Privacy
policy.

1. Introduction

Carril Agency ("we", "our", "us") is committed to protecting the privacy of visitors to our website and clients who use our services. This policy explains how we collect, use, store, and protect your personal data in compliance with applicable data protection laws.

2. Information we collect

We may collect the following types of information:

• Contact information — name, email address, phone number, and company name when you fill out a form, book a call, or contact us directly.
• Usage data — pages visited, time spent on site, referral source, browser type, device type, and IP address, collected automatically through analytics tools.
• Communication data — the content of messages you send us through forms, email, or other channels.
• Cookies and tracking — small files placed on your device to improve your browsing experience. See our Cookie policy for details.

3. How we use your information

We use the information we collect to:

• Respond to enquiries and provide the services you request.
• Send project updates, proposals, and invoices.
• Improve our website, content, and service offering based on usage patterns.
• Send occasional marketing communications — only with your consent, and you can unsubscribe at any time.
• Comply with legal obligations.

4. Legal basis for processing

We process personal data on the following bases:

• Consent — when you opt in to marketing communications or accept cookies.
• Contractual necessity — when processing is required to deliver services you have engaged us for.
• Legitimate interest — when processing is necessary for our business operations, such as website analytics and fraud prevention.

5. Data sharing

We do not sell your personal data. We may share data with:

• Service providers — hosting, analytics, email, and scheduling tools that help us operate (e.g., Vercel, Google Analytics, Cal.com).
• Legal authorities — if required by law or to protect our rights.

All third-party providers are contractually required to protect your data and process it only on our instructions.

6. Data retention

We retain personal data only as long as necessary for the purposes outlined above. Contact and project data is retained for up to 3 years after the end of a client relationship. Analytics data is retained for up to 26 months. You may request deletion at any time.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict processing.
• Data portability — receive your data in a structured, commonly used format.
• Withdraw consent at any time.

To exercise any of these rights, contact us at hello@carrilagency.com.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure hosting, and access controls. However, no method of transmission over the internet is 100% secure.

9. International transfers

Your data may be processed in countries outside your jurisdiction, including the UAE and the United States. We ensure appropriate safeguards are in place for any international transfers.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

11. Contact

If you have questions about this privacy policy or how we handle your data, contact us at:

Carril Agency
Email: hello@carrilagency.com