Privacy Policy

Itera · Last updated: October 2026

1. Who is responsible for your data

Itera is a Guatemalan company providing end-to-end information technology, digital transformation and business consulting services, based in Guatemala City, Guatemala. Itera is the controller of the personal data collected on iterasa.com and in its communications with you. For any privacy matter, write to [email protected].

This policy covers the website and your contact with Itera. Data that our platforms process on behalf of our clients (for example, in Itera Salud or Itera Lead 360) is governed by the contract with each client, who is the controller of that data.

2. What data we process

• Data you give us through the contact form or by email: name, email address, company (optional) and the content of your message. If you unsubscribe from our communications, your email address.
• Technical data about your visit: as with any website, the server receives your IP address, browser type and the page requested. Our hosting provider uses them to serve the site and protect it from attacks. To measure visits we use cookieless analytics that only produces aggregate figures and does not identify you (see theCookie Policy).

We do not need sensitive data. Please do not include health data, patient data or data about other people in your message.

3. Why we use it and on what legal basis

• To answer your inquiry and, if you ask, prepare a proposal. Basis: your own request and the steps prior to a possible contract, and our legitimate interest in responding to whoever writes to us (GDPR, Art. 6(1)(b) and 6(1)(f)).
• To send you marketing information about our services: only if you asked for it or, if you are already a client, about services similar to those you hired. Basis: your consent or, for clients, our legitimate interest (Art. 6(1)(a) and 6(1)(f)). You can unsubscribe at any time (section 4).
• To keep the site running and secure, and to know how many visits it gets. Basis: our legitimate interest (Art. 6(1)(f)).
• To meet legal obligations, for example tax obligations if you become a client. Basis: legal obligation (Art. 6(1)(c)).

The articles cited are from the European Union's General Data Protection Regulation (GDPR), which applies if you are in the EU or the European Economic Area. We do not make automated decisions or build profiles with your data.

4. Marketing emails and unsubscribing

Every marketing email we send you includes a link to unsubscribe. You can also do it atiterasa.com/en/unsubscribe or by writing to[email protected] with the subject “Unsubscribe”. It is free and we process it within 10 business days at the latest. We keep your address on a suppression list, solely so we do not write to you again. Unsubscribing does not affect the emails needed for a service you have hired.

5. Who we share it with

We do not sell your data or share it for advertising. Only the providers we need to operate have access to it; they process it on our behalf and under our instructions:

• Cloudflare: hosting, content delivery, security and site analytics.
• Web3Forms: receives the contact and unsubscribe forms and forwards them to us by email.
• Google Workspace: our email.

We may also disclose data to an authority when required by law or a court order.

6. Where it is processed

Itera operates from Guatemala and our providers process data in the United States and other countries. So when you write to us, your data will be processed outside your country of residence. Where the applicable law requires it, the transfer relies on the safeguards those providers offer, such as the standard contractual clauses approved by the European Commission.

7. How long we keep it

• Messages and contact details: while we handle your inquiry and for up to 24 months after our last contact. If you become a client, for the duration of the relationship and the periods required by law.
• Suppression list: for as long as needed to honor your unsubscribe.
• Technical data: our providers' logs last as long as each provider sets; visit statistics are aggregate and cannot identify you.

8. Your rights

At any time you can ask us to:

• access your data and learn how we use it;
• correct it if it is inaccurate;
• delete it;
• restrict or object to its use (an objection to marketing communications is always honored);
• receive it in a format you can take to another provider;
• withdraw your consent, without affecting what was done before you withdrew it.

Write to [email protected]. It is free and we respond within one month at the latest. We may ask you to confirm your identity, solely to avoid handing your data to someone else.

If you are in the European Union or the European Economic Area, you can also lodge a complaint with the data protection authority of your country. If you live in a U.S. state with its own privacy law, such as California, we honor the same rights and you will not be treated differently for exercising them. Itera does not sell or share personal information as those terms are defined in the California Consumer Privacy Act (CCPA).

9. Children

The site is aimed at businesses and professionals, not at children under 16, and we do not knowingly collect data from children. If you believe a child has sent us their data, write to us and we will delete it.

10. Security

The site is served only over an encrypted connection (HTTPS), and access to the mailboxes where messages arrive is restricted to the Itera team. No system is infallible: if an incident affected your data, we would notify you where the law requires it.

11. Cookies and local storage

The site does not use tracking or advertising cookies. It only stores your theme and language preference in your browser. The details are in the Cookie Policy.

12. Changes to this policy

If we change this policy, we will update the date at the top. If the change is significant, we will say so visibly on the site. This English version is a translation of theSpanish original; if they differ, the Spanish version prevails.