Who is responsible for your data

The data controller is Collectif+3, the architecture, interior design and construction studio of architect Sebastián Luzuriaga, with offices at Av. Pampite y Chimborazo, C.C. Centro Plaza, Oficina 3, Cumbayá, Quito, Ecuador.

The legal entity name and tax ID (RUC) under which the studio operates are being confirmed and will be published on this page.

For anything related to your personal data, write to proyectos@collectif3.com or message +593 99 837 8940. This policy covers the site collectif3.com, its form, its WhatsApp buttons, the AURA assistant and the newsletter, and is governed by Ecuador's Organic Law on Personal Data Protection (LOPDP) and its Regulations.

Project requests

When you write to us from the contact page or the “Let's design your home” panel, we receive your name, your email and, if you choose to share them, your phone or WhatsApp number, the project type and your message. The request also records the page you sent it from, the site you came from and the link's campaign parameters (UTM), if any.

The request is stored in our database, hosted on Supabase. When the service is enabled, the studio also receives an email alert sent through Resend.

Purpose: to reply, follow up on your request and measure which channels bring in requests. Legal basis: your consent and pre-contractual steps taken at your request (LOPDP, art. 7).

WhatsApp buttons

When you tap a WhatsApp button on the site we record, without your name or number: the page and button you used, the project you were viewing, the language, the device type (mobile, tablet or desktop), the site you came from, campaign parameters (UTM) and a reference code in the format C3-XXXXX that is added to your WhatsApp message. That code lets the studio link the record to the conversation you start.

We don't store your IP address. It is used only briefly, in memory, to limit abuse, and then discarded.

Purpose: to learn which parts of the site and which channels start conversations. Legal basis: the studio's legitimate interest in attributing its contacts, balanced against your rights and limited to the minimum data needed (LOPDP, art. 7).

The conversation then takes place on WhatsApp, a Meta service, and is subject to its terms and privacy policies. We use what you write there to assist you.

AURA assistant

Conversations with AURA are stored in the studio's database: the text of the messages, the page, the language, the device type, the referring site and campaign parameters (UTM), a C3-XXXXX reference code and the date and time of each message.

To generate each answer, messages are sent to OpenRouter, which routes them to the model provider, Anthropic (Claude).

Purpose: to answer you, follow up on requests you make in the chat and improve the service. Legal basis: your consent, given by using the assistant after the notice shown in the chat. You can stop using it at any time and ask us to delete your conversation.

Answers are automated and informational. They are not offers, quotes or professional advice, and we make no decisions with legal effects on you based solely on automated processing.

Please don't share sensitive data in the chat, such as health information, bank account numbers or identity documents.

If you subscribe, we store your email, language, the page you subscribed from, the date and the version of the consent text and of this policy that you accepted.

Subscribing requires ticking an express consent box that is never pre-ticked. Every email includes an unsubscribe link, also one-click, which takes effect as soon as we receive it.

Purpose: to send you the studio's letters, with new works, blog articles and design ideas. Legal basis: your consent, which you can withdraw at any time.

Admin panel and technical logs

The studio's admin panel processes the email and uses strictly necessary session cookies of authorized team members. It doesn't apply to visitors.

When you visit the site, Vercel, our hosting provider, processes technical logs such as your IP address, browser and requested page to serve the site and protect it.

If you write to us by email, we process the data you share in order to assist you.

Cookies and browser storage

The site uses no analytics, advertising or tracking cookies, and no third-party pixels.

In your browser's local storage (localStorage) we keep only your light or dark theme preference. It never leaves your device and you can clear it at any time.

While the tab is open we keep in your browser (sessionStorage) the site or campaign you came from. It is only sent if you write to us on WhatsApp, through the form or through the assistant, and it is deleted when you close the tab.

If we ever add non-essential cookies, we'll update this policy and ask for your consent before enabling them.

Processors and providers

We work with data processors that use the data only to deliver their service to us, under their contractual data protection terms:

Vercel: hosting and technical logs. Supabase: database, file storage and admin sign-in. OpenRouter and Anthropic: answers from the AURA assistant and text generation inside the admin panel. Resend: newsletter emails and internal request alerts. fal.ai: image generation inside the admin panel, with no personal data.

Daleki Lab develops, hosts and maintains the site for the studio. It accesses request data as a data processor, only to operate the platform and measure the channels that bring in contacts.

We don't sell your data or hand it over to third parties for commercial purposes.

International transfers

Most of these providers process data outside Ecuador, mainly in the United States. These transfers are made in line with articles 55 to 61 of the LOPDP, with contractual safeguards and adequate security measures, and only for the purposes described in this policy.

How long we keep data

Project requests, WhatsApp click records and conversations with AURA: up to 24 months from the last contact, unless you ask us to delete them sooner. If you become a client, they are kept longer, for the duration of the relationship and the periods required by tax and accounting rules.

Newsletter: while you're subscribed. After you unsubscribe we keep the evidence of your consent and of the unsubscription for the time the law requires, to show we respected your choice.

Hosting technical logs: for the periods set by the provider.

Your rights

You have the right to information, access, rectification and updating, deletion, objection, portability, suspension of processing and not to be subject to decisions based solely on automated assessments (LOPDP, arts. 12 to 24). You can also withdraw your consent at any time, free of charge and without retroactive effect.

To exercise them, write to proyectos@collectif3.com or message +593 99 837 8940 with your name, a detail that lets us verify your identity and what you need. We reply within the 15-day period set by the LOPDP.

If you're not satisfied with our answer, you can file a complaint with Ecuador's Superintendencia de Protección de Datos Personales.

Security and breaches

The site runs only over HTTPS. The database enforces row-level access policies: the public can't read requests, conversations or subscribers, and the admin panel requires a sign-in link sent to authorized emails. Service keys never reach the browser.

If a security breach affects your data, we will notify the Superintendencia de Protección de Datos Personales and, where applicable, the people affected, within the deadlines set by the LOPDP.

Minors

This site is aimed at people over 18 who are planning an architecture, interior design or construction project. We don't knowingly collect data from minors. If you believe a minor has sent us their data, write to us and we'll delete it.

Changes to this policy

If the way we process your data changes, we'll update this page and its date. If the change affects what you consented to, we'll ask for your consent again.

This policy is published in Spanish and English. If the two versions differ, the Spanish version prevails.

Privacy policy