Privacy Policy

1. Who We Are

Clarity Paraguay is an immigration, residency, and real estate services firm based in Asunción, Paraguay. We operate this website at claritypy.com.

Clarity Paraguay E.A.S. (RUC 80153190-0), Jaime Bestard 2726, Asunción 001402, Paraguay, is the controller of your personal data. The controller is the business that decides why and how your data is used.

For any question about this policy or your personal data, or to use your rights, contact us at contact@claritypy.com or on +595 985 785587 (phone and WhatsApp).

2. What Data We Collect

We collect the personal data you choose to give us when you use our contact form, property enquiry form or free checklist form, or when you email or message us. This may include:

• Full name
• Email address
• Phone number or WhatsApp number
• Nationality
• The service or property you are enquiring about
• Any message or additional information you choose to include

On the free checklist form, your name and email address are required, so that we can send you the PDF and answer your questions. Your WhatsApp number and your nationality are optional. A separate box, unticked by default, asks whether you also want residency tips by email (see section 3).

When you visit this website, our hosting and security provider, Cloudflare, receives technical data such as your IP address and details of each request, so that the site loads and abuse can be blocked. If you accept analytics cookies, we also collect limited usage information through Google Analytics, as described in section 5. Cloudflare Web Analytics counts page views on every visit, without cookies. We do not use advertising pixels.

3. Why We Use Your Data

Each use of your data needs a legal basis, which is the reason the law allows us to use it. These are our purposes and their legal bases:

• Answering your enquiry or booking, and taking the steps you ask for before any contract, such as assessing your eligibility for a residency or immigration service or sending you information about a property. Data: the details you give us in a form, email or message. Legal basis: steps at your request before a contract, and our legitimate interest in answering a request you made.
• Sending you the free checklist and answering your questions about it. Data: your name and email address, and your WhatsApp number and nationality if you give them. Legal basis: steps at your request before a contract, and our legitimate interest in answering a request you made.
• Sending you residency tips by email, only if you tick the separate box on the checklist page. Data: your name and email address, your WhatsApp number and nationality if you give them, the consent sentence you saw, its version and the time you ticked the box. Legal basis: your consent. You can withdraw it at any time with the unsubscribe link in every email or by writing to us.
• Keeping this website and its forms secure and free of abuse and spam. Data: your IP address, browser details. Legal basis: our legitimate interest in security and abuse prevention.
• Understanding how the website is used. Cloudflare Web Analytics, which uses no cookies, measures page views; legal basis: our legitimate interest in basic measurement. Google Analytics 4 runs only after you accept cookies; legal basis: your consent.

A legitimate interest is a reasonable business reason that does not override your rights. You can object to any use based on it (see section 8).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Who Receives Your Data

To run this website and our services we use the companies below. The list says what each one receives and when. Their own privacy policies explain how they use the data.

• Web3Forms (web3forms.com): delivers the contact form, the property enquiry form and the alert email we receive when someone uses the checklist form. It receives the details you type in the form and passes them to our mailbox. Privacy policy: web3forms.com/privacy.
• MailerLite (mailerlite.com): our email service for the residency tips emails, used only if you tick the optional box on the checklist page. It receives your name and email address, your WhatsApp number and nationality if you give them, the language of the page you used, the consent sentence you saw, its version and the time you ticked the box. We keep these until you unsubscribe, together with the legal record of your consent. Privacy policy: mailerlite.com/legal/privacy-policy.
• Zoho Mail (zoho.com): our mailbox provider. The emails you send us, and the form and alert emails delivered to our mailbox, are stored there. Privacy policy: zoho.com/privacy.html.
• Cloudflare (cloudflare.com): hosting and security. It receives your IP address and request data so that it can serve this website and block abuse. Cloudflare Web Analytics also counts page views without cookies (see section 5). The small program that runs this website (a Cloudflare Worker) writes logs that are kept for up to 7 days. For the checklist form they keep status codes and field names only, never what you typed. When your browser reports that our security rules blocked something on a page, they keep the page address, what was blocked, the rule that blocked it and the file and line where it happened, never your IP address or browser details. Privacy policy: cloudflare.com/privacypolicy.
• Google Analytics 4 (Google): only after you accept analytics cookies in the banner. See section 5. Privacy policy: policies.google.com/privacy.
• Calendly (calendly.com): only when you open the booking link. You then use Calendly's own service, which receives what you enter to book, and Calendly's own privacy policy applies. We receive the booking details. Privacy policy: calendly.com/legal/privacy-notice.
• WhatsApp (Meta): only when you open the chat link. You then use WhatsApp, and WhatsApp's own privacy policy applies to the chat. Privacy policy: whatsapp.com/legal/privacy-policy.

