Privacy Policy

1.1. Who we are and what this policy covers

Baja Nearshore LLC (“Baja Nearshore,” “we,” “us” or “our”) is a direct-hire recruiting firm. We help companies operating in the United States hire professional talent from Latin America: the company hires the person directly, and we find, evaluate and calibrate the candidates.

This policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It covers:

• the website at bajanearshore.com and every page on it;
• the consultation — the form on our booking page, the calls you schedule with us, and the e-mails and messages we exchange before and after;
• our work with clients — the companies that engage us to run a search, and the people at those companies we work with;
• candidates — the professionals we evaluate and present to client companies, as described in Candidates.

It does not cover the websites and services of other companies that we link to or that we use to run our business, such as Calendly or Google. Each has its own privacy notice, and we link to them where they apply.

2.2. The information we collect

What you give us

The booking form. When you book a call on our booking page, you pick a time and we ask for your name, your work e-mail, your company’s website, your LinkedIn profile and how you heard about us; you may also give us the job description, anything else that will help us prepare, and the e-mail addresses of colleagues you want on the call. We accept work e-mail addresses only. If you choose to send the details by e-mail instead of booking, the form asks for the roles you are hiring for (from our list, or in your own words), when you need to hire, whether you have hired in Latin America before, your name, your work e-mail and your company, with optional fields for your company’s website, your job title and any additional context you want to give us.

Scheduling a call. When you press “Schedule the call,” our own server sends your booking to Calendly, the scheduling service we use: the time you chose and your time zone, your name, your work e-mail, your answers to the questions above and your guests’ e-mail addresses. Calendly creates the appointment in our calendar and e-mails you the invitation, and we read its confirmation. Nothing from Calendly loads in your browser, and nothing is sent to Calendly until you press that button. If a booking cannot be completed, we offer a link to the same event on Calendly’s own page; if you follow it, your answers travel in the address so that you do not have to type them again, and from there Calendly’s own page, its cookies and its privacy notice apply.

Working together. When we prepare for a call, run a search or work with you as a client, we collect what you share with us about your company, your team, the role, your budget and timeline, your preferences and your feedback on candidates — in calls, e-mails, documents and video meetings.

Applying for a job. Our job openings page shows the roles we are recruiting for from Recruit CRM, the recruiting software we use, in a frame on the page. When you open a role or apply, you are on Recruit CRM’s own pages, not ours: what you fill in on the application goes to Recruit CRM, which processes it on our behalf, and reaches us there. We then handle it as described in Candidates. Recruit CRM’s privacy policy applies to its pages.

What is collected automatically

Hosting logs. Our site is served by Cloudflare. Like any web host, Cloudflare records basic technical data about each request — your IP address, your browser and device type, the pages you request and the page that referred you — to deliver the site and protect it from abuse. We do not add tracking of our own to these logs.

Analytics and advertising. On the published site, and only if your browser does not send a Global Privacy Control signal, Google’s tag records your visit: it measures visits and campaigns through Google Analytics, shows us which of our ads lead to inquiries through Google Ads, and lets us show our ads to people who have visited the site. It sets cookies in your browser and receives the address of the page you are on, your IP address, your browser type and, if you arrived from one of our ads, the identifier of that click. Section Analytics, advertising and Google has the details, and our Cookie Policy lists the cookies.

Counting visits without cookies. We also count visits with Cloudflare Web Analytics, which measures page views and performance without cookies, without local storage and without identifying individual visitors.

Checking that a booking comes from a person. When you reach the details step of the booking form, the page loads Turnstile, a service of our host, Cloudflare, that tells a person apart from an automated program without asking you to solve a puzzle in most cases. Turnstile receives your IP address and the characteristics of your browser, runs its check in a frame served by Cloudflare, and gives our server a token that says the check passed; our server will not send a booking to Calendly without it. Turnstile does not read what you type into the form, and Cloudflare states that it processes only the data strictly necessary for this security function. If you prefer not to use it, the same page offers the consultation form by e-mail, which does not load it.

