Loading...
Loading...
Last updated: September 10, 2026
Coastal Ecuador (“we,” “us,” “our”) is operated by Iterative Systems LLC and published at coastalecuador.com. This policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over your data — including under Ecuador’s Organic Law on Personal Data Protection (LOPDP), the EU’s General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
We collect a limited amount of personal information, in the following ways:
When you place a planning-shop order, we store your name, email, chosen product, intake answers, order status, and delivered report or draft in our Neon database. Stripe processes payments; we store payment references and confirmation status, not card numbers. We use this information to fulfill your order, handle support, and maintain purchase records. A purchase does not add you to a newsletter.
A necessary, secure access cookie lets you reopen your private order. Order access is saved in your browser. An optional private access pass can be downloaded from your order page, and email recovery is available when the transactional sender is connected. Budget entries, worksheet notes, and checklist progress are saved only in your browser when local storage is available; they are not synchronized to your order. Use the export tools to retain a copy.
We retain order records while needed to deliver purchased access, resolve support or disputes, and meet applicable recordkeeping obligations. You may contact us to request access, correction, or deletion, subject to those obligations. Stripe handles payment data under its privacy policy.
We use the information we collect to:
We do not sell your personal information. We do not share it with advertisers. We do not use your data to train AI models.
We rely on the following third-party processors to operate the site:
Newsletter subscriptions remain active until you unsubscribe, which you can do from any newsletter email. Contact form submissions are retained for up to 24 months unless a longer retention period is required by law. Analytics data is retained by Vercel according to their published retention policy (typically 30 days for the Hobby tier).
For shop purchases we store your contact details, order, payment references, and information you choose to provide for fulfillment. Stripe handles card details. Order updates and requested recovery links use a transactional email provider when connected; purchases do not subscribe you to marketing. Recovery links expire after 30 minutes and work once. Access passes and order cookies are private credentials.
We measure the shop using random browser and session identifiers, product selections, campaign and placement labels, device category, and verified order milestones. Browser identifiers expire after 30 days and sessions after 30 minutes of inactivity. Our conversion events do not contain your name, email, intake answers, access pass, or private order URL. Private order and admin routes are excluded from third-party page analytics. Browser notes and checklist progress remain on your device.
Depending on where you live, you may have the following rights over your personal data:
To exercise any of these rights, email us at the address below. We will respond within 30 days.
Our hosting, analytics, and email providers are based in the United States. By using the site or subscribing to our newsletter, you acknowledge that your data may be transferred to and processed in the United States, which may offer different data protection standards than your home country.
The site is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it.
We take reasonable technical and organizational measures to protect personal data, including encrypted transit (HTTPS) and access controls on our admin systems. No system is completely secure, and we cannot guarantee absolute security.
We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated via the site or newsletter.
Questions, requests, or complaints about this policy or your personal data can be sent to info@coastalecuador.com. If you are located in Ecuador and are not satisfied with our response, you may contact the Superintendencia de Protección de Datos Personales. If you are in the EU, you may contact your national data protection authority.
See also: Terms of Service · Disclaimer