At PUCARA, we respect your privacy and are committed to protecting the personal information you choose to share with us.

This Privacy Policy explains how we may collect, use, store, share, and protect personal information when you visit our website, contact us, or interact with our services.

1. Accessing our website

You may access and browse our website without telling us who you are or providing information that identifies you personally.

However, if you choose to contact us, complete a form, request information, schedule a meeting, or interact with certain features of the website, you may be asked to provide limited personal information.

We receive and store only the personal information that you knowingly and voluntarily provide to us through the website, email, meetings, or other direct communications.

2. Personal information you may choose to provide

Depending on how you interact with us, the personal information you choose to provide may include:

• Your name
• Your company or organization
• Your work email address
• Your phone number, if you choose to provide it
• Your country or region
• Your area of interest
• Any information you voluntarily include in your message or request

You are not required to provide personal information to browse our website. However, certain features or communications may not be available if you choose not to provide the information requested.

3. Technical and usage information

When you visit our website, certain technical information may be collected automatically through standard technologies such as cookies, analytics tools, server logs, or similar mechanisms.

This information may include general details such as browser type, device information, IP address, pages visited, referring website, date and time of access, and general website usage data.

This information helps us maintain website functionality, understand how visitors interact with our website, improve performance, and protect the security of our digital channels.

4. How we use personal information

The way we use personal information depends on how you interact with our website, services, and communications.

We may use the information you voluntarily provide to:

• Respond to your inquiries or requests
• Contact you about PUCARA’s services
• Understand your organization’s cybersecurity needs
• Schedule meetings or follow-up conversations
• Prepare proposals or service-related communications
• Manage business relationships
• Improve our website, communications, and user experience
• Protect the security, integrity, and availability of our website, systems, and operations
• Comply with applicable legal, regulatory, or contractual obligations

We do not sell your personal information.

5. Legal basis for processing

Where required by applicable law, the processing of your personal information may be based on one or more of the following legal grounds:

• You have given your consent for one or more specific purposes
• The information is necessary to respond to your request or take steps prior to entering into a business relationship
• The processing is necessary for the performance of a contract
• The processing is necessary to comply with a legal obligation
• The processing is necessary for legitimate business interests pursued by PUCARA or by a third party, provided that such interests are not overridden by your rights and freedoms

In certain jurisdictions, we may be permitted to process information until you object to such processing or opt out, where applicable.

If you have questions about the specific legal basis that applies to the processing of your personal information, you may contact us using the details provided below.

6. Cookies and similar technologies

Our website may use cookies or similar technologies to improve functionality, analyze website performance, enhance the browsing experience, and help protect the security of the site.

Cookies may help us understand general website usage, remember preferences, or improve the way our website operates.

You can manage or disable cookies through your browser settings. Please note that some parts of the website may not function properly if cookies are disabled.

If we use third-party analytics, advertising, or tracking tools, those providers may process information in accordance with their own privacy policies and settings.

Where we rely on your consent as the legal basis for processing, we will request it clearly and separately at the point of collection. You may withdraw your consent at any time by contacting us at the details provided in this Policy or, for cookie-based processing, through your browser settings. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

7. Sharing of personal information

We may share personal information only when necessary and appropriate, including with:

• Members of the PUCARA team involved in responding to your request
• Trusted service providers that support our website, hosting, communications, analytics, security, or business operations
• Professional advisors, when required
• Authorities, regulators, or third parties when necessary to comply with legal obligations, protect our rights, or safeguard our users, systems, or business

Any third parties that process personal information on our behalf are required to do so under formal written agreements, including data processing agreements or equivalent contractual clauses, that impose appropriate security obligations and restrict processing to the purposes for which the information was provided.

8. International operations and data transfers

PUCARA operates internationally and may process information from different jurisdictions, including Argentina and the United States.

Where personal information is transferred or processed outside your country or region, we take reasonable steps to ensure that it is handled in accordance with applicable privacy and data protection requirements. Where required, such transfers are governed by data processing agreements, standard contractual clauses, or other legally recognized mechanisms under applicable Argentine, European, or other regional data protection regulations.

9. Data retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy. Retention periods vary by type of information:

Contact form and inquiry data: up to 2 years from the date of last contact, unless a business relationship is established, in which case it may be retained for the duration of that relationship. Technical and analytics data: in accordance with our cookie policy, and generally no longer than 13 months. Business relationship records (proposals, meeting notes, service-related communications): for the duration of the relationship and for the applicable legal prescription period thereafter. Any other personal information: until you withdraw consent or until the applicable statutory period expires, whichever comes first.

When personal information is no longer needed, we take reasonable steps to delete it, anonymize it, or securely restrict its use in accordance with our internal information security procedures.

10. Security of personal information

As a cybersecurity company, we take data protection seriously. Our security practices are aligned with the ISO/IEC 27001 international standard for information security management.

We apply reasonable technical, organizational, and administrative measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

However, no method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

Access to personal information within PUCARA is restricted to those members of our team who have a legitimate need to process it in connection with the purposes described in this Privacy Policy. All personnel with access to personal information are subject to confidentiality obligations.

11. Data breach notification

In the event that we become aware of a security incident that has resulted in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal information, we will take prompt action to investigate and contain the incident.

Where we determine that a breach is likely to result in a risk to your rights or freedoms, or where required by applicable law, we will make reasonable efforts to notify affected individuals and, where legally required, the relevant supervisory authority. Notification will be provided through the contact information we hold for you, or through a notice published on our website, within the timeframes required by applicable law.

12. Your rights

Depending on your jurisdiction, you may have the right to access, update, correct, delete, object to, or request restrictions on the processing of your personal information.

You may also have the right to withdraw consent, opt out of certain types of processing, or request information about how your personal information is used and shared, where applicable.

To exercise your rights, please contact us using the details provided below. We may need to verify your identity before responding to your request. You also have the right to file a complaint with the relevant data protection supervisory authority in your jurisdiction. In Argentina, the competent authority is the Agencia de Acceso a la Información Pública (AAIP, www.argentina.gob.ar/aaip). If you are located in the European Economic Area or the United Kingdom, you may contact your local data protection authority.

13. Children’s privacy

Our website and services are intended for business and professional audiences. They are not directed to children, and we do not knowingly collect personal information from children.

If you believe that a child has provided us with personal information, please contact us so we can take appropriate action.

14. Third-party links

Our website may contain links to third-party websites, platforms, or social media channels.

PUCARA is not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of any external websites you visit.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal obligations, technologies, or website functionality.

The updated version will be published on this page with a revised “Last updated” date.

16. Contact

If you have any questions about this Privacy Policy or how we process personal information, you may contact us at:

PUCARA
Email: legal@pucara.io