1. Introduction

​

At Building Space, we respect the privacy of our visitors, prospective clients, clients, suppliers, and other individuals who communicate with us.

​

This Privacy Policy explains how we collect, use, store, share, and protect personal data obtained through our website, forms, email, WhatsApp, and other channels related to our services.

By providing your personal data through these channels, you acknowledge that you have read this Privacy Policy.

 

​

2. Data Controller

​

The controller responsible for processing personal data is:

​

Trade name: Building Space
Email: mirlaperoza@buildingspacepty.com
WhatsApp: +507 6496-4153
Address: Urb. Industrial La Esperanza, Ricardo Miró Street, Panama City, Province of Panama

​

In this policy, the terms “Building Space,” “we,” “us,” “our,” and “the company” refer to the data controller identified above.

​

​

3. Scope of This Policy

​

This Privacy Policy applies to personal data collected when a person:

• Visits or browses our website.

• Completes a contact form or quotation request.

• Requests information about our services.

• Downloads a catalog or other material.

• Communicates with us by email or WhatsApp.

• Requests a meeting, call, or technical visit.

• Submits information related to a project.

• Engages or considers engaging our services.

• Interacts with links, social networks, or external platforms linked from the site.

​

This policy does not directly govern processing carried out by external websites, platforms, or services that have their own privacy policies.

​

​

4. Personal Data We May Collect

​

4.1 Identification and Contact Information

We may collect the following data:

• First and last name.

• Company or organization name.

• Job title or professional role.

• Email address.

• Telephone number.

• WhatsApp number.

• City, country, or general location.

• Preferred method of contact.

 

4.2 Project-Related Information

When you request a quotation, assessment, or consultation, we may collect:

• Type of project or space.

• Project location.

• Current project status or stage.

• Needs and objectives.

• Requested scope.

• Estimated budget.

• Tentative start date.

• Schedule or required completion date.

• Measurements and characteristics of the space.

• Information about design, furniture, manufacturing, construction, signage, branding, or implementation.

• Plans, photographs, renderings, references, documents, and files voluntarily provided.

• Additional information included in messages, meetings, or communications.

 

4.3 Technical and Browsing Information

When you visit the site, Wix and the technologies used to operate the platform may automatically collect certain technical information, such as:

• IP address.

• Device type.

• Browser type and version.

• Operating system.

• Browser language.

• Date and time of access.

• Pages visited.

• Approximate browsing time.

• Source or page from which you arrived at the site.

• Interactions with forms, buttons, and links.

• Information about technical errors.

• Cookie identifiers and similar technologies.

​

This information may be used to operate, protect, maintain, and improve the site.

​

4.4 Information from Third Parties

We may receive information when a person interacts with us through external platforms such as WhatsApp, Instagram, email services, maps, calendar tools, or video calls.

​

Information collected directly by those platforms is processed in accordance with their own policies and terms.

 

 

5. How We Collect Data

​

We may collect information:

• Directly from the data subject when they complete a form or communicate with us.

• During meetings, calls, technical visits, or project-related exchanges.

• Automatically through the Wix platform, cookies, and technical technologies.

• Through service providers used to receive or manage communications.

• Through authorized representatives of companies, clients, or project owners.

​

When a person provides another person’s personal data, they represent that they have sufficient authorization to share it with Building Space.

​

​

6. Purposes of Processing

​

We may use personal data for the following purposes:

 

6.1 Responding to Inquiries

• Respond to questions and requests.

• Provide information about our services.

• Communicate by email, telephone, or WhatsApp.

• Schedule calls, meetings, or technical visits.

​

6.2 Project Evaluation

• Understand the client’s needs.

• Evaluate the nature, scope, and feasibility of the project.

• Analyze plans, photographs, documents, and references.

• Prepare proposals, quotations, and recommendations.

• Estimate resources, materials, timelines, and requirements.

• Coordinate inspections, measurements, or site visits.

​

6.3 Provision of Services

• Formalize and manage contractual relationships.

• Design, plan, manufacture, produce, build, or implement projects.

• Coordinate deliveries, installations, suppliers, and contractors.

• Manage payments, invoicing, and commercial documentation.

• Follow up on projects and requests.

• Handle warranties, adjustments, incidents, or claims.

​

6.4 Administration and Security

• Maintain internal records.

• Protect the security and operation of the site.

• Prevent fraud, abuse, and unauthorized activities.

• Diagnose technical errors.

• Protect our rights, property, and systems.

• Comply with legal, tax, accounting, and administrative obligations.

 

6.5 Improvement of the Site and Services

• Understand in general terms how the site is used.

• Evaluate the performance of pages and forms.

• Improve content, navigation, and the user experience.

• Develop new services and processes.

• Measure the overall effectiveness of our communications.