5. Cookies, Local Storage and Analytics

This website uses your browser's local storage to remember your language preference (English, Spanish, or Portuguese), your display preference (light or dark mode) and your choice about analytics cookies. This data is stored only on your device and is never transmitted to our servers.

Cloudflare Web Analytics: we use Cloudflare Web Analytics to count page views and see how fast pages load. According to Cloudflare, it does not use cookies or any other storage on your device to collect these metrics, and it does not track individual visitors across its customers' websites. For this reason it runs without a consent banner. We use it only for aggregate figures, such as page views, countries, device types, browsers, referring pages and load times. Our legal basis is our legitimate interest in basic measurement of how the website is used, and you can object (see section 8). Privacy policy: cloudflare.com/privacypolicy.

If you accept analytics cookies in the banner shown on your first visit, we use Google Analytics 4, a web analytics service provided by Google, to understand how visitors use this website so we can improve it. If you reject them, Google Analytics collects no data and no analytics cookies are set. Google Analytics collects information such as the pages you visit, how long you stay on them, the website that referred you, your approximate location (country and city), your device type, browser, operating system and language, and interactions such as scrolling and clicks on external links. We do not send your name, email address, phone number or the contents of any form to Google Analytics. We use this information only in aggregate to improve the website; we do not use it to identify you or for advertising.

Google Analytics uses first-party cookies (named _ga and _ga_SQVW208HMB) that store a random identifier to distinguish visitors and sessions. These cookies expire two years after your last visit. Google Analytics 4 does not log or store IP addresses. The data is processed by Google, which may store it on servers outside Paraguay, including in the United States, and is kept in our analytics account for up to 14 months. You can read how Google uses this information at policies.google.com/technologies/partner-sites.

You can change your choice at any time with the Cookie settings link in the website footer. You can also block or delete cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). None of this affects your use of this website.

6. How Long We Keep Your Data

We keep personal data only as long as we need it for the purpose it was collected for. These are our periods:

• Enquiries and emails (contact form, property enquiry, emails and messages): up to 24 months after our last contact with you, unless a case file needs them for longer.
• Checklist requests: the alert email we receive is kept for up to 12 months. If you did not tick the residency tips box, your details are not added to MailerLite.
• Residency tips list (MailerLite): until you unsubscribe, plus the legal record of your consent, which shows that you agreed.
• Google Analytics 4: up to 14 months.
• Cloudflare Worker logs: up to 7 days. For the checklist form they keep status codes and field names only, never the values you entered. Security reports from your browser add the page address, what was blocked, the rule, and the file and line where it happened, never your IP address or browser details.
• Records held by Cloudflare (security data) and by Web3Forms: for the period set in each provider's own privacy policy.

7. Transfers Outside Your Country

Our providers process data in the United States and the European Union, so your data can leave Paraguay and the country where you live.

Where EU or UK law applies to your data, these transfers rely on the provider's standard contractual clauses (standard terms approved for moving data between countries) or on an adequacy mechanism (an official recognition that the destination country protects data adequately). You can ask us for details or a copy at contact@claritypy.com.

8. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected (rectification)
• Have your data deleted (erasure)
• Ask us to limit how we use your data (restriction)
• Object to uses based on our legitimate interest, such as security or basic measurement
• Receive your data in a common format, or have it sent to another provider (portability)
• Withdraw your consent at any time, for example with the unsubscribe link in our emails or by contacting us. Withdrawing does not affect what we did before
• Complain to the data protection supervisory authority of your country of residence

To use any of these rights, write to contact@claritypy.com. We answer within one month.

9. How We Protect Your Data

We take reasonable steps to protect your data from unauthorized access, loss, or misuse.

10. Third Party Links

Our website contains links to other services, including Calendly, WhatsApp, Google Maps, Instagram, and X. Calendly and WhatsApp are described in section 4. Once you leave our site, this Privacy Policy no longer applies to what those services collect. We encourage you to review the privacy policies of any third party services you use.

11. Legal Framework

This policy follows the personal data rules that apply to this website:

• Paraguay: Ley 1682/2001, as amended by Ley 1969/2002, which regulates private information and is in force today.
• Paraguay: Ley 7593/2025 on personal data protection, published on 27 November 2025 and fully applicable from 27 November 2027. This policy already follows it where possible.
• European Union: the General Data Protection Regulation (GDPR), which applies to us under Article 3(2) when we offer services to people in the EU.
• United Kingdom: the UK GDPR, for visitors in the UK.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.

Change log:

• 19 October 2026: hCaptcha removed from all forms; it no longer receives any data; section 2 now says that Cloudflare Web Analytics runs on every visit, without cookies; sections 4 and 6 now say what the Worker logs keep from your browser's security reports.
• October 2026: full rewrite; processors, legal bases, retention, transfers and rights added; Cloudflare Web Analytics and hCaptcha named.