Privacy Policy

Who we are

Potenciados is a digital growth marketing agency operated by Gexdeal LLC, a Wyoming limited liability company with its mailing address at 390 NE 191st St Suite 36126, Miami, FL 33179, United States. In this policy, "we", "us", and "our" mean Gexdeal LLC.

This policy explains what we do with personal information when you visit potenciados.com, contact us, book a call, or hold an account with us. We are the data controller for that information.

What we collect

Information you give us

• Contact form: your name, email address, and the content of your message.
• Booking a call: your name, email address, the date and time you select, a subject, and any notes you add.
• Account: if you create an account, your email address and authentication credentials, plus any name or team details you enter. Passwords are salted and hashed by our authentication provider — we never see or store them in readable form.
• Billing: if you subscribe, our payment processor collects your payment details directly. We receive a record of the transaction, your billing contact details, and your subscription status. We never receive or store your full card number.
• Client work: information you share with us in the course of a project.

Information we collect automatically

• Server and security logs: IP address, user agent, requested URL, and timestamp, recorded by our hosting and CDN providers to serve the site and defend against abuse.
• Anti-bot signals: when you submit the booking form, Cloudflare Turnstile runs a challenge to confirm you are not a bot.
• Analytics and measurement, only if you allow it: we use Google Tag Manager to load measurement tags — things like which pages you visited, how you arrived, roughly where you are (city-level, from your IP), and what device you used. In the EEA, the UK, Switzerland, and Canada these are switched off until you accept the cookie notice; decline and they stay off. Our Cookie Policy lists what gets set once you accept.

What we do not do

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not use measurement data to make decisions about you individually — it tells us which pages and campaigns work, not who you are.

Why we use it, and our legal basis

We do not use your information for automated decision-making that produces legal or similarly significant effects about you.

Who we share it with

We do not sell your personal information. We share it only with service providers who process it on our instructions, under contract, and only as needed to run our business:

We may also disclose information where we are legally required to, to enforce our agreements, to protect the rights and safety of people or property, or to a buyer in connection with a merger, acquisition, or sale of assets — in which case we will tell you before your information becomes subject to a different privacy policy.

International transfers

We are based in the United States and our providers may process your information in the United States and elsewhere. If you are in the European Economic Area, the United Kingdom, or Switzerland, this means your information may be transferred outside your home country. Where we make such a transfer, we rely on appropriate safeguards — typically the European Commission's Standard Contractual Clauses, together with the UK Addendum where relevant — and we contract with providers who commit to equivalent protection.

How long we keep it

• Enquiries and bookings that do not become clients: up to 24 months from our last contact, then deleted.
• Account and client records: for as long as the account is active, and for up to 7 years afterwards where we need them for tax, accounting, and legal purposes.
• Billing records: as required by applicable tax law, typically 7 years.
• Security logs: a rolling window, typically no more than 12 months.

When a retention period ends, we delete the information or irreversibly anonymise it.

How we protect it

We serve the site over HTTPS, restrict access to personal information to people who need it to do their job, and rely on providers that offer encryption at rest and in transit. Access to accounts supports multi-factor authentication. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security — but if a breach affects your personal information and the law requires notice, we will notify you and the relevant regulator within the required deadlines.

Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and get a copy.
• Correct information that is wrong or incomplete.
• Delete your information, where we have no overriding reason to keep it.
• Object to or restrict how we use it.
• Port it to another provider in a machine-readable format.
• Withdraw consent at any time, where we relied on consent.
• Not be discriminated against for exercising any of these rights.

To exercise any of these, email [email protected]. We will respond within 30 days (or 45 days for requests under California law, extendable where permitted). We may need to verify your identity first. You can use an authorised agent where the law allows it.

If you are in the EEA, UK, or Switzerland: you also have the right to complain to your local data protection authority. We would appreciate the chance to address your concern first.

If you are in California: we have not sold or shared personal information for cross-context behavioural advertising, and we do not knowingly do so for anyone under 16. We do not use or disclose sensitive personal information beyond the purposes permitted without an option to limit it.

Cookies

We use a small number of strictly necessary cookies, plus measurement cookies that are set only with your consent. Our Cookie Policy lists every one of them, what it does, and how to change your mind.

Children

Our website and services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email us and we will delete it.

Third-party links

Our site links to client websites and other third-party sites. We do not control them and are not responsible for their privacy practices. Read their policies before giving them your information.

Changes to this policy

We may update this policy as our services or the law change. When we do, we will revise the effective date at the top of this page, and for material changes we will give you notice by email or a prominent notice on the site before the change takes effect.