 

6.6 Promotional Communications

We may send news, catalogs, promotions, recent projects, or other commercial communications when:

• The data subject has provided consent.

• There is a commercial relationship that legally permits the communication.

• The communication is permitted by applicable law.

​

The data subject may request at any time that we stop sending promotional communications.

​

Opting out of promotional communications will not prevent us from sending messages necessary to respond to inquiries, manage projects, perform contracts, or address outstanding obligations.

 

​

7. Legal Bases for Processing

​

Depending on the nature of the relationship, we may process personal data when:

• The data subject has given consent.

• Processing is necessary to respond to a request or take steps before entering into a contract.

• Processing is necessary to perform a contract.

• We must comply with a legal obligation.

• Processing is authorized by an applicable legal provision.

• It is necessary to establish, exercise, or defend legal claims.

​

When processing is based on consent, the data subject may withdraw it at a later time. Withdrawal will not affect the lawfulness of processing carried out before the request was received.

​

​​

8. Consent Through Forms

​

When the site requests personal data through a form, the user must be informed of the purpose for which the data will be used.

Submission of the form must be accompanied by a checkbox through which the user confirms that they have read this Privacy Policy and authorizes the processing necessary to address their request.

​

Consent to receive promotions or commercial communications must be requested through a separate, optional checkbox.

We will not make the handling of a quotation request conditional on the user agreeing to receive advertising.

​

​​

9. Cookies and Similar Technologies

​

9.1 What Cookies Are

Cookies are small files or identifiers that may be stored in a visitor’s browser or device when they use a website.

​

This site is developed and hosted using Wix. Wix may use cookies and similar technologies to operate the platform, maintain security, enable technical functions, and process interactions with the site.

​

9.2 Necessary Cookies

The site may use necessary cookies to:

• Maintain technical operation.

• Protect site security.

• Detect fraudulent or abusive activities.

• Enable forms to function.

• Maintain sessions.

• Manage the platform’s infrastructure and stability.

• Remember certain technical preferences.

​

Disabling some necessary cookies may prevent certain functions from operating correctly.

​​

9.3 Analytics, Functional, or Third-Party Cookies

Depending on the functions, applications, integrations, or code installed on the site, technologies related to the following may also be used:

• General traffic measurement.

• Analysis of site usage.

• Display or playback of external content.

• Maps or location services.

• Social networks.

• Communications through WhatsApp.

• Calendar or video call tools.

• Functions embedded by external providers.

​

External services may set their own cookies or collect technical information in accordance with their policies.

​

9.4 Absence of a Consent Panel

The site currently does not have an integrated banner or panel that allows visitors to accept, reject, or configure cookies directly on the page.

​

Visitors can manage, block, or delete cookies through their browser settings. The available options depend on the browser and device used.

​

Blocking certain cookies may affect the operation, security, or availability of some features.

​

If we implement additional analytics, advertising, tracking, or personalization tools in the future, we may update this policy and enable additional mechanisms to inform users and manage consent when necessary.

​

​​

10. Service Providers and Recipients

​

We may allow access to or disclose limited information to providers that help us operate the site and deliver our services, including:

• Wix, as the site hosting and management platform.

• Email service providers.

• Messaging platforms, such as WhatsApp.

• Storage and backup services.

• Calendar and video call tools.

• Technical and support providers.

• Designers, architects, engineers, manufacturers, installers, contractors, or consultants involved in a project.

• Administrative, accounting, tax, or legal service providers.

• Public authorities, when there is a legal obligation or valid request.

 

We will share only the information reasonably necessary for the relevant purpose.

​

Our providers may act as data processors or independent data controllers, depending on the service and the applicable legal relationship.

​

​

11. Sale of Personal Data

​

Building Space does not sell or rent personal data to third parties.

​

Disclosing information to providers necessary to operate the site or carry out a project is not considered a sale of personal data.

​

​

12. International Transfers

​

Some technology providers may store, back up, or process information in countries other than Panama.

The use of Wix, WhatsApp, email services, cloud storage, or other international platforms may involve international transfers or access.

​

Where applicable, we will endeavor to ensure that these transfers are made through providers that apply reasonable confidentiality, security, and data-protection measures.

​

​

13. Data Retention

​

We will retain personal data for as long as reasonably necessary to fulfill the purposes described in this policy.

Retention periods may depend on:

• The duration of the inquiry.

• The validity period of a proposal or quotation.

• The duration of the contractual relationship.

• The execution and completion of a project.

• Applicable warranties and liabilities.

• Tax, accounting, and legal obligations.

• The need to address claims.

• The defense of legal rights.

• Our providers’ technical backup cycles.

 

When information is no longer necessary, we may delete it, anonymize it, or restrict its use, unless a legal obligation requires us to retain it.

​

Information contained in backups may remain for an additional period until it is deleted in accordance with ordinary backup cycles.

