What we do with your data
What this site collects, what we use it for, who else sees it, and how to ask us to correct or delete it. Written from what the site actually does.
Who's responsible
Claviweb, a Panama City business that builds websites and does Google work for other businesses. For any question or request about your data, email contact@claviweb.com or message us on WhatsApp at +507 6230-7595.
What you give us
The contact form asks for your name, a WhatsApp number or an email address so we can answer, and, if you want, a message. It reaches us as an email to contact@claviweb.com, along with the address of the page you wrote from. That mailbox is on Zoho Mail. The site doesn't store the form in any database, and nothing you write goes to a mailing list.
If you message us on WhatsApp, the conversation goes through WhatsApp, a Meta service with its own privacy policy, and we read it on the business's WhatsApp Business account. If you email us, it lands in the same Zoho mailbox.
We use that data to answer you and, if we work together, to do the work. We don't sign you up for anything, and we don't sell, rent or hand over your data.
What's measured when you visit
The first time you visit, a notice asks whether you accept Google's cookies. Until you accept, nothing from Google loads: neither Analytics nor the Google Ads tag. If you reject them, the site works just the same.
Google Analytics, only if you accept the cookies
It tells us where people come from, which pages they read and how many tap a WhatsApp button. To do that it stores two cookies in your browser and uses your IP address to estimate the country and city you're visiting from. We see it in aggregate reports, without names.
The Analytics property is linked to Claviweb's Google Ads account, with personalized advertising turned on: visits can end up in audience lists that Google Ads uses to show Claviweb ads to people who've already been to the site.
Google Ads, if you arrive from an ad and accept the cookies
A click on a Google ad carries an identifier in the link. The site keeps it in the tab while it's open, in case you write to us from another page, and doesn't send it anywhere unless you accept the cookies. If you do, the site also loads the Google Ads tag, which:
- tells Google Ads if you tap a WhatsApp button, so we know whether the ad led to a conversation;
- stores its own cookies and an item in the browser's storage, and can add the visit to the account's audience lists.
If you arrive from a search, from a link or by typing the address, this tag doesn't load.
Vercel's analytics, on every visit
Vercel Web Analytics counts visits and Speed Insights measures how long each page takes to load. Neither one uses cookies, so they don't depend on the notice. According to Vercel, they record the page, the site you came from, your approximate location, the type of device, the operating system and the browser; they recognize the visit with a code that's discarded after 24 hours, and they don't keep anything that identifies you or lets anyone rebuild your path through the site.
Hosting
Vercel, which hosts the site, processes technical data from each request —such as the IP address and the browser— to serve the pages and protect them from abuse.
The cookies, one by one
They only show up if you accept in the notice:
| Cookie | Whose | What for | Lifetime, according to Google |
|---|---|---|---|
_ga | Google Analytics | Tell one visitor from another | 2 years |
_ga_5GEE40VF4L | Google Analytics | Keep the session state | 2 years |
_gcl_au, _gcl_aw | Google Ads, only if you arrive from an ad | Measure the ads | 90 days |
Outside cookies, the site keeps your choice from the notice in the browser's local storage (cw_cookies), so it doesn't ask you again, and, if you arrive from an ad, the click identifier in the tab's storage (cw_gclid), which the browser clears when you close it. If you accept, Google Ads also stores one item in local storage (_gcl_ls).
You can change your choice whenever you want. If you go from accepting to rejecting, the site deletes the Google cookies you already had and stops measuring right away.
You can also block these cookies in your browser's settings, or install the Google Analytics opt-out browser add-on. The site works the same without them: the form and the WhatsApp buttons don't depend on any of this. And in Google's My Ad Center you can see and change how Google personalizes the ads it shows you.
Who else sees the data
Only the providers that make the site and the contact work, each for its own part:
- Zoho, the mailbox where the form and emails arrive.
- Vercel, the site's hosting and its cookie-free analytics.
- Google, with Analytics and, if you arrive from an ad, Google Ads; in both cases, only if you accept the cookies.
- Meta, with WhatsApp, if you message us there.
They're companies from other countries that process data on their own servers, which may be outside Panama, in the United States for example. Beyond them, we don't share your data with anyone, unless a competent authority requires it under the law.
How long it's kept
- Your messages, from the form, email or WhatsApp: for as long as the conversation lasts and, if we work together, for as long as the service lasts, plus whatever the law requires us to keep, such as invoices. If we don't end up working together, we delete them no later than 24 months after the last contact, or sooner if you ask.
- Google Analytics: the property keeps event data for 2 months and data tied to a visitor for 14 months, a period that starts over each time you come back. Aggregate reports don't depend on those periods.
- Vercel: the code that recognizes the visit is discarded after 24 hours.
- Your choice in the notice: until you change it or clear the site's data in your browser.
Your rights
Panama's Law 81 of March 26, 2019, on personal data protection, in force since March 29, 2021, gives you the right to ask us for:
- Access: to know what data of yours we have and what we use it for.
- Rectification: to correct anything wrong or incomplete.
- Cancellation: to delete it.
- Objection: to stop using it.
- Portability: a copy in a format you can take with you.
You can also withdraw the permission you gave us at any time; that doesn't undo what was already done with it.
For any of these requests, email contact@claviweb.com from the address or number you contacted us with, so we know it's you. We answer within the deadlines Panama's data protection authority sets out: ten business days for access, cancellation and portability, and five for rectification; an objection takes effect immediately.
If you believe we haven't respected your rights, you can file a complaint with the Personal Data Protection Directorate of Panama's National Authority for Transparency and Access to Information (ANTAI): through its website, by email to protecciondedatos@antai.gob.pa, or in person.
If this changes
If what the site collects or who we share it with changes, we update this page and the date at the top.
Sources
- Frequently asked questions on personal data protection — ANTAI, in Spanish: rights, deadlines and how to file a complaint under Law 81 of 2019 and Executive Decree 285 of 2021.
- Cookie information for Google's ad products — Google: each cookie's name and lifetime.
- How Google uses information from sites or apps that use our services — Google.
- Web Analytics and Speed Insights — Vercel: what each one records.
- The privacy policies of Zoho and WhatsApp.