Privacy Policy
Last updated: 26 June 2026
At Alyp Studio (3-102-830512 Sociedad de Responsabilidad Limitada, corporate ID 3-102-830512, with registered address in Escazú, San Rafael de Escazú, north-west of the Embassy of South Korea, Costa Rica) we respect your privacy and process your personal data in accordance with Act No. 8968, on the Protection of the Individual with regard to the Processing of their Personal Data, and its Regulation No. 37554-JP.
This Policy explains what data we collect, for what purpose, who we share it with and how you can exercise your rights. By signing up for our free procurement alert service (the "Service") and ticking the consent box, you declare that you have read and accepted this Policy.
1. Data controller
- Controller: Alyp Studio — 3-102-830512 Sociedad de Responsabilidad Limitada
- Corporate ID: 3-102-830512
- Address: Escazú, San Rafael de Escazú, north-west of the Embassy of South Korea, Costa Rica
- Contact email for data matters:
info@alyp.studio - Phone: +506 6035 9969
2. Personal data we collect
For the procurement alert Service we collect only the data you supply in the form and the minimum technical data needed to operate it:
| Data | Nature | Purpose |
|---|---|---|
| Company name | Required | Identify the subscriber |
| Contact name | Optional | Personalise communications |
| Email address | Required | Send the alerts and the sign-up confirmation |
| Mobile number | Required | Contact and verification |
| Categories of interest (UNSPSC codes) | Required | Filter the procurement processes that apply to you |
| Consent date and time, accepted version, IP address and browser (user agent) | Automatic | Auditable record of consent (Act 8968) |
We do not collect sensitive data. We do not ask for passwords. We do not install software on your device.
3. Purpose of the processing
We process your data exclusively in order to:
- Email you the procurement processes published on the SICOP system that match the categories you selected.
- Send you a sign-up confirmation email (double opt-in) and operational messages about the Service (for example, confirmation that you have unsubscribed).
- Answer your questions and requests relating to the Service.
We do not use your data for purposes other than those described here without obtaining your prior consent.
4. Legal basis: informed consent
Processing is carried out on the basis of your express, free, informed and unambiguous consent, given electronically by ticking the corresponding box in the form, in accordance with article 5 of Act 8968. You may withdraw your consent at any time (see point 8, Unsubscribing).
5. Recipients and processors
We do not sell, rent or transfer your personal data to third parties for commercial purposes.
To provide the Service we rely on technology providers acting as data processors, solely on our instructions:
| Provider | Function | Location |
|---|---|---|
| Supabase | Database hosting | United States — Virginia |
| Resend | Delivery of the alert emails | United States |
| Vercel | Website hosting | United States |
International data transfers
Some of these providers store or process data outside Costa Rica. By accepting this Policy you authorise that international transfer, which is carried out under adequate security measures and with providers that offer reasonable levels of protection.
6. Data retention
We keep your data for as long as your subscription is active. If you unsubscribe or request erasure, we delete your data from the subscriber database within a reasonable period, unless we are required to keep a minimum record by law or in order to evidence compliance with the consent requirements.
7. Your rights (Access, Rectification, Erasure, Objection)
Under Act 8968 you have the right to:
- Access: find out what data we hold about you.
- Rectification: correct inaccurate or out-of-date data.
- Erasure: ask us to delete your data.
- Objection / withdrawal of consent: object to the processing or withdraw your consent.
Exercising these rights is free of charge. We will respond to your request within five (5) business days of receiving it, as required by law. To exercise them, write to info@alyp.studio stating your request and a means of verifying your identity.
If you believe your rights have not been respected, you may contact the Agency for the Protection of Data of Inhabitants (PRODHAB).
8. Unsubscribing from the service
You can unsubscribe at any time, with immediate effect:
- From the "unsubscribe" link at the foot of any alert email, or
- By writing to
info@alyp.studio.
Once you unsubscribe we stop sending you alerts and remove your data from the mailing list.
9. Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, alteration, loss or improper disclosure (role-based access control, encryption in transit, and database access restricted to server-side processes). No system is completely infallible, but we work to keep your data protected.
10. Cookies and browsing data
The site www.alyp.studio uses a minimum of technical cookies necessary for it to work. We do not use third-party analytics or tracking tools. We do not use the procurement form data for advertising and we do not cross-reference it with third-party cookies.
11. Source of the procurement information
The alerts are built from public information from the official SICOP system (sicop.go.cr). Alyp Studio is not a public entity and the Service is purely informational: you must always verify and participate directly in SICOP.
12. Minors
The Service is aimed at companies and at adults. We do not knowingly collect data from minors.
13. Changes to this Policy
We may update this Policy. We will publish the version in force on this page together with its "last updated" date. If the changes are substantial, we will notify you by email.
14. Governing law
This Policy is governed by the laws of the Republic of Costa Rica, in particular Act No. 8968 and its Regulation No. 37554-JP.
Sources and reference framework: Act No. 8968 and Regulation No. 37554-JP (Costa Rica); PRODHAB guidance.