Privacy policy
Last updated: October 31, 2026
This is a translation for convenience. The Spanish version is the one that applies under Argentine law.
1. Who is responsible
Matías Crocco, CUIT [completar: CUIT], with address at [completar: domicilio legal], is responsible for processing your personal data and owns the database where it is stored. Contact: work@matiascrocco.com.
Registration with the National Registry of Personal Databases of Argentina's Agency for Access to Public Information (AAIP): [to complete: number or “in progress”].
2. What data I ask for and why
I only ask for the data I need (Section 4, Law 25,326).
| Data | Purpose | Required? |
|---|---|---|
| Name | Know who I'm talking to | Yes |
| Reply to you | Yes | |
| Phone or WhatsApp | Reach you another way, if you prefer | No |
| Area and message | Understand and answer your enquiry | Yes |
| Day and time you suggest for a call | Arrange the call | Only if you request a call |
| Acceptance of this policy | Record your consent (an unticked box) | Yes |
Without the required data I can't answer your enquiry.
WhatsApp: tapping a WhatsApp button opens the app on your device. From there, the conversation is governed by WhatsApp's policies. The site doesn't receive or store your number when you tap the button.
I don't ask for sensitive data (racial or ethnic origin, political opinions, religious beliefs, union membership, health or sex life), nor for ID numbers or date of birth.
Technical logs: the service that hosts and protects the site logs technical connection data (such as IP address, date and time, and page visited) so the site works and to prevent abuse.
3. What I use it for
- Answering your enquiries and arranging calls.
- Meeting legal obligations where applicable.
- Protecting the site and preventing spam, fraud and unauthorized access.
I don't sell your data or use it for purposes other than those stated here.
4. Who I share it with
Only with those who need it for the site to work:
- Cloudflare, Inc., which hosts the site, stores form messages and emails them to me (Cloudflare Workers, D1 and Email).
- Cloudflare Turnstile, which checks that the form is sent by a person and not a bot.
- Authorities, when required by a court order or regulation.
If I correct or delete your data, I notify these recipients within 5 business days (Section 16, Law 25,326).
5. International data transfer
Cloudflare may process and store data on servers outside Argentina, for example in the United States, under data processing agreements. By accepting this policy you expressly consent to that international transfer and storage (Section 12, Law 25,326). If you don't agree, reach me another way and we'll work it out.
6. How I protect your data
I apply technical and organizational measures to protect it (Section 9, Law 25,326): encrypted connections, restricted access to the admin panel and abuse protection. I never use real data for testing. If a security incident affected your data, I would let you know.
7. How long I keep it
- Enquiries, for up to [to complete: period, e.g. 2 years] from the last contact, unless a job goes ahead.
- If a job goes ahead, billing and contract data are kept for 10 years for accounting and tax purposes (Section 328, Argentine Civil and Commercial Code).
- Technical logs, only as long as needed to protect the site.
8. Your rights
As the data subject you can access, correct, update and delete your data (Sections 14 to 16, Law 25,326):
- Access: free of charge (up to once every 6 months), within 10 calendar days of your request.
- Correction, update or deletion: free of charge, within 5 business days of your request.
To exercise them, email work@matiascrocco.com from the address you used to contact me and tell me what you'd like to do.
The AGENCY FOR ACCESS TO PUBLIC INFORMATION, as the supervisory authority for Law No. 25,326, handles complaints from anyone whose rights are affected by non-compliance with data protection rules.
9. Cookies and local storage
The public site uses no advertising or tracking cookies. To count visits I use Cloudflare Web Analytics, which sets no cookies and doesn't identify people.
Turnstile, the form's anti-spam check, may use technical browser data to tell people from bots. The admin panel uses its own session cookie (Secure, HttpOnly and SameSite=Strict) only for the person who runs it.
You can delete cookies and site data from your browser settings.
10. Minors
The site isn't aimed at people under 18 and I don't knowingly collect their data. If you think a minor has given me data, let me know and I'll delete it.
11. Changes to this policy
If I update it, I publish the new version here with its date. If the change is significant, I'll flag it on the site.