Privacy & Cookie Policy

1 Data Controller

The controller responsible for the processing of personal data gathered through this website is Toinli ("the Agency"), reachable at support@toinli.com.

This policy is prepared in accordance with international data protection frameworks, including the EU General Data Protection Regulation (GDPR), United States FTC guidelines, and California Consumer Privacy Act (CCPA) principles.

2 Information We Collect

We only collect data that you voluntarily provide to us when interacting with our agency:

• Commercial Contact Details: Full name, corporate email address, and telephone or WhatsApp number provided when requesting a quote or proposal.
• Project Specifications: Business description, industry, desired platform features, initial catalog information, or technical integrations.
• Live Chat Communications: Inquiries sent via our live web chat widget (Tawk.to) to provide immediate assistance.
• Non-Identifiable Technical & Security Data: Browser user agent, operating system, and anonymized IP address processed automatically by Cloudflare’s global edge network to safeguard against DDoS attacks and maintain lightning-fast response times.

3 How We Use Your Data

Your personal details are used exclusively for legitimate business purposes:

• Calculating and delivering transparent, commitment-free commercial proposals tailored to your budget.
• Maintaining ongoing project communication during design, development, staging, and go-live phases.
• Delivering custom domains, corporate email setups, and administrative credentials.
• Providing continuous maintenance and technical support.

4 Use of Cookies & Clean Browsing Policy

At Toinli, we prioritize a high-speed, uncluttered web experience. We do not deploy cross-site tracking cookies, third-party retargeting pixels, or behavioral session recording software.

Our platform uses strictly essential technical cookies:

Under applicable privacy laws, strictly necessary technical cookies do not require invasive banner consent overlays because they are essential for site functionality, performance, and security.

Cookie Management: Although these cookies are essential, you can block or delete them at any time through your browser's privacy settings (Chrome, Safari, Firefox, Edge). Please note that if you block security or session cookies, core features like the live chat or the secure quote form may not function properly.

5 Security & Data Retention

We enforce strict security practices, including end-to-end SSL/TLS (HTTPS) encryption. Data is retained only as long as necessary to perform contracted development, provide ongoing assistance, or fulfill accounting requirements.

6 Your Privacy Rights

You have the full right at any time to:

• Access the personal information we hold regarding your inquiries.
• Request correction of inaccurate or outdated contact information.
• Request complete erasure/deletion of your personal data from our contact databases.
• Opt-out of any non-essential communications.

To exercise any of these rights, email us at support@toinli.com with the subject line "Privacy Request". We address all verified inquiries within 5 business days.

7 Regional Regulatory Compliance & Oversight

Our privacy practices adhere to consumer rights frameworks across our primary operational regions:

• United States (CCPA/CPRA & CAN-SPAM): Strict "Do Not Sell or Share My Personal Information" enforcement. We never monetize, rent, or trade client inquiries, analytics, or contact records.
• European Union & Spain (GDPR / LOPDGDD): Processing conducted under clear legal bases (contract initiation & consent). Lead supervisory body: Spanish Data Protection Agency (AEPD).
• Colombia (Statutory Law 1581 of 2012): Habeas Data compliance. Supervisory authority: Superintendency of Industry and Commerce (SIC - Superintendencia de Industria y Comercio).

8 Legal Basis & Third Parties (Sub-processors)

In accordance with the GDPR, we process your data under the following legal bases: Explicit consent (when submitting a contact form) and Performance of a contract (when hiring our development services).

Service Providers (Third Parties): While we do not sell your data, we are required to share it strictly with essential technical infrastructure providers to operate (e.g., hosting servers, Cloudflare for web security, and Tawk.to for live chat). These providers act as sub-processors and are subject to strict Data Processing Agreements (DPAs) and confidentiality constraints.

9 International Data Transfers

Because we utilize global cloud infrastructure providers (such as Cloudflare or hosting providers with servers in the US or EU), your data may be transferred to and processed outside of your country of residence. We guarantee that all international transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and technical encryption measures.

10 Children's Privacy

Our B2B services (website creation and enterprise software) are directed exclusively at individuals over the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will immediately delete such information from our servers.

11 Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our operational practices or legal regulations. Any material changes will be notified to you by updating the "Last updated" date at the top of this page and, if you are an active client, via an email notification.