Privacy Policy

This policy describes how Grupo Weno S.A. (“Grupo Weno”, “we”) handles personal information collected through this website. It describes the website only. Information exchanged during a client engagement is governed by the engagement agreement.

The short version

This website collects nothing until you choose to send us a consultation request. It sets no cookies, runs no analytics, loads no fonts, scripts or images from third parties, and has no advertising or session-recording technology of any kind.

What we collect

When you submit the consultation form we receive the information you enter: your name, job title, organization, country, industry, email address, telephone number if you choose to provide one, your description of the matter, the indicative monthly investment range, and your timeline. We ask for nothing beyond what is needed to judge whether we can help and to reply to you.

We do not collect special category data through this site, and you should not include any in the description field. Please do not send confidential or commercially sensitive details through this form — describe the matter in general terms and we will arrange a secure channel.

Server logs

The web server records standard access logs for every request, as almost all web servers do. Each entry contains the requesting IP address, the time, the page requested, the response code, and the browser’s user-agent string. These logs exist for security and fault diagnosis. They are not used to build profiles and are not combined with form submissions.

The consultation endpoint also applies a rate limit to prevent abuse. It records only a one-way cryptographic hash of the requesting IP address and the times of recent submissions; the address itself is not stored, and these records are deleted automatically within twenty-four hours.

Cookies and tracking

This site sets no cookies and uses no local storage. There are no analytics, tag managers, tracking pixels, advertising identifiers or session recording tools. Typefaces are served from this domain rather than from a font provider, so visiting the site does not disclose your visit to any third party.

Why we may use your information

We use consultation submissions to assess and respond to your inquiry, and, where it leads to a discussion, to take steps toward a possible engagement at your request. Where the law requires a stated legal basis, we rely on your consent for the initial reply, and on our legitimate interest in responding to unsolicited business inquiries addressed to us. You are asked to confirm consent explicitly before the form can be submitted.

We do not use these details for marketing. We will not add you to a mailing list. We do not sell, rent or share personal information with third parties for their own purposes.

Who processes it

A submission is delivered by email to the firm through an authenticated third-party email provider acting as our processor. The provider handles the message in transit and in our mailbox. Our website host stores the server logs described above.

Because we work across North America, Latin America and Europe, information may be accessed by our people or processors in any of those regions.

Retention

These are our working assumptions. They should be confirmed against the retention obligations that apply to the firm.

• Consultation submissions. Delivered to our mailbox and retained there. Inquiries that do not lead to an engagement are deleted within 24 months. Inquiries that become engagements are retained under the engagement agreement instead.
• Held copies on the server. None, in normal operation. A copy is written to disk only if the email cannot be delivered, so that your request is not lost; it is deleted once the inquiry has been received and handled, and in any case within 90 days.
• Rate-limiting records. Hashed, and removed within 24 hours.
• Server access logs. Rotated daily and kept for 14 days, after which they are deleted automatically.

Your rights

Depending on where you are, you may have the right to ask for a copy of the personal information we hold about you, to have it corrected or erased, to object to or restrict its use, and to withdraw consent at any time. Withdrawing consent does not affect anything done before you withdrew it.

To exercise any of these, write to inquiries@grupoweno.com with enough detail to locate the inquiry — ordinarily the email address you submitted and the approximate date. We will respond within thirty days. Deletion is straightforward: we remove the submission from our mailbox and any copy held on the server. Where you are covered by a data protection authority, you also have the right to complain to it.

Security

The site is served over HTTPS only. Form submissions are validated on the server, rate limited, and transmitted to our mailbox over an authenticated, encrypted connection. Credentials are held in server configuration outside the published site and never appear in anything sent to your browser. No system is perfectly secure, which is the reason for the request above not to send confidential material through this form.

Children

This site is intended for business use and is not directed at children. We do not knowingly collect information from anyone under 18.

Changes

If this policy changes we will update the date shown at the top of the page. Material changes will be described here rather than made silently.

Contact

Questions about this policy, or about information we hold, can be sent to inquiries@grupoweno.com . The registered office address and the identity of the data controller should be inserted here before this site is treated as live.