Personal Data Policy

Surcos ("we", "our", "us") is committed to protecting the privacy and personal data of our users. This Personal Data Policy outlines how we collect, store, use, and safeguard personal data in accordance with applicable privacy regulations, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other relevant frameworks.

By using https://Surcos.net ("the website"), you consent to the practices described in this policy.

1. What Is Personal Data?

"Personal data" refers to any information that can be used to identify an individual, either directly or indirectly. This may include names, email addresses, IP addresses, or any data that can reasonably be linked to a specific person.

2. What Personal Data We Collect

We collect only the personal data that is necessary for the operation and improvement of our services. This includes:

• Name and email address (submitted via contact form or newsletter signup)
  
  
• IP address (collected automatically for analytics and security)
  
  
• User-agent and browser details
  
  
• Any optional information you include in messages or contact inquiries
  
  

We do not collect sensitive data such as financial information, identity numbers, or health-related data.

3. How and Why We Use Personal Data

We process your personal data for the following legitimate purposes:

• To respond to messages submitted through the contact form
  
  
• To send newsletters, if you have opted in
  
  
• To analyze user behavior for the purpose of improving site content and structure
  
  
• To maintain site security and prevent malicious access or abuse
  
  
• To ensure legal compliance with data privacy obligations
  
  

We do not use your data for profiling, automated decision-making, or targeted advertising.

4. Legal Basis for Processing

Surcos processes personal data based on the following legal bases:

• Consent — when you voluntarily provide your data via forms or opt into our newsletter
  
  
• Legitimate Interests — such as improving our website’s performance and securing our infrastructure
  
  
• Legal Obligation — where data retention or disclosure is required under applicable law
  
  

5. Data Sharing and Third Parties

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may use trusted third-party service providers for:

• Email communication (e.g., newsletter platforms)
  
  
• Web analytics (e.g., Google Analytics)
  
  
• Site security (e.g., anti-spam and firewall tools)
  
  

These providers only have access to the data necessary to perform their functions and are obligated to handle it securely.

6. Data Storage and Retention

Your personal data is stored on secure servers and is only retained for as long as necessary to fulfill the purposes described above. In general:

• Contact form submissions are stored for up to 12 months for record-keeping
  
  
• Newsletter subscription data is retained until you unsubscribe
  
  
• Analytics and server log data are retained in aggregate form and anonymized wherever possible
  
  

You may request deletion of your data at any time.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
  
  
• Correct any inaccurate or incomplete information
  
  
• Request the deletion of your data ("right to be forgotten")
  
  
• Withdraw consent to any communications at any time
  
  
• Lodge a complaint with a data protection authority if you believe your rights are being violated
  
  

To exercise any of these rights, please email us at [email protected].

8. Data Transfers

Surcos operates from Canada. If you are accessing the site from outside Canada, you acknowledge that your data may be transferred to, processed, and stored in Canada or other countries where our service providers operate.

9. Children’s Privacy

We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has submitted personal data to us, please contact us so we can remove the information.

10. Updates to This Policy

This Personal Data Policy may be updated periodically to reflect changes in regulations or our practices. All updates will be posted on this page with the revised "Last Updated" date.

Contact Us

For any questions, requests, or concerns regarding your personal data, please contact:
Email: [email protected]