Privacy Policy

Effective Date: July 24th, 2026 · A&M Capital, S.A. de C.V. · This policy follows El Salvador's Personal Data Protection Law (Legislative Decree No. 144, in force since November 28th, 2024).

1. Who is responsible for your data

The data controller (responsable del tratamiento) is:

2. What data we collect

We only collect what you give us directly:

• Briefing request form: your name, email, country, service of interest, and message — plus phone and company if you choose to share them, and the page you submitted from.
• Direct contact: whatever you send us by email or WhatsApp.

Like any website, our hosting provider (Cloudflare) also processes technical connection data — such as your IP address and browser type in server logs — to deliver and secure the site.

We do not collect sensitive data (health, biometrics, beliefs), and we ask you not to include it in your messages. This website sets no cookies. It does run our own first-party analytics, described in section 8.

3. Why we use your data, and on what legal basis

• To respond to your inquiry and prepare a briefing — based on the steps you ask us to take before a possible contract (Art. 28 of the law).
• To follow up on your request — based on the express consent you give with the checkbox on our form (Arts. 26–27).

We do not send newsletters or advertising unless you request it. If we ever contact you commercially, you can object at any time and we will stop.

4. Your rights (ARCOPOL)

Under Salvadoran law you can, at any time and free of charge:

• Access the data we hold about you;
• Rectify it if it is inaccurate or incomplete;
• Cancel / erase it;
• Object to a specific use, including commercial follow-up;
• Portability — receive it in a usable format;
• Be forgotten — have it deleted from our records;
• Limit how it is processed;
• Withdraw your consent at any time, without affecting prior lawful processing.

5. How to exercise your rights

Write to our Data Protection Officer (Delegado de Protección de Datos) at info@amcapitalelsalvador.com with the subject line “Data Protection”. Include your name, a copy of your identity document, the data concerned, and the right you want to exercise.

We will answer within 20 business days (extendable once by 20 more for complex requests). Exercising your rights is free. If you are not satisfied with our answer, you have the right to file a complaint with the Agencia de Ciberseguridad del Estado (ACE), El Salvador's data protection authority.

6. Service providers who process data for us

We use a small set of providers (encargados) under their service contracts:

• Cloudflare — hosts and secures this website (privacy policy).
• Google — form submissions are delivered to our inbox and stored in a spreadsheet we operate on Google's platform (Apps Script, Sheets, Gmail) (privacy policy).
• Meta / WhatsApp — if you contact us via a WhatsApp button (see section 9) (privacy policy).

These providers process data only to deliver their service to us. We never sell your data. Our website analytics is not on this list because we host and operate it ourselves rather than sending it to a third party — see section 8.

7. International data transfers

Our providers may store data on servers outside El Salvador. Where that happens, the transfer relies on the providers' contractual safeguards, with protection standards no lower than those of Salvadoran law (Art. 44). By submitting our form or contacting us, you consent to this processing.

8. Cookies and analytics

This website sets no cookies and stores no identifier in your browser. We use no advertising trackers and no third-party analytics service.

We do measure traffic, with analytics we run ourselves: a self-hosted instance of Umami, served from this domain under /stats/ and processed on our own server. For each page view it records the page address, the page title, the referring address, your browser language and your screen size, and it uses your IP address at the moment of the request to derive an approximate country and city. It does not store your IP address in raw form, does not place a cookie, and cannot follow you to other websites.

Because no non-essential cookies are used, no cookie banner is required. If you prefer not to be measured at all, any standard tracker blocker will stop it, and you may also ask us to exclude you by writing to the address in section 5.

9. WhatsApp

The WhatsApp buttons on this site open a chat with us at +503 7844 0216. If you use them, your number, profile, and messages are also governed by Meta / WhatsApp's own terms and privacy policy, which we do not control.

10. How we protect your data

We apply technical and organizational measures appropriate to the risk: encrypted connections (TLS/HTTPS), access controls on our accounts, and data minimization — we only ask for what we need. No system is absolutely secure, but we work to keep risks low.

11. If a data breach happens

If a security incident affects your personal data, we are committed to notifying the ACE, the Attorney General's Office (Fiscalía General de la República), and the affected individuals within 72 hours of becoming aware of it, as required by Art. 25 of the law.

12. How long we keep your data

Only as long as needed to handle your inquiry and any business relationship that follows. If your inquiry leads to a contract, related records may be kept for as long as Salvadoran commercial and tax law requires (accounting records: up to 10 years). You can request deletion at any time (section 5).

13. Minors

This website and our services are directed to adults. We do not knowingly collect data from anyone under 18. If you believe a minor has sent us data, contact us and we will delete it.

14. Changes to this policy

We will post any update on this page with a new effective date. This page is the official channel for communicating changes to this policy.

15. Contact

Questions about this policy or your data: info@amcapitalelsalvador.com · WhatsApp +503 7844 0216 · Torre 1 World Trade Center, Local 201-A, Col. Escalón, San Salvador, El Salvador.

See also our Terms & Conditions.

16. Governing language

This document is published in Spanish and English. In the event of any discrepancy between the two versions, the Spanish version prevails, A&M Capital, S.A. de C.V. being a Salvadoran company subject to the law of El Salvador.

This document was prepared with AI assistance and is subject to human legal review, in line with Resolución Inc. 57-2025 of the Constitutional Chamber of El Salvador.