Skip to content
en, Englishes, Switch to Español
Legal

Privacy Policy

Effective date: · Last updated:

SGS Analytics ("SGS", "we", "us") operates sgsanalyticsgt.com (the "Site"). This policy explains what personal data we collect through the Site, why, how long we keep it, who we share it with and the choices you have. It applies to visitors of the Site and to people who contact us or book a call through it. It does not apply to data we process for clients under a signed statement of work; that processing is governed by the applicable agreement.

Who is responsible for your data

SGS Analytics, Guatemala City, Guatemala, is the data controller for the personal data described in this policy. Privacy questions and requests: contact@sgsanalyticsgt.com.

What we collect and why

  • Contact form. Name, work email, company, engagement type and your message, together with the submission time, your browser's user agent and your IP address, which we store only as a keyed hash (HMAC) used for abuse throttling. We use these to answer your inquiry and to keep a record of our correspondence. Legal basis: your request and our legitimate interest in responding to business inquiries.
  • Booking a call. If you book through our Microsoft Bookings page, Microsoft collects the name, email, company and notes you enter and creates a calendar invitation. We use them to hold the call you requested.
  • Spam protection. Our contact form uses Cloudflare Turnstile, which processes your IP address and browser signals to distinguish people from bots. Cloudflare may set a short-lived cookie for this purpose.
  • Analytics. With your consent, we use Amplitude to understand how the Site is used: pages viewed, sessions, referring source and campaign parameters, language and device type, and clicks on buttons and links. We configure Amplitude so that it does not record your IP address, does not read form contents and does not use cookies; a random identifier is kept in your browser's local and session storage and, after you send the contact form, the email address you provided. If you send the contact form, we link your analytics identifier to the email address you provide.
  • Server logs. Our hosting provider (Microsoft Azure Static Web Apps) keeps standard request logs, including IP address, for security and abuse prevention.
  • WhatsApp and email. If you contact us by WhatsApp or email, the respective provider (Meta or your email provider) processes your message under its own terms.

We do not collect sensitive personal data through the Site, we do not sell personal data, and we do not share it for cross-context behavioral advertising.

Cookies and similar technologies

The Site sets a strictly necessary first-party cookie to remember your cookie choices. Optional technologies (analytics, the embedded booking calendar) are only loaded after you accept them. Details, including how to change your choice at any time, are in our Cookie Policy.

Who we share data with

  • Microsoft (Azure Static Web Apps, Azure Table Storage, Azure Communication Services, Microsoft 365 Bookings and Exchange): hosting, storage, notification email and scheduling.
  • Cloudflare (Turnstile): spam protection.
  • Amplitude: product analytics, only with your consent.
  • Professional advisers and authorities where the law requires it.

These providers process data on our behalf under their data processing terms. Data may be stored in the United States. We do not sell personal data.

How long we keep data

  • Contact form submissions: 24 months from the submission, then deleted, unless an engagement follows, in which case the records become part of the client file.
  • Abuse-throttle counters, keyed by the hashed IP address: deleted within 48 hours.
  • Records of notification emails that failed to send: 6 months.
  • Booking records: kept in our Microsoft 365 calendar and mailbox under our normal retention.
  • Analytics data: retained by Amplitude according to our account settings and deleted on request.
  • Consent record: up to 180 days in your browser.

Your rights and choices

You may ask us to access, correct, delete or export the personal data you gave us, to restrict or object to its processing, and to withdraw consent at any time. Write to contact@sgsanalyticsgt.com; we answer within 30 days and may ask you to verify your identity. You can change cookie choices at any time through "Cookie settings" in the footer. We honor the Global Privacy Control browser signal by treating it as a refusal of analytics.

Guatemala. Residents of Guatemala have the rights of access, rectification, update and deletion recognized by the Constitution of the Republic of Guatemala and the Law on Access to Public Information (Decree 57-2008), and may complain to the Procurador de los Derechos Humanos.

United States. We extend the rights listed above to all US visitors. California residents: we do not sell or share personal information, we do not use or disclose sensitive personal information, and we will not discriminate against you for exercising your rights. The categories we collect are identifiers, commercial information you provide, and internet activity (with consent), for the purposes stated above. You may designate an authorized agent to make a request on your behalf.

Security

We use HTTPS everywhere, security headers, access controls on our Azure tenant and least-privilege credentials. No transmission over the internet is completely secure; if we learn of a breach affecting your data we will notify you as required by applicable law.

Children

The Site is intended for business audiences and is not directed to anyone under 18. We do not knowingly collect data from minors.

Changes

We will post changes here and update the dates above. Material changes will be announced on the Site before they take effect.

Contact

SGS Analytics, Guatemala City, Guatemala. contact@sgsanalyticsgt.com. +502 5915 9360.