Privacy Policy

Version 1.0 · Last updated: October 21, 2026

At Kiboria we handle personal data with the same principle we apply to the agents we build: only what is necessary, under control and on record. This policy explains what data we collect on kiboria.com, why, who we share it with and how you can exercise your rights.

In short:

• We collect the data you give us in the contact form and basic browsing data.
• We only use the Meta Pixel if you accept it in the cookie banner.
• We do not sell your data and do not knowingly process sensitive data.
• You can request access, correction or deletion through the contact form.

1. Who is the controller

The data controller is Kiboria ("we"). For privacy matters, write to us through the contact form on this site.

2. Scope

This policy applies to the kiboria.com website and the data you send us through it. Data we process when providing services to our clients is governed by the contract and the data processing agreement we sign with each of them.

3. What data we collect

• Data you give us in the contact form: name, company, email and the text of your enquiry. Please do not include sensitive data (health, ethnic origin, political or religious opinions, among others) or data about third parties.
• Browsing data: IP address, browser and device type, pages visited, date and time. We collect it in server logs and, if you accept, through third-party cookies.
• Marketing cookie data (only with your consent): identifiers from Meta Pixel cookies and the events you perform on the site, such as viewing a page or submitting the form.

4. Why we use it and on what legal basis

We do not sell your data. We do not make automated decisions with legal effects on you based on data from this site.

5. Meta Pixel and advertising measurement

If you accept marketing cookies, we use the Meta Pixel and its Conversions API. This allows Meta Platforms Ireland Limited (if you are in the European Economic Area) or Meta Platforms, Inc. (elsewhere) to receive information about your visit, to measure the effectiveness of our ads and to show you advertising.

If you submitted the form, we may share your email and phone number with Meta in hashed form: Meta does not receive the data in clear text, only a code that lets it check whether it matches an account. We never share the content of your enquiry.

Kiboria and Meta are joint controllers for the collection and transmission of this data. Meta's subsequent processing is governed by its own privacy policy. You can withdraw your consent at any time from "Cookie settings" in our Cookie Policy, which also details each cookie.

6. Who we share data with

• Providers that process data on our behalf: Amazon Web Services (website hosting, storage of enquiries and email delivery). They only access what is necessary and are bound by contract.
• Meta, as described in section 5 and only with your consent.
• A company we incorporate, or an acquirer. If Kiboria's activity is transferred to a company set up by its owner, or in case of a merger, sale or investment, data may be transferred to the new entity. That entity will be bound by this policy, and we will give notice on the site before the change.
• Authorities, when required by law.

7. International transfers

Some providers, such as Meta, process data in the United States or other countries. For residents of the European Economic Area, transfers to the US rely on the EU-US Data Privacy Framework, for certified companies, or on the European Commission's Standard Contractual Clauses. For residents of Argentina, transfers are made with your consent or with the contractual safeguards accepted under Argentine law. Argentina has an adequacy decision from the European Commission.

8. How long we keep data

• Enquiries that do not become a business relationship: 24 months from the last contact.
• Clients: for the duration of the relationship and, afterwards, for the period required by tax and commercial law.
• Server logs: 90 days.
• Cookie choices: 12 months.
• Meta cookies: up to 90 days, unless you delete them earlier.

9. Your rights

You can request access to, rectification, updating and deletion of your data. If you are in the European Economic Area, you can also object to processing, request restriction and portability, and withdraw your consent without affecting processing carried out before.

Write to us through the contact form stating your request. We may ask you to verify your identity. We answer access requests within 10 calendar days, and rectification or deletion requests within 5 business days. If you are in the EEA, the maximum term is one month.

Mandatory notice (Argentine Law 25,326): The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is proven, as set out in Article 14(3) of Law No. 25,326. The Agency for Access to Public Information (AAIP), as the supervisory authority of Law No. 25,326, has the power to handle complaints and claims filed by anyone whose rights are affected by non-compliance with the rules on personal data protection.

Original text in Spanish: El titular de los datos personales tiene la facultad de ejercer el derecho de acceso a los mismos en forma gratuita a intervalos no inferiores a seis meses, salvo que se acredite un interés legítimo al efecto conforme lo establecido en el artículo 14, inciso 3 de la Ley Nº 25.326. La Agencia de Acceso a la Información Pública, en su carácter de Órgano de Control de la Ley Nº 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales.

If you are in the EEA, you can also lodge a complaint with the data protection authority of your country.

10. Security

We apply technical and organisational measures to protect your data: encrypted connection (HTTPS), access limited to people who need it, and access logs. No system is infallible. If an incident affects your data, we will notify the authority and you where required.

11. Minors

This site is aimed at companies and professionals. We do not knowingly collect data from people under 18.

12. Changes to this policy

We may update this policy. We will publish the new version with its date and, if the change is significant, we will give notice on the site. Previous versions are available on request.

This policy is a translation. In case of discrepancy, the Spanish version prevails.