What we receive from others

• From Calendly: the details of the calls you book with us — the time, your name, your e-mail and your answers to the scheduling questions.
• From Google: reports about visits and our advertising in aggregate — how many people came to the site, from which campaigns, and how many who saw or clicked an ad went on to send an inquiry — not the identity of any visitor.
• From colleagues and public sources: if a colleague refers you to us, or if we research your company before a call, we may receive your name, your role and your business contact details from that referral or from public professional profiles.

We do not ask for, and ask you not to send us, sensitive personal information such as health, financial account, government identification or biometric data, or information about children.

3.3. How we use it

We use personal information for the purposes below, and for no other purpose without telling you first.

• To answer your inquiry and prepare for our conversation: reading what you told us about the role, researching your company and market, and preparing guidance on profiles, compensation and timing.
• To run the searches you engage us for: defining and calibrating the role with you, sourcing and evaluating candidates, presenting them, supporting interviews and offers.
• To communicate with you about your inquiry, your search and our services, when you have asked us to or when we have an existing relationship. We do not add you to marketing lists you did not ask to join.
• To operate, protect and improve the site: delivering it, keeping it secure, understanding which pages are read and how the site performs, and fixing what breaks.
• To measure visits and advertising, and to show our ads: measuring visits and campaigns with Google Analytics, learning which Google ads lead to consultation requests, so that we spend our advertising budget on what works, and showing our ads to people who have visited the site.
• To comply with the law, to enforce our agreements and our Terms of Use, and to protect our rights, our clients, our candidates and the public.
• For our own records: keeping the business records a company keeps — contracts, invoices, correspondence — for the time the law and good practice require.

We do not use personal information to make automated decisions that have legal or similarly significant effects on you. A recruiter, not a system, evaluates every candidate we present and every inquiry we receive.

4.4. Who we share it with

We do not sell personal information for money, and we have not done so in the past twelve months. We do use Google’s advertising cookies — Google Analytics and Google Ads remarketing — to measure visits and campaigns and to show our ads. You can turn them off: Google’s ad settings for personalized ads, Google’s opt-out add-on for Google Analytics, or Global Privacy Control for both on this site. We share personal information only as described here.

Service providers

A small number of companies process personal information on our behalf, only to provide their service to us, under agreements that restrict what they may do with it:

• Cloudflare hosts the site and protects it from abuse, and its Turnstile service checks that a booking comes from a person. It receives the technical data described above for every request and, on the booking page, the signals Turnstile reads from your browser. Cloudflare’s privacy policy.
• Web3Forms receives the consultation form when you send it by e-mail and delivers it to our inbox. It receives the fields you filled in, your IP address and your browser type, and keeps a copy of the submission for up to three years under its own retention policy — shorter if we delete it earlier. It also passes the sender’s IP address and e-mail address to its spam-filtering services. Web3Forms’ privacy policy.
• Calendly runs our scheduling. When you book a call, our server sends it your booking — the time, your name, your work e-mail, your answers to the booking questions and your guests’ e-mail addresses — and Calendly creates the appointment and sends the invitation. Nothing of Calendly’s runs in your browser. Calendly processes this data on our behalf and under its own privacy notice for its service. Calendly’s privacy notice.
• Recruit CRM is the recruiting software we run our searches in. Our job openings page shows its public job board in a frame, and the applications sent through it go to Recruit CRM, which processes them on our behalf. When that page loads the board, Recruit CRM receives your IP address, your browser type and our site’s address, and it may set its own cookies in the frame. Recruit CRM’s privacy policy.
• Google measures visits and campaigns through Google Analytics, and measures our advertising and shows our ads to people who have visited the site through Google Ads, as described in the next section. Google also uses this data for its own purposes, under its own privacy policy. Google’s privacy policy.
• Fontshare, a font service of the Indian Type Foundry, serves one of the typefaces on this site. It receives the request for the font files — your IP address, your browser type and the site’s origin — and states that it does not track, profile or store personal data. Fontshare’s FAQ.
• The e-mail, document, calendar and video-meeting tools we run our business on, which hold our correspondence with you and the documents we exchange.

