PRIVACY
Privacy and personal data
Updated: 2026-10-29
Who handles your information
The controller is Erwin Salas Consulting Group LLC. Peru: Av. Paseo de la República 1453 – Lima. United States (registered business address): 7901 4th St N STE 300 – St. Petersburg, FL 33702. Privacy enquiries: [email protected].
Information you provide
Email enquiry forms ask for your name, email and message. Depending on the form, you may also choose to provide a topic, phone number, company, website, referral source and budget. Required fields are marked. Do not send passwords, identity documents, health information or confidential client information. WhatsApp forms prepare the information you enter locally; WhatsApp receives it when you choose to open its service.
Why we use it
We use enquiries to understand your request, reply and, where requested, prepare a proposal. Pre-contractual requests are handled to take steps at your request before a contract. Other general enquiries are handled on the basis of your consent. Technical security controls are used for the legitimate interest of protecting the site against abuse. No marketing subscription is created by contacting us.
Service providers
Brevo processes enquiry email delivery and the separate newsletter subscription forms and mailings. BanaHosting hosts the site and mailbox. Cloudflare provides DNS and Turnstile anti-bot checks for the protected forms. Turnstile processes technical signals such as IP address, browser information and the associated site origin to detect bots. Cloudflare also describes processing to improve its bot detection in its Turnstile Privacy Addendum, linked below. Google provides optional Google Analytics measurement. Statcounter provides optional page-view counting. Both are activated only after analytics consent.
International processing
Our service operations involve Peru and the United States. Brevo describes EU database hosting, with processing by its group and subprocessors also possible outside the EEA. Its data-processing agreement provides for standard contractual clauses and supplementary safeguards for applicable transfers. Cloudflare describes international processing, including the United States and EEA, and contractual transfer safeguards where applicable. For bot detection it acts as a processor; for improving that detection it also acts as an independent controller. BanaHosting describes infrastructure providers in the United States and Europe in its public policy. EU database hosting does not mean that all support, security or other processing stays in the EU. You can contact us to request information about the destinations and safeguards relevant to your data. Optional analytics also involves Google and Statcounter and may involve processing outside your country. Their privacy and data-transfer terms are linked below; this page does not imply that all analytics data stays in the EU.
Retention
Enquiries that do not lead to a client relationship are retained for a maximum of 12 months from the last contact with the visitor, and deleted earlier when no longer needed. A longer period may apply where a specific legal obligation or the establishment, exercise or defence of legal claims requires it; it is limited to the necessary information and duration. Client, contractual and billing records follow separate applicable retention requirements. This period does not authorise marketing subscriptions. Our internal team handles the review and deletion of expired enquiries; deletion is not automated by this website.
Technical records and backups
The Brevo transactional retention settings reviewed for this account indicate 1 month for all senders and no storage of new email previews. Brevo states that deletion may take up to 24 hours after the period ends; changing the preview option does not remove existing previews retroactively. This is not the retention period for newsletter contacts or all provider records. BanaHosting and Cloudflare describe retention according to service, security and legal purposes; their public policies do not specify one period for every type of record. Deleting an enquiry from the active mailbox does not immediately remove copies from backups. Our manual copies follow an internal expiry schedule and are intended for recovery, not renewed commercial use; a recovery must also reapply relevant deletions and opt-outs. Provider copies follow their own retention processes, separate from ours. You can request information about retention or submit a deletion request using our privacy contact.
Your rights
Where applicable, you may request access, correction, deletion, restriction, portability or object to processing. Consent can be withdrawn without affecting prior lawful processing. Write to [email protected]; provide only the information needed to identify your request. You may complain to the competent supervisory authority, including the AEPD in Spain. Requests are assessed under the applicable rules; some legal obligations may prevent immediate deletion.
Cookies, local storage and external content
With your optional analytics consent, Google Analytics measures page views in our two existing measurement destinations and Statcounter counts page views in our two existing projects using basic image beacons. We do not load Statcounter session-recording scripts. The providers receive technical request data such as IP address, browser information, page path and referring origin. Our page-view events exclude URL query strings, fragments and contact-form contents. Google Analytics may use first-party cookies, configured here with a 180-day expiry; Statcounter requests may involve third-party cookies subject to your browser settings. Advertising consent and Google signals remain disabled. No analytics service is contacted before you opt in. Analytics and external content have separate controls; refusing either does not prevent contact or subscription. Withdrawing analytics consent stops future measurement, removes accessible first-party Google Analytics cookies and reloads the page to unload tracking code. It does not erase data already processed by providers; contact us for a deletion request. Provider-side data retention depends on account settings and service terms; we have not confirmed a common retention period for these four destinations. External video and presentation frames stay blocked until you allow external content. Their providers may then receive technical data and set cookies. Use Privacy preferences in the footer to refuse or withdraw permission; withdrawal unloads frames but cannot erase cookies already set on another domain. Your preference is stored in this browser for up to 180 days; if storage is unavailable it is not remembered. The contact endpoint uses a Secure, HttpOnly, SameSite session cookie for anti-forgery protection, not advertising. Infrastructure security may use other necessary mechanisms.
External links and images
WhatsApp, LinkedIn, certification images and other linked providers have their own policies. Some historical external images may contact their hosting provider when displayed; they are not described as cookies we control. Opening an external link is optional.
Newsletter
The separate subscription form is hosted by Brevo and loads only when you choose to open it. Opening it connects your browser to Brevo and its anti-bot services; it does not subscribe you. The form requests your email address and explicit consent, then sends an email confirmation before subscription. Enquiries do not subscribe you. You can unsubscribe using the link in each newsletter. We retain active subscriptions and review them after 24 months without interaction. After you unsubscribe, we keep only the minimum information needed to respect your opt-out and document consent, for as long as necessary for those purposes. The 12-month enquiry period does not automatically apply to subscribers.
No automated commercial decisions
This contact flow does not perform automated eligibility decisions or subscribe visitors to campaigns. The anti-spam checks can reject a request; direct email and WhatsApp remain available if the form cannot be used.
Optional analytics providers: Google Analytics · Google data processing terms · Statcounter privacy and terms · Statcounter cookies
Sources and provider terms: AEPD · Brevo DPA · Brevo storage · Brevo retention · BanaHosting · Hosting terms · Cloudflare DPA · Cloudflare privacy · Turnstile privacy notice