Privacy Policy

1. Data we collect

Identification and contact data you provide in forms and calculators: name, email, phone/WhatsApp (optional), company, role, country, and sector.

Answers to the self-assessments (BRASA Maturity Index™ and Pulso 360™) and the challenge or message you share.

Browsing data via analytics cookies (Google Analytics 4), only if you consent: pages visited, approximate device, and visit source (UTM parameters). We do not collect special categories of data.

When you tick a consent box, we record the date and time, your IP address, the browser used, and the version of this notice in force at that moment. That record has a single purpose: to prove that consent was given and on what terms, as required by law. We do not use it to profile or geolocate you, and it is deleted along with the rest of your data when you exercise your right to erasure.

2. Purposes and legal basis

To send you your diagnostic report and respond to your requests — basis: fulfilling your request and your consent.

To contact you for B2B commercial purposes related to our services — basis: your consent and/or legitimate interest in the professional relationship.

To measure and improve the site via analytics — basis: your consent (cookies).

We do not make automated decisions with legal effects on you.

3. Cookies and analytics

We use essential cookies (needed for the site to work) and analytics cookies (Google Analytics 4). Analytics cookies are only enabled if you accept them in the cookie banner; you can reject them without losing access to the site, and change your choice by clearing your browser data.

4. Who we share your data with

We do not sell your data. It is processed, on our behalf and under contract, only by technology providers that serve us: website hosting, email and collaboration, meeting scheduling, web analytics (Google Analytics 4), and our commercial management system. These providers act as data processors, do not read or use your data for their own purposes, and are bound by contractual confidentiality and security commitments. An up-to-date list of processors is available on request through the form at the bottom of this page.

5. Retention

We keep your data while a legitimate business relationship or interest exists, or until you request deletion or withdraw consent. As a reference: contact data and self-assessment answers are kept while a legitimate business interest exists, with periodic purging; information with contractual or tax effects is kept for seven (7) years, as required by Ecuadorian law. Once the period expires, data is securely deleted.

6. International transfers

Some of our providers host or process data outside Ecuador, mainly in the United States and the European Union. In those cases the transfer relies on contractual data protection clauses and on each provider’s security commitments, in line with articles 55 to 62 of Ecuador’s Organic Law on Personal Data Protection. We maintain an internal register of these transfers.

7. Your rights

You can exercise the following rights, free of charge, using the form at the bottom of this page. We will respond within fifteen (15) business days from receipt of your request. If the complexity of the case requires it, we will notify you of a reasoned extension before that deadline expires.

• Access: know what data we hold about you.
• Rectification: correct inaccurate data.
• Deletion: request that we erase your data.
• Objection: object to a processing activity.
• Portability: receive your data in a structured, commonly used, machine-readable format.
• Suspension of processing: ask us to stop using your data while a dispute is resolved.
• Not to be subject to automated decisions with legal effects. Knowcell does not carry out such processing.
• Withdraw consent at any time, without retroactive effect.

8. Security

We apply appropriate technical and organizational measures: encryption in transit (HTTPS) and at rest, multi-factor authentication, role-based access control under the least-privilege principle, parameterized queries, access logging, backups, and data minimization. Our staff and contractors are bound by confidentiality agreements whose duty of secrecy survives the end of the relationship. We maintain a documented procedure for managing and notifying security breaches. No system is infallible, but we work to protect your information.

9. Minors

The site is aimed at professionals and companies; it is not intended for minors and we do not knowingly collect their data.

10. Changes and contact

We may update this notice; we will publish the current version on this page. Knowcellsa S.A. has a formally appointed Data Protection Officer, who can be reached through the form at the bottom of this page: it is our official and permanent channel for privacy inquiries and rights requests. If you are not satisfied with our response, you may file a complaint with Ecuador’s Superintendency of Personal Data Protection (SPDP). For U.S. residents, applicable state privacy rights may also apply.