eximius studio
English translation. This is a courtesy translation. The Spanish version is the legally binding one; if the two differ, the Spanish text prevails.

Privacy policy

Last updated: 17 August 2026

We explain what personal data we process, for what purpose, for how long and what you can do about it. We comply with Ecuador's Organic Law on Personal Data Protection.

Contents

  1. Who processes your data
  2. What data we process
  3. If you are a client
  4. Who we share it with
  5. How long we keep it
  6. Your rights
  7. Cookies
  8. Security
  9. eximius card
  10. Changes

1. Who processes your data

The controller is Steven Miguel Pesantes Egas, a sole trader with tax ID (RUC) 0931233183001, based at Parque Empresarial Colón, Ecuador.

For privacy matters or to exercise your rights: [email protected]

2. What data we process

WhenDataPurposeLegal basis
You write via the form Name, email, phone, service of interest and your message Replying, quoting and commercial follow-up Pre-contractual steps at your request
Any submission IP address and browser Detecting automated submissions and blocking spam Legitimate interest in protecting the system
You contact us by email or WhatsApp Whatever data you share in that conversation Assisting you Your request

We do not carry out advertising profiling, we do not buy databases and we do not send bulk email to people who did not ask for it.

3. If you are a client

During a project we may access information about you and your systems: credentials, analytics, content and, in some cases, personal data of your own users or clients.

In those cases you are the controller of that data and we act as processor: we use it only to carry out the project, following your instructions, and we return or delete it when we finish.

The access credentials you give us are treated as confidential information. When the project closes, we recommend rotating them.

4. Who we share it with

We do not sell personal data. We share it only with those needed to operate:

ProviderPurposeWhere
HostingerSite and database hostingEuropean Union
CloudflareContent delivery network, site protection and aggregated analyticsGlobal

We may also hand over data if a competent authority legally requires it.

5. How long we keep it

You can request deletion before those periods, except for what we must keep by legal obligation.

6. Your rights

You can exercise your rights at any time:

Write to us at [email protected]. We reply within 15 days at most. If we do not handle your request properly, you can complain to the Superintendency of Personal Data Protection.

7. Cookies

This site uses no tracking or advertising cookies, and there are no social network pixels.

We do measure traffic with Cloudflare Web Analytics, to know how many visits each page receives. It sets no cookies, creates no persistent identifiers and does not follow you across sites: the data is aggregated and cannot identify you. The legal basis is our legitimate interest in understanding which content is useful.

Cloudflare may also use strictly technical cookies for security and performance. They are necessary for the site to work and do not identify you as a person.

To remember whether you prefer the site in Spanish or English we store one value (ex-idioma) in your browser's local storage. It is not a cookie, it never travels to any server, and you can clear it from your browser settings.

8. Security

No system is infallible. Should a breach affect your data, we would notify you and report it to the authority as required by law.

9. eximius card

If you buy eximius card, data processing has important particularities — your page is public and can capture visitor contacts — explained in its dedicated privacy policy.

10. Changes

We may update this policy. The date of the latest version appears at the top. If a change materially affects how we process your data, we will announce it here visibly.

Español ← Back to home Terms and conditions eximius card privacy