Privacy Policy
Effective date: 12 October 2026
1. Who we are
This policy explains how ENGRAW Export and Import Co S.A. (“Engraw”, “we”, “us”) handles personal data collected through origenbyengraw.com (the “Site”). Engraw is the data controller. Our address is Av. Bolivia 1330, 11500 Montevideo, Uruguay, and you can reach us at info [at] origenbyengraw.com.
The Site presents our wool products to businesses. It has no online store and no user accounts.
2. What we collect
Information you give us. When you send an inquiry through the contact form, we collect:
- your email address
- the supply stage you are interested in (fiber, yarn, fabric or finished goods)
- the project details you choose to write
Information collected automatically with your inquiry. So we can reply in the right language and time zone, and understand how people find us, we also record:
- your approximate country and time zone, which our hosting provider derives from your IP address (we do not store the IP address itself)
- your browser’s preferred language
- the website that referred you to the Site and any campaign tags in the link (for example, a LinkedIn post)
- whether your email domain is a business or personal email provider, and whether it can receive email. To check this, we look up the domain’s public mail records; only the domain is looked up, not your full address.
Analytics, only with your consent. If you accept analytics cookies, Google Analytics collects information about your visit: pages viewed, time on page, device and browser type, and approximate location. If you decline, analytics cookies are not set.
Technical logs. Our hosting provider keeps short-lived logs of requests and errors to keep the Site secure and working. These logs record technical request details, such as the page requested, time and browser, and are deleted automatically after 3 days. They do not include what you write in the contact form.
3. How we use it and our legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Reply to your inquiry and discuss a possible supply agreement | Form data, country, time zone, language | Steps you request before entering a contract (6(1)(b)); our legitimate interest in responding to business inquiries (6(1)(f)) |
| Understand which channels bring inquiries | Referring site and campaign tags | Legitimate interest in measuring our marketing (6(1)(f)) |
| Block spam and invalid email addresses | Email domain check, form spam filter | Legitimate interest in keeping the Site secure (6(1)(f)) |
| Measure how the Site is used | Google Analytics data | Your consent (6(1)(a)), which you can withdraw at any time |
| Keep the Site secure and working | Technical logs | Legitimate interest in security (6(1)(f)) |
| Comply with the law | Any of the above, as required | Legal obligation (6(1)(c)) |
We do not sell your personal data, use it for advertising, or make automated decisions about you that have legal or similarly significant effects.
4. Who we share it with
We share personal data only with service providers that run the Site for us, under contracts that limit their use of it to providing their service:
| Provider | What they do | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, security and DNS | United States and global network |
| Resend (Plus Five Five, Inc.) | Delivers contact form submissions to our team by email | United States |
| Google LLC | Email (Google Workspace), and Google Analytics only if you consent | United States |
Inquiries are forwarded to Engraw’s team, our commercial representative and our website developer, who handle them on our behalf.
We may also disclose personal data if the law requires it, to protect our rights or the safety of others, or to a buyer or successor if Engraw is involved in a merger or sale of its business. In that case we will tell you before your data becomes subject to a different policy.
5. International transfers
Engraw is based in Uruguay. The European Commission has recognised Uruguay as providing an adequate level of data protection, so data can flow from the EU to us without additional safeguards.
Some of our service providers process data in the United States. Where they do, we rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions), under which these providers are certified, and on the European Commission’s Standard Contractual Clauses where a provider’s agreement includes them.
6. How long we keep it
- Inquiries: for as long as we are in contact with you, then for up to 24 months after our last contact, unless a business relationship or legal obligation requires us to keep them longer.
- Google Analytics data: 14 months, after which Google deletes it automatically.
- Technical logs: 3 days.
- Your cookie choice: until you change it or clear your browser storage.
7. Cookies and similar storage
The Site asks for your consent before setting analytics cookies. You can change your choice at any time with “Cookie settings” in the Site footer.
| Name | Type | Purpose | Duration | Needs consent |
|---|---|---|---|---|
| consent | Browser storage (not a cookie) | Remembers whether you accepted or declined analytics | Until you change it or clear your browser storage | No (strictly necessary) |
| _ga | Cookie (Google Analytics) | Distinguishes visitors | 2 years | Yes |
| _ga_WVYEYP3Q0N | Cookie (Google Analytics) | Keeps the state of your visit | 2 years | Yes |
We do not use advertising cookies. You can also block or delete cookies in your browser settings.
8. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and receive a copy
- correct data that is inaccurate or incomplete
- have your data deleted
- restrict or object to our use of your data, including use based on our legitimate interests
- receive your data in a portable format
- withdraw your consent to analytics at any time, without affecting earlier use
To use any of these rights, email info [at] origenbyengraw.com. We will reply within one month and may need to confirm your identity first.
You also have the right to complain to a data protection authority. In Uruguay this is the Unidad Reguladora y de Control de Datos Personales (URCDP). In the European Union, you can contact the authority in the country where you live or work.
9. Children
The Site is for businesses and is not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.
10. Security
The Site is served only over encrypted connections (HTTPS), and access to inquiries is limited to the people who need to respond to them. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.
11. Changes to this policy
We may update this policy when the Site or the law changes. We will post the new version on this page with a new effective date, and highlight significant changes on the Site.
12. Contact us
For questions about this policy or your data:
- Email: info [at] origenbyengraw.com
- Phone: +598 2604 2499
- Post: ENGRAW Export and Import Co S.A., Av. Bolivia 1330, 11500 Montevideo, Uruguay