Privacy & data
Privacy and data use policy
What personal data we process when you use masterplan-investments.com, what we use it for and what rights you have — under the EU GDPR and United States privacy laws (CCPA/CPRA).
1. Who is responsible
The data controller is MasterPlan Investments, Asunción, Paraguay. For any question about this policy or your data, write to contacto@masterplan-investments.com.
2. What data we collect
What you give us: name, WhatsApp/phone number and email address, when you request your list, ask about a unit or use the contact form.
Your activity on the site related to your interest: the units you save as favorites or ask about (identified by their reference) and the language you browse in.
Technical browsing data: IP address, device and browser type, and pages viewed, collected through cookies and analytics/advertising tools — only as you accept in the cookie banner.
3. What we use it for and the legal basis
Answering your inquiry and sending the list you requested — legal basis: pre-contractual steps taken at your request (art. 6.1.b GDPR).
Commercial follow-up by an advisor on what you asked about — legal basis: our legitimate interest in serving your request and, where applicable, your consent (art. 6.1.a and 6.1.f GDPR).
Improving the site and measuring our advertising campaigns — legal basis: your consent for non-essential cookies (art. 6.1.a GDPR), which you can give or refuse in the banner and change at any time.
4. Third-party tools that receive data
Depending on what you accept, these tools may receive your data: Google (Google Ads / gtag, campaign measurement), Meta (Facebook/Instagram pixel), Vercel (site hosting and cookieless analytics), Supabase (the database where your inquiry is stored), Resend (email delivery) and the WhatsApp Business API (Meta) for messaging.
Some of these providers are located outside the European Economic Area (mainly in the United States). Transfers rely on standard contractual clauses and the data transfer frameworks in force between the EU and the US.
6. How long we keep your data
We keep your contact details and inquiries for as long as the commercial relationship lasts and up to 24 months after the last contact, unless a legal obligation requires keeping them longer or you request deletion earlier.
7. Your rights — European Union (GDPR)
If you are in the EU you have the right to access your data, rectify it, erase it, restrict its processing, port it to another provider, object to processing and withdraw your consent at any time without affecting prior processing.
You can also lodge a complaint with your country’s data protection authority if you believe the processing does not comply.
8. Your rights — United States (CCPA/CPRA)
If you reside in California or another state with an equivalent privacy law, you have the right to know what personal data we hold about you, to delete it, to correct it and to opt out of the sale or sharing of your personal data.
MasterPlan Investments does not sell personal data. If you still wish to exercise "Do Not Sell or Share My Personal Information" or any of these rights, write to contacto@masterplan-investments.com. You will not be discriminated against for exercising them.
9. How to exercise your rights
Send your request to contacto@masterplan-investments.com stating which right you want to exercise. We respond within 30 days (extendable under the GDPR for complex requests, with notice). To protect your data we may ask for reasonable identity verification before responding.
10. Commercial communications
We only send you commercial communications with your consent. Every email includes a simple way to unsubscribe (CAN-SPAM / GDPR). On WhatsApp we only write about what you requested and for advisor follow-up.
11. Minors
This site is not directed at anyone under 18 and we do not knowingly collect data from minors.
12. Security
We apply reasonable security measures: the site runs entirely over HTTPS, access to data is restricted to the team that needs it and we work with infrastructure providers holding recognized security certifications.
13. Changes to this policy
If we materially change this policy we will publish it here and update the date in the header. The date of the last update appears at the top of this page.