Privacy policy and personal data

Version 2026-10-02 — updated on 2026-10-02

This policy explains how we process your personal data when you visit proterrenas.com and when you send us a request using the “Describe my need” or “Request a quote” form. If anything seems unclear, write to us using our contact form.

Key points

Only one item of data is required: your WhatsApp number. The service, specifics, urgency, details and photos are optional.
Your request is received by our team, not by a provider. Nothing is passed on automatically to professionals.
We only pass your request and contact details on to a professional with your agreement: either you tick the box provided for this purpose (unticked by default), or you give us your agreement on WhatsApp. We only pass on what is useful for the job.
Your photos stay private: only our team sees them; we remove their location (GPS) and metadata as soon as we receive them. They are never published.
We only send you future offers if you tick the box provided for this purpose, unticked by default.
We do not sell or transfer your data. We only use technically necessary cookies, with no advertising and no third-party audience measurement tools.
You can exercise your rights at any time using the rights request form.

1. Data controller

The data controller is THERD SRL (RNC 133-63250-2, Dominican tax identification number). Address: Las Terrenas, Samaná, República Dominicana. Contact: the site's contact form.

2. The data we process

Data you give us

With the request form:

Required data: your WhatsApp number, with the international dialing code (for example +1 or +33). We only check its format: we do not verify that your WhatsApp account exists.
Optional data: the service and specifics chosen, the urgency, the type of need (one-off job, maintenance contract, project), your first and last name, your email address, your preferred language, the preferred time to be called back, the neighborhood or area (never the exact address at this stage), the type of property, whether or not the owner is present, an indicative budget, a description and up to 5 photos.

Please do not include sensitive information: no exact address, alarm or gate code, bank details or ID documents. We do not need them.

Photos

The photos you attach (leak, breakdown, garden, pool…) are checked (actual file type, size limited to 10 MB), re-encoded to remove metadata, including GPS location, and then given a random name. They are stored in a private area of the server, accessible only to our authenticated team. They are never published.

Data recorded automatically with your request

the site language and the page from which you sent the request;
the provider whose profile you were viewing, if applicable;
the marketing attribution parameters (utm_*) of the link through which you arrived, and the domain of the site you came from if your browser sends it;
the date and time of the request;
the version of this policy that was shown to you;
your choices for the two optional boxes (passing your request on to a professional, future offers), with the exact text shown, its version and the date.

Other forms

Contact: subject, message, name if you give it, WhatsApp number and/or email address so we can reply, language, page of origin, date, choice regarding future offers.
Provider report: provider concerned, reason, message and, if you wish, a way to reply to you.
Professional sign-up: see section 11.

Technical security data

When you send a form, your IP address is used temporarily to limit abusive submissions: we only keep a fingerprint of it (salted hash), deleted after about 24 hours. Spam protection works without any third-party captcha.

Audience measurement

We count page views with our own counters, aggregated by day, without cookies or personal data.

3. Why we use your data

We distinguish three uses:

1. Answering your request. We contact you on WhatsApp (or by email if you gave us your address) to clarify your need, suggest a suitable professional and follow up on your request (a follow-up message if you were unable to reply, another suggestion if needed). You can ask us to stop at any time.

2. Passing your request on to a professional chosen to handle it, only with your agreement. If you tick the box provided for this purpose (unticked by default) or give us your agreement on WhatsApp, we pass on to the selected professional what is useful for the job: your first or last name if you gave it, your WhatsApp number, the description of your need, the area and, if useful, your photos. Before you agree, we may describe your need to a professional without disclosing your identity or contact details, to check their availability. The professional who receives your request is responsible for how they use it; we ask them to use it only to respond to you.

3. Sending you future offers, only if you accept. If you tick the box provided for this purpose (unticked by default), we may later offer you, by WhatsApp or email, for example seasonal maintenance or new services. You can withdraw your consent at any time by replying STOP on WhatsApp. We do not automatically sign you up for any campaign.

We also use certain data for the proper operation of the service: protection against abuse, proof of what was shown to you and of your choices, and knowing which pages and channels generate requests.

Our team uses internal tools to follow up on requests, including an automated assistant that consults requests through secure access. These tools make no decisions about you: decisions are made by our team.

