Privacy Policy

Kwapso SLU
Av. Fiter i Rossell 78, AD700 Escaldes-Engordany, Principality of Andorra
NRT: L-722207-S
Email: admin@kwapso.com 

This Privacy Policy explains how Kwapso SLU ("Kwapso", "we" or "us") collects, uses, and protects personal data when you use our Free Audit and Quiz at audit.kwapso.com. We process personal data in accordance with Qualified Personal Data Protection Law of the Principality of Andorra (LQPD, Llei 29/2021, del 28 d'octubre, qualificada de protecció de dades personals). For individuals in the European Union and the European Economic Area (EU/EEA), the General Data Protection Regulation (EU) 2016/679 (GDPR) also applies, and we process their personal data in accordance with it.

The data controller responsible for processing your personal data is:Kwapso SLU
Av. Fiter i Rossell 78, AD700 Escaldes-Engordany, Andorra
Email: admin@kwapso.com

We may collect the following categories of personal data when you visit our Website or use our services:
‍
‍a) Data you provide voluntarily:
‍Name, email address, phone number, company name, and any other information you submit through contact forms, quote requests, or newsletter sign-ups.
‍
‍b) Data collected automatically:
‍IP addressBrowser type and versionOperating systemDevice type (desktop or mobile)Pages visited, time spent on pages, and navigation pathsReferring URL (the page you came from)Date and time of access
‍
‍c) Data collected through cookies and tracking technologies:
‍See Section 6 (Cookies and Tracking Technologies) below for details.

d) Data you provide when using the Free Audit and Quiz (audit.kwapso.com): 
Name, company, email address, phoen number (optional), company size, your role, your answers to the audit questions, and the resulting profile.

e) Data you provide when booking a call or subscribing to our newsletter: 
The details you enter when booking a call (such as name, email address and the chosen time slot), and, for our newsletter "Daily Operations", your email address together with the time of sign-up and your IP address, which we store as proof of your consent.

We process your personal data for the following purposes and on the following legal bases under the LQPD and, for individuals in the EU/EEA, under the GDPR (Art. 6 GDPR):
‍

We may share your personal data with the following categories of recipients, solely to the extent necessary for the purposes described above:

Meta Platforms, Inc. (Meta Pixel) — for advertising measurement, conversion tracking, and audience building. See Section 6.

ZenLeads, Inc. d/b/a Apollo.io — for website visitor identification and sales intelligence. See Section 6.

Cloudflare, Inc. — hosting, database and file storage in the EU, PDF generation, bot protection (Cloudflare Turnstile) and cookie-free analytics (Cloudflare Web Analytics). See Section 6.

Close.com, Inc. — customer relationship management (CRM), where we store and manage contacts and enquiries.

Resend, Inc. — email delivery (for example the PDF report, booking emails and the newsletter).

Google Ireland Ltd / Google LLC — Google Calendar and Google Meet for booked calls, and Google Chat for internal notifications.

Hosting and infrastructure providers — for operating the Website.

Professional advisors — legal, accounting, or audit services, where required.

Public authorities — where required by law.

Where these providers process personal data on our behalf, they act as our processors on the basis of data processing agreements.

We do not sell your personal data.

Some of the third-party services we use are based in the United States, including Meta Platforms, Inc., ZenLeads, Inc. (Apollo.io), Cloudflare, Inc., Close.com, Inc., Resend, Inc. and Google LLC. Where personal data is transferred outside the Principality of Andorra or the European Economic Area, we ensure that appropriate safeguards are in place, such as:

EU Standard Contractual Clauses (SCCs) adopted by the European Commission.
The EU-US Data Privacy Framework, where the respective provider is certified.
Adequacy decisions by the Andorran Data Protection Agency (APDA) or the European Commission.
Additional technical and organisational measures where necessary.

Our Website uses cookies and similar tracking technologies. Cookies are small data files stored on your browser or device when you visit a website.

