Privacy Policy

1. About this policy

This Privacy Policy explains how Itaju Group E.A.S. (the "Company", "we", "us", or "our") collects, uses, stores, and protects your personal information when you visit our website or engage our residency services.

We take your privacy seriously. We only collect what we need to do our work, we keep it safe, and we never sell it. This policy is written in plain language so you can understand exactly what we do with your information.

By using our website or our services, you agree to the practices described in this Privacy Policy.

2. Who is responsible for your data

The data controller for your personal information is:

Itaju Group E.A.S.

3. What information we collect

We collect personal information in three ways: information you give us directly, information we receive as part of your residency application, and information that is collected automatically when you visit our website.

Information you give us directly includes your name, your email address, your phone number, your country of residence, your nationality, and any message you send to us through our contact form, WhatsApp, or by email.

Information we receive as part of your residency application includes copies of your passport, your birth certificate, your marriage certificate (if applicable), your police clearance from your home country, proof of address, financial documents required by the Paraguayan authorities, photographs for official filings, and any other document the Paraguayan government requires us or our partner law firm to submit on your behalf.

Information we collect automatically when you visit our website includes your IP address, your browser type and version, the pages of our website you visit, the date and time of your visit, the time you spend on each page, the website you came from, and similar diagnostic data. This information is collected through cookies and analytics tools, as described in our Cookie Policy.

4. Why we collect your information

We use your personal information for the following purposes:

• To respond to your enquiry when you contact us through our website, WhatsApp, or email.
• To prepare and file your Paraguayan residency application with the relevant Paraguayan authorities, and to coordinate every step of the process with you and our partner law firm.
• To comply with our legal and regulatory obligations under Paraguayan law, including any requirement to retain client records for a defined period.
• To improve our website and our services by understanding how visitors use the site.
• To send you important updates about your application or about changes to our service. We do not send marketing emails unless you have opted in.

We do not use your personal information for any purpose other than those listed above without your explicit consent.

5. Our legal basis for processing

We process your personal information on one or more of the following legal bases:

• Performance of a contract, when we process your information to deliver the residency service you have engaged us for.
• Compliance with a legal obligation, when Paraguayan law or any other applicable law requires us to collect, retain, or share your information.
• Legitimate interests, when we process your information to operate, secure, and improve our website and our services, in a way that does not override your privacy rights.
• Consent, when you have given us clear, specific permission to use your information for a defined purpose, such as receiving newsletter updates.

If you are accessing our website from the European Union or the United Kingdom, your data is processed in accordance with the General Data Protection Regulation (GDPR) and any applicable national law.

6. Who we share your information with

We share your personal information only with the parties listed below, and only to the extent needed to deliver our service.

• Our partner law firm in Paraguay, which provides the legal representation required under Paraguayan residency law. Our partner law firm is bound by professional confidentiality obligations.
• Paraguayan government authorities, including immigration, the national police, the civil registry, the tax authority, and any other public body required to process your residency application.
• Notaries, translators, and other professionals based in Paraguay, where their involvement is needed to prepare or certify documents for your file.
• Service providers that support our business operations, such as our website hosting provider, our email provider, our analytics provider, and our cloud storage provider. These providers are bound by confidentiality and data protection obligations.
• Authorities or third parties when we are required to share information by law, by court order, or to protect our legal rights.

We do not sell your personal information. We do not share it for marketing purposes. We do not transfer it to anyone outside the list above without your explicit consent.

7. International data transfers

We are based in Paraguay, and your personal information is stored on servers operated by us or by our service providers, which may be located outside Paraguay or outside your country of residence.

Where your information is transferred outside the jurisdiction in which it was collected, we take reasonable steps to make sure it is protected to the standard required by applicable law, including, where appropriate, by relying on standard contractual clauses or equivalent legal safeguards.

8. How long we keep your information

We keep your personal information only for as long as we need it required by Paraguayan Government Laws.

For active clients, we keep your information for the duration of our engagement and for any retention period required by Paraguayan law after the engagement ends. This typically includes any period during which we may be required to produce records to a Paraguayan authority, including tax and regulatory bodies.

For enquiries that do not become engagements, we delete your information within a reasonable period after the enquiry is closed, unless we have a legal reason to keep it longer.

For website analytics, we keep aggregated and anonymised data for as long as it is useful to improve our service.

9. How we protect your information

We use reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. These include encrypted storage, access controls, secure file transfer, and confidentiality obligations on our team and our partners.

No system is completely secure. While we take protection seriously, we cannot guarantee that your information will never be subject to a security incident. If a serious incident affects your data, we will notify you in line with applicable law.

10. Your rights

Depending on the law that applies to you, you may have the following rights in relation to your personal information:

• The right to access the personal information we hold about you.
• The right to have inaccurate or incomplete information corrected.
• The right to have your personal information deleted, where we are not required by law to keep it.
• The right to restrict or object to certain types of processing.
• The right to receive a copy of your personal information in a portable format.
• The right to withdraw any consent you have given us, without affecting any processing that has already taken place.
• The right to lodge a complaint with the data protection authority in your country.

To exercise any of these rights, please contact us. We will respond within a reasonable time, in line with applicable law.

11. Cookies and analytics

Our website uses cookies and similar tracking technologies to improve your experience and to understand how visitors use the site. A full explanation of which cookies we use and how to manage them is set out in our Cookie Policy.

12. Third party links

Our website may contain links to third party websites. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policy of any website you visit through a link from our site.

13. Children

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. The current version is the one published on our website and dated at the top of this page. If we make a material change, we will notify clients with an active engagement and, where required, take any other step required by law.