4. Applicable law and legal bases

THERD SRL is established in the Dominican Republic. The processing of your data is governed by Dominican law, in particular Law No. 172-13 on the protection of personal data. If you are in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) may also apply.

Under Dominican law (Law No. 172-13)

We process the data in your request on the basis of the consent you give by sending it, after being informed by this policy. Passing your request on to a professional and future offers each rely on a separate consent, which you can withdraw at any time.

Where the GDPR applies

Answering and following up on your request: pre-contractual measures taken at your request and legitimate interest in handling the request you send us (Article 6(1)(b) and 6(1)(f)).
Passing your request on to a professional: your consent (Article 6(1)(a)).
Future offers: your consent (Article 6(1)(a)).
Security, abuse prevention, proof, channel measurement: our legitimate interest (Article 6(1)(f)).

5. Who receives your data

Our team: only authorized staff, through a protected administration area (section 8).
A professional, only with your agreement and within the limits described in section 3.
Our technical service providers, who process data on our behalf: site hosting (Hostinger International Ltd.), backups and, when we use it, our email service.
WhatsApp (Meta), which we use to reply to you. Messages exchanged on WhatsApp are also subject to WhatsApp's terms.
The authorities, only when required by law.

We do not sell your data or transfer it to any third party. Professionals may pay for visibility on the site (always labeled “Sponsored”): this gives them no access to your data.

6. International transfers

Your data is stored on the servers of our hosting provider (Hostinger International Ltd.), whose location depends on that provider. WhatsApp messages pass through Meta's infrastructure, which may process data in various countries. The professionals to whom we pass a request with your agreement are established in the Dominican Republic. Your data may therefore be processed outside your country of residence; in all cases, we apply the measures described here.

7. Retention periods

Requests: kept for as long as they are being handled. Inactive requests are automatically anonymized after 12 months: contact details, texts and photos are then erased.
Contact messages: deleted after 12 months.
Photos from an uncompleted form: deleted after about 24 hours.
Proof of your choices: kept for as long as necessary to be able to demonstrate them.
IP address fingerprint: about 24 hours.
Backups: renewed on a rotating basis (daily backups kept for about 14 days, weekly backups for about 8 weeks).

8. Security

The administration area is restricted to authorized staff and protected by password and two-factor authentication.
Sensitive views and actions there are logged, including access by the automated assistant.
Photos are stored outside the public part of the server and are served only to authenticated staff.
Abusive submissions are automatically limited and forms are protected by a security cookie.

9. Cookies

We only use technically necessary cookies: a security cookie (CSRF) that protects forms, and session cookies reserved for staff who log in to the administration area. No advertising cookies and no third-party audience measurement.

10. Your rights

Under Law No. 172-13, you have the rights of access, rectification, cancellation (deletion) and objection (ARCO rights). You can also withdraw your consent at any time, in particular for passing your request on to a professional and for future offers; this withdrawal does not affect what was done before.

If the GDPR applies, you may also request restriction of processing, receive your data in a structured format (portability) and lodge a complaint with a data protection authority (for example the CNIL in France). In the Dominican Republic, you may also bring the habeas data action provided for by the Constitution.

To exercise your rights: rights request form or contact form. We verify your identity, for example by asking you to confirm from the WhatsApp number used. Our goal is to reply within 30 days at most. Exercising your rights is free of charge.

11. Professionals and providers

Directory profiles are compiled from public information or information provided by the professionals themselves, with its date. We publish the company name or trade name, services, areas, languages, known terms and prices, and photos authorized for publication. We never publish their contact details (phone, WhatsApp, email, website, social media, precise address), nor the full name of a self-employed tradesperson without their agreement: this information stays in our private area.

When a professional signs up, we use the information they send us to verify their business, create their profile after approval and contact them. Any professional can request the correction or removal of their profile using the contact form and exercise their rights like anyone else.

12. Minors

Our service is not intended for people under 18. If you believe a minor has sent us data, write to us so that we can delete it.

13. Changes

Each version of this policy is identified by its number and date at the top of this page, and we record the version shown with each request. Any significant change will be clearly indicated on the site.

14. Contact

Data controller: THERD SRL (RNC 133-63250-2)
Address: Las Terrenas, Samaná, República Dominicana
Write to us: contact form
Exercise your rights: rights request form