‍a) Strictly necessary cookiesThese cookies are essential for the Website to function properly (e.g., session management). They do not require your consent.
‍b) Analytics and performance cookiesThese cookies help us understand how visitors use the Website, which pages are visited most, and how we can improve the user experience.
‍c) Marketing and tracking cookiesWe use the following third-party tracking technologies on this Website. These are only activated with your prior consent:

Meta Pixel (Facebook Pixel)
Provider: Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.Purpose: The Meta Pixel is a JavaScript code snippet that tracks visitor activity on our Website. It collects data including pages visited, button clicks, form interactions, HTTP header data, IP address, browser and device information, and referral URLs. This data is sent to Meta and used for advertising measurement, conversion tracking, and building targeted audiences for advertisements on Meta platforms (Facebook, Instagram).Data transferred: IP address, browser/device data, page interactions, conversion events.

Privacy policy: https://www.facebook.com/privacy/policy/

Apollo.io Website Visitor Tracking

Provider: ZenLeads, Inc. d/b/a Apollo.io, San Francisco, CA, USA.
Purpose: Apollo.io's tracking script identifies companies and, where applicable, individual contacts visiting our Website using IP address resolution and cookies. It collects data including IP address, pages visited, visit timestamps, browser and device information, and navigation behaviour. This data is used by Kwapso for sales intelligence and lead prioritisation.
Data transferred: IP address, page visit data, browser/device data, company identification data.
Privacy policy: https://www.apollo.io/privacy-policy

Technologies that do not use advertising cookies
The following services are not marketing or tracking cookies and do not track you across websites:Cloudflare Turnstile
Provider: Cloudflare, Inc., San Francisco, CA, USA.
Purpose: We use Cloudflare Turnstile to protect our forms against spam and automated abuse. For this purpose, technical signals from your browser, such as your IP address and browser characteristics, are processed to tell humans from bots. No advertising cookies are used. The legal basis is our legitimate interest in securing our forms (Art. 6(1)(f) GDPR).
Privacy policy: https://www.cloudflare.com/privacypolicy/

Cloudflare Web Analytics
Provider: Cloudflare, Inc., San Francisco, CA, USA.
Purpose: We use Cloudflare Web Analytics to measure how our Website is used. It works without cookies and without cross-site tracking. The legal basis is our legitimate interest in understanding and improving our Website (Art. 6(1)(f) GDPR).
Privacy policy: https://www.cloudflare.com/privacypolicy/

Managing your cookie preferences
When you first visit our Website, a cookie consent banner will ask for your consent before any non-essential cookies or tracking technologies are activated. You can change or withdraw your consent at any time through the cookie settings on our Website. You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

- Contact form enquiries: retained for the duration of the business relationship and any applicable statutory retention period thereafter.

- Free Audit and Scorecard: retained for 24 months after our last contact with you, unless a business relationship follows, in which case the rules for the business relationship apply.
‍
- Newsletter: retained until you unsubscribe; the sign-up time and IP address are kept as proof of consent.

- Cookie and tracking data: retained according to the retention periods set by each tracking technology provider (see their respective privacy policies).

- Server log data: retained for up to 90 days for security and troubleshooting purposes.

Under the Qualified Personal Data Protection Law of Andorra and, for individuals in the EU/EEA, under the GDPR, you have the following rights regarding your personal data:

‍Right of access: You have the right to obtain confirmation of whether we process your personal data and to access that data.
‍Right to rectification: You have the right to have inaccurate personal data corrected without undue delay.
‍Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent.
‍Right to restriction of processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
‍Right to data portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
‍Right to object: You have the right to object to processing based on legitimate interest or for direct marketing purposes.
‍Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. You can unsubscribe from our newsletter at any time using the link in each email.

To exercise any of these rights, please contact us at admin@kwapso.com. You also have the right to lodge a complaint with the Andorran Data Protection Agency (Agència Andorrana de Protecció de Dades, APDA): www.apda.ad.
If you are in the EU/EEA, you also have the right to lodge a complaint with the supervisory authority of the EU country in which you live. In Austria, this is the Datenschutzbehörde (www.dsb.gv.at).

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, loss, or destruction, in accordance with the requirements of the LQPD. These measures are regularly reviewed and updated as necessary.

Our Website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected data from a minor, please contact us at admin@kwapso.com so we can delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this Website with a revised "last updated" date. We recommend reviewing this page periodically.

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

Kwapso SLU
Av. Fiter i Rossell 78, AD700 Escaldes-Engordany, Andorra
Email: admin@kwapso.com

‍Last updated: October 2026