Others

• Client companies and candidates. When you engage us to run a search, we share the role and what you tell us about it with the candidates we approach; when you are a candidate, we share your information as described in Candidates.
• Professional advisers: our lawyers, accountants and insurers, when they need it to advise us.
• Legal requirements: when the law requires it, in response to a lawful request from a public authority, or to protect the rights, property or safety of Baja Nearshore, our clients, our candidates or others.
• A business transfer: if we are involved in a merger, acquisition, financing or sale of all or part of our business, personal information may be transferred as part of it. We will require the recipient to honor this policy or tell you before it applies a different one.

5.5. Analytics, advertising and Google

We advertise on Google and we measure the site with Google Analytics. The published site loads Google’s tag (gtag.js) after each page has finished loading — unless your browser sends a Global Privacy Control signal, in which case the tag is never loaded and nothing is sent to Google.

What is measured. Visits and campaigns, through Google Analytics: the pages viewed, how visitors reached the site, which campaign brought them and how they move through it, including when a form is started — the form’s address and the name of its first field, never what you type. Conversions, through Google Ads: whether a visit that started from one of our ads ends in a call booked or in a consultation request sent through the e-mail form. The measurement counts the booking as a conversion when Calendly confirms it was created, and the request when our form provider confirms it was received — not when a button is pressed — and it sends Google only the fact that a conversion happened, with a nominal value and currency. None of the information you typed into the form is sent to Google.

Remarketing. Through Google Ads and Google Analytics, we can show our ads on Google and its partner sites to people who have visited this site. Google builds these audiences with its cookies; we never see who is in them, and nothing you typed into a form goes into them.

What Google receives. When the tag loads, Google receives the address of the page you are visiting, your IP address, your browser and device type, the page that referred you and, if you arrived from a Google ad, the identifier of that click. Google stores cookies in your browser to tell one visitor from another in Google Analytics, to connect a click on an ad with a later visit, and to build remarketing audiences; our Cookie Policy names each one and how long it lasts. Google uses this information under its own privacy policy, which describes how it treats data from sites that use its services: How Google uses information from sites or apps that use our services and Google Analytics cookie usage on websites.

How to opt out. Turn on Global Privacy Control in your browser or with a browser extension (globalprivacycontrol.org) and we will not load the tag. You can also opt out of Google Analytics on every site with Google’s opt-out add-on, manage how Google personalizes ads for you at Google’s ad settings, block third-party cookies in your browser, or use the industry opt-out tools of the Digital Advertising Alliance and the Network Advertising Initiative. Opting out does not affect anything else on the site.

We do not build profiles of visitors of our own, and we do not share the contents of any inquiry with an advertising platform.

6.6. Cookies, Global Privacy Control and Do Not Track

Our own code sets no cookies. The cookies that can be set when you use the site belong to Google — Google Analytics and Google Ads, on the published site, unless you opt out, and our host, Cloudflare, sets one only if a security check runs. On our job openings page, the job board in the frame is Recruit CRM’s, and Recruit CRM may set its own cookies there. Nothing from Calendly loads in your browser, so Calendly sets no cookie on this site; Turnstile, the check on our booking page, sets none either. Our Cookie Policy lists every one, what it does and how long it lasts, and explains how to manage cookies in your browser.

The site stores one thing of its own in your browser: if you press “Pause motion” in the footer, that choice is kept in your browser’s session storage until you close the tab. It is never sent anywhere.

Global Privacy Control. We treat a Global Privacy Control signal from your browser as a request to opt out of the sale or sharing of your personal information and of targeted advertising for that browser: we do not load Google’s tag, for Analytics or for Ads, when we receive it. The signal applies to the browser and device that send it; if you use another browser or device, set it there too.

Do Not Track. Browsers can also send a Do Not Track signal. There is no common standard for how a website should respond to it, and this site does not respond to it. Global Privacy Control is the signal we honor.

7.7. The categories of data, in one table

This table summarizes the personal information described above by category, with where it comes from, why we use it, who receives it and how long we keep it.

We do not collect sensitive personal information, biometric data, precise geolocation or the contents of your e-mail or messaging accounts, and we do not draw inferences about you to build a profile.

