Privacy and Personal Data Protection Policy
Version 2026-08-18.
1. Data controller
GOALAUSI is a digital platform administered by Miguel Samaniego and operated from Alausí, Chimborazo, Ecuador.
Privacy and data-rights contact channel: equipo@goalausi.com.
2. Purpose
This Policy explains which personal data GOALAUSI may process, how it may be used, possible recipients, general retention periods and the rights of data subjects.
3. Data that may be processed
Account data: name, email address, phone or WhatsApp number, protected credentials and records of legal-document acceptance.
Business and listing data: business name, description, address, hours, public phone numbers, location links, photos, products, services, accepted payment methods, social networks, promotions and English versions supplied by the advertiser.
Plan and payment data: selected plan, amount, originating bank, reference, transfer date, proof, review status and records of accepted conditions.
Participation data: information associated with reviews, comments, likes and other features available to registered users according to Platform settings.
Technical data: information needed for security, operation, abuse prevention and site administration.
4. Purposes
Data may be used to create and authenticate accounts; manage listings; display information intended for publication; manage plans, payments, activations and scheduled plans; send operational communications; recover passwords; provide support; moderate participation; prevent fraud or abuse; maintain security and comply with legal obligations.
5. Legal basis
Depending on the operation, processing may rely on consent, requested pre-contractual measures, a contractual relationship, a legal obligation or another basis recognized under applicable Ecuadorian law.
6. Data intended for publication
Certain information is collected specifically to be displayed publicly, including business name, address, hours, public phone numbers, WhatsApp, location, photos, descriptions, products, services, social networks and promotions. Advertisers should avoid publishing unnecessary personal data.
7. Translations supplied by advertisers
English-language fields are content that advertisers choose to provide for public display. GOALAUSI does not need to send those texts to an automatic translation service because the English version is entered and reviewed by the advertiser.
8. Consequences of not providing data
When data is required for an account, listing, payment or specific feature, failure to provide it may prevent use of that function. Optional fields, including the English version, may be omitted.
9. Recipients and providers
GOALAUSI does not sell personal-data databases. Data may be processed by technology providers needed to host, protect and maintain the Platform or disclosed to authorities where a valid legal obligation exists.
10. External services and international processing
The Platform may use or link to services such as WhatsApp, Google Maps, social networks, Google Fonts and CDN resources. Global providers may involve processing or transit outside Ecuador, subject to applicable legal requirements.
11. Retention
Data is retained for as long as needed for the stated purposes and afterwards for periods required for legal, contractual, administrative, accounting obligations or potential claims.
12. Security
GOALAUSI applies reasonable technical and organizational measures to protect information. Account passwords are stored using cryptographic hashing. No Internet-connected system can guarantee zero risk.
13. Data-subject rights
Individuals may exercise rights recognized under applicable Ecuadorian law, including information, access, correction, updating, deletion, objection, suspension or restriction, portability where applicable and withdrawal of consent where appropriate.
14. Exercising rights
Requests may be sent to equipo@goalausi.com. GOALAUSI may use reasonable identity-verification measures before disclosing, changing or deleting information.
15. Third-party and minor data
Users must not provide third-party personal data without a legitimate basis. Commercial accounts are not specifically designed for minors; where relevant, applicable safeguards will be observed.
16. Automated decisions
GOALAUSI does not currently make decisions based exclusively on automated processing that produce legal or similarly significant effects on a person.
17. Policy changes
This Policy may be updated when functionality, providers, processing activities or applicable rules change. Where new authorization is required, an appropriate mechanism will be implemented.
18. Contact
GOALAUSI
Controller: Miguel Samaniego
Alausí, Chimborazo, Ecuador
Email: equipo@goalausi.com