Privacy Policy

1. Information We Collect

• Contact details you submit: name, work email, company, website and message content.
• Consultation booking details: date, time, timezone, support volume and channels of interest.
• Account information for clients: login email, company profile and team members.
• Usage data: pages visited, device and browser information, collected via essential and (with consent) analytics cookies.
• Client customer data processed on your behalf through AI agents (see our DPA).

2. How We Use Information

• To respond to inquiries and schedule consultations.
• To provide, maintain and improve the Services.
• To send transactional communications such as booking confirmations and invoices.
• To secure our systems and prevent abuse.
• To comply with legal obligations.

3. Legal Bases (GDPR / UK GDPR)

Where applicable, we process personal data on the basis of contract performance, legitimate interests (such as responding to business inquiries), consent (for analytics cookies and marketing), and legal obligation.

4. Third-Party Processors

We use carefully selected sub-processors for hosting, AI model inference, email delivery, payments and analytics. Each is bound by data protection terms. A current list is available in our Data Processing Addendum.

5. Cookies

We use cookies as described in our Cookie Policy. You can manage your preferences through our cookie banner.

6. Your Rights

• GDPR / UK GDPR: access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.
• CCPA / CPRA (California): right to know, delete, correct, and opt out of sale or sharing of personal information. We do not sell personal information.
• To exercise any right, email contact@gringoservice.com. We respond within 30 days (45 days under CCPA).

7. Data Retention

We retain inquiry data for up to 24 months, and client account data for the duration of the contract plus any legally required period.

8. International Transfers

Data may be processed in the United States. For transfers from the EEA or UK we rely on Standard Contractual Clauses or equivalent safeguards.

9. Children

Our Services are intended for businesses and are not directed to children under 16.