8.8. Your rights, and how to use them

Whatever state or country you live in, you can ask us to:

• access the personal information we hold about you, and receive a copy of it in a portable format;
• correct information that is inaccurate or incomplete;
• delete your personal information, subject to the exceptions the law allows (for example, records we must keep for legal or accounting reasons, or to complete a service you asked for);
• opt out of targeted advertising and of any sale or sharing of your personal information — for this site, that means we will not use Google Analytics or Google Ads for you, which you can also do at any time by turning on Global Privacy Control;
• appeal a decision we make about your request, if you disagree with it.

How to ask

Individuals may contact [email protected] to request access to, correction of, or deletion of their personal information, subject to applicable legal requirements and exceptions.

Tell us the request you are making and the e-mail address you used with us. You can also write by mail to Baja Nearshore LLC, 1905 East Palomar Street, Unit 6, Chula Vista, CA 91913, United States. There is no form to fill in and no account to log into.

How we verify your identity

Before we act on a request to access, correct or delete, we confirm that it comes from you — normally by replying to the e-mail address we hold for you and asking you to confirm the request from it, and where that is not possible, by asking for information that matches what we hold. We use what you send us to verify a request for nothing else. A request to opt out of advertising measurement needs no verification.

Authorized agents

You may authorize someone to make a request for you. We will ask the agent for your signed permission, and we may ask you to confirm your identity and the authorization directly with us before we act.

How long we take

We confirm that we received your request within ten business days and respond within 45 days. If we need more time because a request is complex or because we have received many, we may take up to 45 more days and will tell you why. We do not charge for a request unless it is manifestly unfounded or excessive, in which case we will explain the charge or decline the request and tell you why.

Appeals

If we decline all or part of a request, our response will explain why and how to appeal. Write to [email protected] with “Appeal” in the subject line. We will respond to an appeal within the time your state’s law allows — 45 days in most states, 60 in some — and, if we deny it, tell you how to contact your state’s attorney general or privacy regulator.

No discrimination

We will not treat you differently for exercising any of these rights: we will not deny you a service, charge you a different price or provide a different level of quality because you made a request.

9.9. Residents of states with privacy laws

Several U.S. states have comprehensive privacy laws — among them California, Colorado, Connecticut, Delaware, Iowa, Montana, New Hampshire, New Jersey, Oregon, Texas, Utah and Virginia — and more are enacting them. Most apply only to businesses above certain thresholds of revenue or of residents whose data they process. To the extent one of these laws applies to us, this section supplements the rest of the policy for residents of that state; where it does not apply, we still honor the requests in Your rights as a matter of practice.

California

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our business, California residents have the right to know what personal information we collect, use, disclose and share; to delete it; to correct it; to opt out of its sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

• What we collected in the past twelve months: the categories in the table above, from the sources, for the purposes and with the recipients it lists.
• Sale and sharing: we do not sell personal information for money. Our use of Google’s tag — Google Analytics, and Google Ads’ measurement and remarketing — may be considered “sharing” for cross-context behavioral advertising, or a “sale,” under California law. You can opt out by turning on Global Privacy Control, which we honor as an opt-out request, or by writing to [email protected]. We do not knowingly sell or share the personal information of anyone under 16.
• Sensitive personal information: we do not collect it, and we do not use or disclose it for purposes that would give you the right to limit its use.
• Financial incentives: we do not offer financial incentives in exchange for personal information.
• “Shine the Light”: apart from Google, which receives data through its tag and uses it under its own privacy policy, we do not disclose personal information to third parties for their own direct marketing purposes. How to limit what Google receives is in Who we share it with.
• How to submit a request, verification, agents, timing and appeals: as described in Your rights.

Other states

Residents of the other states named above have, to the extent their law applies to us, the rights to access, correct, delete and obtain a copy of their personal data, to opt out of targeted advertising, of the sale of personal data and of profiling in furtherance of decisions that produce legal or similarly significant effects, and to appeal a refusal. We do not sell personal data for money and do not profile visitors in furtherance of such decisions. Google’s remarketing is targeted advertising, and you can opt out of it. Global Privacy Control is treated as an opt-out of targeted advertising in the states that recognize it — Colorado, Connecticut, Texas and others — and everywhere else as well. Requests and appeals follow Your rights.

