At CR Labz, we respect your privacy. This policy explains what data we collect, what we use it for and what your rights are when you visit crlabz.com, contact us or hire our web development, cloud infrastructure and digital marketing services.
1. Data controller
CR Labz is a Costa Rican digital agency based in Costa Rica. We are the data controller for the personal data we collect through our website and contact channels.
For privacy inquiries or to exercise your rights, write to us at info@crlabz.com.
2. Scope
This policy applies to visitors of crlabz.com, people who complete contact, project brief or plan request forms, candidates who apply for openings, and clients who hire our services.
When we develop digital products for clients (websites, applications, SaaS platforms, cloud infrastructure or marketing campaigns), we may process data on behalf of those clients. In those cases, the client is the data controller and CR Labz acts as the processor according to the corresponding contract.
3. Data we collect
Depending on how you interact with us, we may collect:
- Identification and contact data: name, email address, phone number, company and preferred contact method.
- Project information: product type, description, goals, budget, timelines, references, integrations and additional notes you share in onboarding or plan request forms.
- Browsing and usage data: IP address, browser type, visited pages, referral source and aggregated site usage metrics.
- Professional data: resume, portfolio and experience when you apply for a job opening.
- Communications: messages you send us by email, forms or scheduled meetings.
We do not request sensitive data through our website. If this type of information needs to be processed as part of a client project, it will be defined contractually with the corresponding safeguards.
4. How we use your data
We use personal data for legitimate purposes related to our business activity, including:
- Responding to inquiries, evaluating project requests and preparing commercial proposals.
- Providing contracted web development, cloud, marketing, design and automation services.
- Scheduling meetings, following up commercially and maintaining relationships with clients and prospects.
- Evaluating job applications and managing recruitment processes.
- Improving our website, measuring performance and understanding how visitors use our content.
- Complying with applicable legal, accounting or security obligations.
5. Legal basis
The processing of personal data is carried out in accordance with Costa Rica Law No. 8968 on the Protection of Persons Regarding the Processing of Their Personal Data and related regulations.
In general, we process data based on your consent (for example, when you submit a form), the performance of pre-contractual or contractual measures, our legitimate interest in operating and improving our services, or compliance with legal obligations.
6. Providers and transfers
To operate our site and provide services, we share data with trusted providers only to the extent necessary:
- Vercel: website hosting and aggregated visit analytics.
- Resend: sending transactional emails derived from forms and requests.
- HubSpot: scheduling commercial meetings.
- CDN and infrastructure services: delivery of site content and assets.
- Analytics, marketing and product tools that we integrate into client projects (for example, PostHog, Google Analytics or automation platforms), when they are part of the agreed scope.
Some providers may process data outside Costa Rica. When that happens, we adopt reasonable measures to ensure an adequate level of protection in accordance with applicable regulations.
8. Data retention
We retain personal data only for as long as necessary for the purposes described in this policy, including legal, accounting or dispute resolution periods.
Commercial requests that do not become contracts are usually retained for a reasonable period for follow-up. Data from active clients is kept during the contractual relationship and for the additional time required by law or by a specific agreement.
9. Security
We apply technical and organizational measures appropriate to the nature of our services: web development, cloud deployment, marketing integrations and production environment management. These include access controls, engineering best practices, encryption in transit when appropriate and the selection of providers with recognized security standards.
No system is completely infallible. If we detect an incident affecting personal data, we will act in accordance with applicable regulations and, when appropriate, notify the authorities and affected persons.
10. Your rights
As a personal data subject, you may request:
- Access to the data we hold about you.
- Correction of inaccurate or incomplete data.
- Deletion when the data is no longer necessary or when you withdraw your consent, unless we have a legal obligation to retain it.
- Objection to or restriction of processing in the cases provided by law.
To exercise these rights, contact us at info@crlabz.com indicating your request and a way to verify your identity. We will respond within a reasonable period in accordance with Costa Rican law.
11. Minors
Our services are aimed at businesses and professionals. We do not intentionally collect data from minors. If you believe a minor provided us with personal information, write to us to request its deletion.
12. Changes to this policy
We may update this policy to reflect changes in our services, providers or legal requirements. We will publish the current version on crlabz.com and indicate the date of the latest update.
Do you have questions about this document?
Write to us at info@crlabz.com or also see Terms of service.