​

​

14. Information Security

​

We adopt reasonable administrative, technical, and organizational measures to protect personal data against:

• Unauthorized access.

• Loss.

• Alteration.

• Destruction.

• Improper disclosure.

• Fraudulent use.

• Accidental or unlawful processing.

​

Access to information is limited to individuals, employees, contractors, and providers who reasonably need to use it to perform an authorized function.

​

Nevertheless, no internet-based storage or transmission system can guarantee absolute security. For this reason, we cannot assure that a security incident will never occur.

​

​​

15. Rights of the Data Subject

​

The data subject may exercise the rights recognized under applicable law, including:

​

15.1 Right of Access

Request information about the personal data we hold, its source, the purposes of processing, and the recipients.

​

15.2 Right to Rectification

Request the correction or updating of incorrect, incomplete, outdated, or inaccurate information.

​

15.3 Right to Erasure

Request the deletion of personal data when it is no longer necessary, when consent has been withdrawn, or when the processing does not comply with applicable law.

​

Erasure may not apply when we must retain the information to comply with a legal or contractual obligation or to address a claim.

​​

15.4 Right to Object

Object to certain processing activities and request that promotional communications cease.

​

15.5 Right to Data Portability

Where applicable, request a copy of personal data in a structured, commonly used, and technically available format.

​

15.6 Withdrawal of Consent

Withdraw previously granted consent without affecting processing lawfully carried out before the withdrawal.

​

15.7 Right Not to Be Subject to Certain Automated Decisions

Request human intervention when a decision producing legal effects or significant harm is based exclusively on automated processing of data, except where the processing is authorized by law, necessary for a contractual relationship, or expressly consented to.

​

​

16. How to Exercise Your Rights

​

To exercise a right related to your personal data, you may send a request to:

Email: mirlaperoza@buildingspacepty.com
Recommended subject line: Personal Data Protection Request

​

The request must include:

• Full name.

• Sufficient information to identify the requester.

• A description of the right the requester wishes to exercise.

• A clear explanation of the request.

• Related data or communications, where applicable.

• The method by which the requester wishes to receive the response.

​

We may request additional information reasonably necessary to verify the requester’s identity and prevent fraudulent access, modification, or deletion.

​

We will respond to requests within the time limits established by applicable law.

​

​

17. Complaints to the Authority

​

When the data subject believes that their rights have been affected, they may submit an inquiry or complaint to Panama’s National Authority for Transparency and Access to Information through its Directorate for Personal Data Protection.

Before filing a complaint, the data subject may contact Building Space so that we can attempt to address the request directly.

​

​​

18. Sensitive Data

​

We do not intentionally request sensitive data through the site’s general forms.

​

Users should avoid sending medical, biometric, highly confidential financial, religious, political, or other sensitive data that is not necessary to evaluate or carry out their project.

​

When a service legitimately requires sensitive information, it will be requested through an appropriate channel and with the corresponding authorizations.

​

​

19. Data Relating to Minors

​

The site and our commercial services are not specifically directed to minors.

​

We do not intentionally collect personal data from minors without authorization from their parents, guardians, or legal representatives.

​

If we identify that information from a minor has been received without valid authorization, we will take reasonable steps to delete it, unless a legal obligation requires us to retain it.

​

​

20. Information Submitted by Companies

​

When a person communicates with us on behalf of a company, client, owner, supplier, or organization, we may process their professional data to:

• Respond to the communication.

• Evaluate a business opportunity.

• Manage the relationship between the organizations.

• Coordinate projects and services.

• Maintain business contact records.

​

The person providing business information must ensure that they are authorized to share documents, contact details, plans, trademarks, photographs, and other materials belonging to third parties.

​

​​

21. External Links and Platforms

​

The site may contain links to WhatsApp, Instagram, maps, video calls, calendars, downloadable files, or other external sites and platforms.

​

Building Space does not directly control the privacy, security, or cookie practices of these third parties.

​

We recommend reviewing the privacy policies of each external service before providing information or using its functions.

​

​

22. Changes to This Privacy Policy

​

We may update this Privacy Policy to reflect changes in:

• Applicable law.

• Our services.

• The forms and data collected.

• The tools, applications, or integrations used.

• Our internal processes.

• Security and retention practices.

​

The current version will be the version published on this page. The date of the latest update will appear at the beginning of the document.

​

When a change is significant, we may communicate it through the site or by other appropriate means.

​

​

23. Contact

​

For questions, requests, or concerns related to this Privacy Policy or the processing of personal data, you may contact:

​

Building Space PTY
Email: mirlaperoza@buildingspacepty.com
WhatsApp: +507 6496-4153
Address: Urb. Industrial La Esperanza, Ricardo Miró Street, Panama City, Province of Panama