Privacy policy

This privacy policy explains what personal information PanamaGulf (“PanamaGulf,” “we,” “us”) collects when you visit https://panamagulf.com, how we use it, who handles it, and what choices you have. We are a software development company in Panama City, Florida, USA, and this website is intended for business customers and prospective customers.

If you only browse the site, we collect very little. If you contact us, we collect what you send us so we can reply. This policy covers this website only. Work we do for clients is governed by separate written agreements.

Information we collect

Information you give us

When you use our contact form, you provide:

• your name
• your work email address
• your company name (optional)
• the type of project you are interested in
• a budget range (optional)
• your message

You decide what to put in your message. Please don’t include sensitive personal information, passwords or confidential credentials.

Information collected automatically

Our site is a static website hosted on AWS Amplify, a service of Amazon Web Services (AWS). Like most hosts, AWS keeps standard server and content delivery network (CDN) access logs. These logs include your IP address, your browser’s user agent, the URL you requested and a timestamp.

If analytics is enabled for your visit, Google Analytics 4 also collects aggregate usage information, described in the “Analytics and cookies” section below.

Information from the bot check

Our contact form is protected by Cloudflare Turnstile, a bot check. Turnstile processes device and browser signals to tell people from automated software. Cloudflare handles that information under its own privacy policy.

How we use information

We use personal information only for these purposes:

• To reply to you. We use contact form details to respond to your inquiry and to discuss a potential project with you.
• To run and secure the site. Server logs and the bot check help us keep the site available and protect the form from abuse.
• To understand site usage. When analytics is enabled, we use aggregate statistics to see which pages are useful and how to improve them.

We do not use your information for advertising, and we do not build advertising profiles.

Who handles your information

We rely on a small number of service providers to operate the site. Each handles information only as needed to provide its service.

• AWS Amplify (Amazon Web Services) hosts the website and keeps the access logs described above.
• AWS Lambda receives your contact form submission, and Amazon SES delivers it to our inbox.
• Cloudflare Turnstile performs the bot check on the contact form.
• Google Calendar provides our appointment booking page. The “Book a call” links on this site take you to a Google Calendar appointment page operated by Google. Anything you enter there is collected by Google under Google’s privacy policy, and we receive the booking details you submit.
• Google Analytics 4 provides aggregate usage statistics, as described below.

We do not sell your information to anyone. We may also disclose information if the law requires it, to enforce our rights, or to protect the safety and security of our users, our site or others.

Analytics and cookies

We use Google Analytics 4 (GA4) only to produce aggregate usage statistics, such as how many people visit a page and how they arrive. We have turned off its advertising features, Google signals and ad personalization.

When analytics loads

We load GA4 only when you haven’t opted out. Specifically:

• If your browser sends a Global Privacy Control (GPC) signal, we do not load GA4. We honor GPC as a valid opt-out.
• If you have opted out on our privacy choices page, we do not load GA4.
• Otherwise, GA4 loads and sets first-party cookies.

Cookies GA4 sets

When enabled, GA4 sets first-party cookies named _ga and _ga_<id>. They distinguish visitors and sessions and can last for up to two years. We use no other cookies for advertising or tracking.

Your analytics choices

You can opt out at any time on our privacy choices page. We store your preference in your browser’s local storage, so it applies on that browser and device until you clear your site data or change the setting. You can also block or delete cookies in your browser settings, and you can send a GPC signal using a browser or extension that supports it.

What we don’t do

• We don’t use advertising cookies.
• We don’t use retargeting pixels.
• We don’t use third-party ad networks.
• We don’t sell personal information.
• We don’t “share” personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and other state privacy laws.

Do Not Track and Global Privacy Control

Browsers’ Do Not Track (DNT) settings are not a uniform standard, and there is no common agreement on how websites should respond to them. We do not respond to DNT signals differently from visits without one. We do, however, treat a Global Privacy Control (GPC) signal as an opt-out of analytics and honor it, as described above.

When analytics is enabled, third parties such as Google may collect information about your online activities over time and across different websites. When analytics is disabled by GPC or your choice, GA4 does not load on our site.

How long we keep information

• Contact form inquiries are kept for up to 24 months from your last message. If an inquiry becomes a client relationship, we keep the related information longer, as needed for that relationship and our business and legal obligations. We then delete it.
• Server and CDN logs are kept by AWS according to its standard settings and retention practices.
• Analytics data is kept in GA4 according to the retention settings we configure there, and it is aggregate in nature.

Children’s privacy

This site is not directed to children under 13, and we do not knowingly collect personal information from them, in line with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has sent us personal information, email us and we will delete it.

Security

We protect information with HTTPS across the site, least-privilege access controls and encryption at rest on AWS. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. Please avoid sending sensitive information through the contact form.

Where information is stored

We process and store information in the United States. If you visit from outside the United States, you understand that your information will be transferred to and handled in the United States, where privacy laws may differ from those where you live.

US state privacy rights

Some US states give residents rights over their personal information. These include California, Colorado, Connecticut, Virginia, Texas and Oregon, among others. Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy
• Correct inaccurate personal information
• Delete personal information we hold about you
• Portability, meaning receive your information in a portable, usable format
• Opt out of the sale of personal information, targeted advertising and certain profiling

We don’t sell personal information and don’t use it for targeted advertising. We state these rights generally and do not claim that PanamaGulf is subject to any particular state law or its thresholds. We apply these rights as described here, to the extent they are available to you.

How to make a request

Email us at hello@panamagulf.com and tell us what you would like to do. We need enough information to verify your identity, usually by matching details to the email address and inquiry we already have. We may ask a few questions to do that. We will respond within 45 days. If we need more time, we will tell you why and may extend by a further period where the law allows.

Authorized agents

You may ask an authorized agent to make a request for you. We may ask for written proof that you gave the agent permission, and we may ask you to verify your identity with us directly.

Appeals

If we decline your request, you may appeal by replying to our decision by email with “Appeal” in the subject line. We will review the appeal and respond in writing within the time your state’s law requires, explaining our decision. If your state allows it, you may also contact your state attorney general.

Non-discrimination

We will not deny you services, charge you a different price or give you a lower quality of service because you exercise your privacy rights.

Florida residents

The Florida Digital Bill of Rights applies to very large controllers, and we may not meet that definition. We still honor access, correction, deletion and opt-out requests from Florida residents voluntarily.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the updated date shown at the top. If a change is material, we will make a reasonable effort to highlight it on the site. Please check this page periodically. Your continued use of the site after an update means you accept the revised policy.

Contact us

For privacy questions, requests or concerns, email us at hello@panamagulf.com. We aim to reply within one business day. Related pages: our terms of use, our accessibility statement and our privacy choices.