Republic. Transfers to Cloudflare are necessary to handle the request you make (Article 80, item 6, of Law 172-13); transfers to Google Analytics only happen if you authorize them in the cookie notice (Article 80, item 1). You can review these companies' practices at cloudflare.com/privacypolicy and policies.google.com/privacy.

We keep contact form messages, and the data stored with them, only as long as we need them to handle your inquiry and follow up on any relationship that results from it. Then we delete them. If a legal obligation requires us to keep them longer, we block them: we stop using them and they remain available only to the authorities for the applicable period, as provided in Article 15 of Law 172-13.

We keep applications sent through the form, with their résumé, for between 30 and 180 days from when we receive them, depending on how long the hiring process for that opening lasts. Then we delete them from our database and the server's private folder. You can ask us at any time to delete your application and résumé sooner (see "Your rights and how to exercise them").

If you sent us your résumé without applying for a specific opening, we keep it to evaluate your profile and consider you for future openings until you ask us to delete it, which you can do at any time (see "Your rights and how to exercise them").

The language cookie lasts up to a year or until you delete it. The choice you make in the cookie notice is kept for up to six months. Cloudflare and, if you accepted analytics, Google keep their own data under their own policies.

Only authorized Cacao Technologies staff, with a password-protected account, can see messages and job applications in our admin panel. Résumés are stored in a private folder on the server, separate from the site's public files, and can only be downloaded while signed in to that panel. The database is not exposed to the internet and the site is available over an encrypted connection (HTTPS). No system is infallible, but these measures are meant to keep your data from being lost, altered or accessed without authorization.

Law 172-13 gives you the following rights over your personal data. They are independent of each other: you can exercise any of them without having exercised another first.

Access: find out what data we hold about you, where it came from and what we use it for.

Rectification and updating: correct inaccurate or incomplete data.

Cancellation: ask us to delete your data, unless a law or a contract requires us to keep it.

Objection: ask us to stop processing your data for a particular purpose.

To exercise these rights, email [email protected] with the subject "Data protection". Include your name, the email address you used to contact us or apply and what you are requesting. To protect your data, we may ask you to verify your identity before we reply.

We will reply within the legal deadlines: five (5) business days for access requests and ten (10) business days to rectify, update or delete data. There is no charge for handling your request.

If we don't reply in time or you disagree with our response, you can go to the courts through the habeas data action provided for in the Dominican Constitution and Law 172-13.

Cookies are small files a website stores in your browser. This site uses very few:

NEXT_LOCALE (ours, preference): created only when you pick ES, EN or NO in the language switcher. It stores that choice for up to a year so we can show you the site in your language on later visits (some browsers, such as Safari, may delete it sooner).

Cloudflare cookies (technical and security): Cloudflare may set its own cookies, such as __cf_bm or cf_clearance, to tell legitimate traffic apart from automated traffic. On pages with a form (the contact form and the job application form), the Turnstile widget is also loaded from challenges.cloudflare.com and checks technical signals from your browser for the same purpose.

Visit source: during your visit, the site keeps the landing page, referring page and utm parameters in your browser so it can attach them to your message. If you don't use the contact form, the site doesn't send this information anywhere (Google Analytics, if you accepted it, receives the address of each page you visit on its own).

cacao_consent (ours, preference): stores for up to six months whether you accepted or declined analytics, so we don't ask on every visit. After that, or if you delete it, we ask again.

Google Analytics 4 (analytics, optional): this only loads if you accept it in the cookie notice. Google then sets the _ga cookie and another cookie that starts with _ga_ followed by an identifier. By default they last up to two years. They count visits and show, in aggregate, which pages are visited (with their full address, including utm parameters), from what kind of device, browser and language, from what approximate location and where visitors come from. We also record a few actions: clicks on email and phone links, on the contact, request-a-quote and apply buttons, the contact form being sent, for which we only send the topic you chose, and a job application being sent, for which we only send the opening. Apart from that topic and opening, we don't send form data to Google or combine analytics with it. According to Google, Google Analytics 4 uses the IP address only to estimate location and does not log or store it.

We don't use advertising cookies or social media pixels. The site's fonts are served from our own server, so your browser doesn't connect to Google Fonts or any other font service.

You can block or delete cookies in your browser settings. Without the language cookie the site still works, but it will pick the language automatically on each visit. If you block Cloudflare's cookies, some security checks, such as the one on the forms, may fail. To accept or withdraw analytics at any time, use "Cookie preferences" at the bottom of every page: if you withdraw it, we stop sending data to Google and delete its cookies from your browser. You can also use Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout).

Our site is aimed at businesses and professionals, not minors, and we don't knowingly collect data from anyone under 18. If you believe a minor has sent us their data, email [email protected] and we will delete it.

We will update this policy when what the site does changes, for example if we enable a new tool. The current version will always be published on this page with the date of its last update.

This policy is available in Spanish, English and Norwegian. If the versions differ, the Spanish version prevails.