Nevada: we do not sell covered information as Nevada law defines a sale. Residents outside the United States: this site is directed to companies operating in the United States; if you use it from elsewhere, your information will be processed as described in Where your data is processed.

10.10. How long we keep it

We keep personal information for as long as we need it for the purpose we collected it for, within the periods below, and then delete it or anonymize it.

• Prospects and business contacts: Personal information may be retained for up to 3 years following the last interaction, unless a longer retention period is necessary for an ongoing business relationship, legal obligation, or legitimate business purpose.
• Clients: Client information may be retained during the business relationship and for up to 7 years after the relationship ends for legal, contractual, accounting, tax, compliance, and recordkeeping purposes.
• Candidates: Candidate information may be retained for up to 3 years following the candidate's last interaction or recruiting activity with Baja Nearshore, unless a longer period is required by law or necessary for an active recruiting process.

• Hosting logs — retained by Cloudflare under its own policy, which does not publish a fixed period for these logs; we do not keep a copy.
• Form submissions held by Web3Forms — up to three years under its retention policy, or until we delete them.
• Advertising cookies — 90 days on our domain, set by Google; Google’s own cookies for the periods in our Cookie Policy.
• Analytics cookies — _ga and _ga_*, up to two years on our domain, set by Google; the data Google Analytics collects, for the period set in our account.

When you ask us to delete your information, we delete it from our own systems and ask our providers to do the same, subject to the exceptions described in Your rights.

11.11. Security

The site is served only over encrypted connections (HTTPS), and the form is sent to our provider the same way. Our providers encrypt the data they hold for us at rest. Access to personal information within Baja Nearshore is limited to the people who need it to do their work, and the tools we run our business on require individual sign-in.

No method of transmission or storage is completely secure. If a security incident affects your personal information in a way the law requires us to report, we will notify you and the relevant authorities as the law requires.

12.12. Where your data is processed

Personal information may be processed in the United States, Mexico, and other countries where Baja Nearshore's technology providers and service providers operate.

Our providers process data in the United States and in other countries where they operate: Cloudflare primarily in the United States and the European Economic Area; Web3Forms on infrastructure in the United States and the European Union, operated from India; Calendly in the United States; Recruit CRM on Amazon Web Services in the United States, with regions in the European Union, by its own list of sub-processors; Google worldwide. If you are outside the United States, your information will be transferred to and processed in these places, whose privacy laws may differ from your own.

13.13. Children

This site is for businesses and the people who hire for them. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, write to [email protected] and we will delete it.

14.14. Links to other sites

The site links to other websites and services — LinkedIn, Calendly, Recruit CRM’s job board, the privacy pages of our providers, and sources cited in our articles. We are not responsible for their content or their privacy practices; each has its own policy, which applies when you visit it.

15.15. Candidates

Baja Nearshore may collect and process candidate information including:

• Name and contact information
• Location
• Resume or CV
• LinkedIn profile and other professional profiles
• Employment and educational history
• Skills and professional experience
• Compensation expectations
• Availability
• Interview information and recruiter notes
• Assessments and screening results
• Video introductions or recordings when applicable
• Other information voluntarily provided during the recruiting process

Candidate information may be used to evaluate qualifications, communicate regarding current or future opportunities, manage recruiting processes, and present candidates to clients considering them for employment or contract opportunities.

Candidate information may be shared with Baja Nearshore clients and service providers when reasonably necessary for recruiting, candidate evaluation, placement, or related business operations.

16.16. Changes to this policy

When we change this policy, we update the date at the top of this page. If a change materially affects how we use personal information we already hold about you, we will tell you before it applies — by e-mail, if we have your address, or with a notice on the site.

17.17. How to contact us

For questions about this policy or about your personal information, write to [email protected]. For anything else, [email protected]. By mail: Baja Nearshore LLC, 1905 East Palomar Street, Unit 6, Chula Vista, CA 91913, United States.