Privacy Policy
We take the protection of your personal data seriously. This policy explains how we handle your personal data. It is written to cover both EU/UK visitors (GDPR) and US/California visitors (CCPA/CPRA).
Data controller
The controller responsible for data processing on this website is:
Topblog LLC
1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, USA
Represented by: Yannick Schroth
Email: info@paraguay-taxfree.com
Phone: +49 157 81288288
Data collected on this website
Hosting
This website is hosted by Vercel Inc. (USA). On each visit, server log files are recorded automatically (IP address, time, page requested, browser type). This data is processed to keep the site running and secure, based on our legitimate interest. More information: https://vercel.com/legal/privacy-policy
Contact form & requests
When you contact us through our forms, your data (name, email, phone number, country of residence and, for the US, your state, and your message) is stored so we can handle your request. Recipients are only the providers and partners named in this policy. We do not sell your data and do not pass it to third parties for advertising. Marketing emails are sent only if you tick the separate, optional box for them.
Newsletter / lead-magnet downloads
When you download our guide, your email address is stored so we can send you the guide. We send further emails only if you tick the separate, optional box for them; every such email contains an unsubscribe link, and you can withdraw your consent at any time.
Visa quiz
When you use our visa quiz, we store your email address together with your answers (such as goal, current situation, income range and readiness to invest) to build a personalized recommendation and, if you wish, to contact you. Processing is based on your consent, which you give before submitting. You can withdraw it at any time with effect for the future.
Your rights
You have the right to access, correct, delete, restrict and port your data, and to object to processing. EU/UK residents have these rights under the GDPR. California residents have rights under the CCPA/CPRA, including the right to know, delete and opt out of the sale or sharing of personal information (we do not sell your personal information). Contact us at info@paraguay-taxfree.com to exercise your rights.
Cookies
This website uses cookies for several purposes: (1) Necessary cookies are required to operate the site and cannot be disabled. (2) Functional cookies store your preferences such as language and dark mode. (3) Analytics cookies (Google Analytics) help us understand how visitors use the site and are set only with your explicit consent. You can change or withdraw your cookie settings at any time via the 'Cookie settings' link in the footer.
Third-party services
We use the following third-party services to operate this website:
Google Analytics
We use Google Analytics 4, a web-analytics service. Google Analytics uses cookies to analyze how you use the site. The information generated is generally transmitted to and stored on Google servers in the USA. According to Google, Google Analytics 4 does not log or store IP addresses. Processing is based on your consent. You can prevent collection by adjusting your cookie settings. More information: https://policies.google.com/privacy
Supabase (database & form processing)
We use Supabase (Supabase, Inc.) to store form submissions; the database for this website is hosted in Frankfurt, Germany (AWS eu-central-1). When you submit a contact form, a download request, the visa quiz or a withdrawal notice, your data is transmitted there. Supabase acts as a processor on our behalf. More information: https://supabase.com/privacy
If you contact us via WhatsApp, your data is processed by Meta Platforms, Inc. (USA), based on your consent. Please see WhatsApp's privacy policy for details.
Resend (email delivery)
For notifications about new requests (for example from the contact form or visa quiz) we use the email service Resend (Resend, Inc., USA). The data submitted, in particular your email address and the content of your request, is processed to deliver the notification. Resend acts as a processor on our behalf. More information: https://resend.com/legal/privacy-policy
Payment processing (bank transfer, Wise, USDC)
Payment for our services is not handled on the website but after a quote, by bank transfer (possibly via Wise, Wise Payments Ltd.) or in USDC. For USDC we use a wallet address with a digital-asset provider based in the Comoros; the transfer is necessary to perform the contract (Article 49(1)(b) GDPR / UK GDPR). Transactions on the blockchain are public. No payment or account data is collected on the website itself.
Basis for processing
We process your personal data on the following bases:
- Consent: for newsletter sign-ups, marketing communication and optional cookies.
- Contract: to handle your requests and deliver our services.
- Legitimate interest: for website security, fraud prevention and improving our services.
Data retention
We keep your personal data only as long as necessary:
- Contact-form requests: 6 months after your request is closed
- Newsletter sign-ups: until you unsubscribe
- Client data: for the duration of the business relationship plus statutory retention periods; documents received by WhatsApp or email are deleted as described below
International data transfers
Several of our providers are based outside the EU and the UK, in particular in the USA (Vercel, Resend, Anthropic, Google, WhatsApp/Meta) and the United Kingdom (Neo). Transfers rely on the Standard Contractual Clauses or adequacy decisions these providers offer, or on your explicit consent. Transfers to Paraguay are necessary to perform the contract concluded at your request (for EU and UK residents, Article 49(1)(b) GDPR / UK GDPR).
Client data for our services
When you engage us, we process the data your residency procedure needs: identity and passport data, civil-status documents, police clearance certificates, contact and payment details. We share them only as far as the contract requires: with the Paraguayan authorities (Migraciones, Policía Nacional, Identificaciones, DNIT), with our partners in Paraguay (our partner lawyer, sworn translators, gestores, notaries) and, only if you ask us for the introduction, with our US LLC formation partner. Police clearance certificates and other criminal-record data are processed solely because Paraguayan law requires them for the residency application, kept only as long as the procedure and statutory retention require, and used for no other purpose. The transfer of these documents to Paraguay is necessary to perform the contract concluded at your request (for EU and UK residents, Article 49(1)(b) GDPR / UK GDPR).
Who receives your data, and where it is stored
Website hosting: Vercel Inc. (USA). Contact-form entries, guide downloads, quiz answers and our client records: Supabase, with the database hosted in Frankfurt, Germany (AWS eu-central-1). Email notifications about new enquiries: Resend (USA). Our mailbox info@paraguay-taxfree.com: Neo (Neo Space, United Kingdom, hosted on AWS). Messages and documents you send us on WhatsApp: WhatsApp (Meta). Drafting of follow-up messages in our client records: Anthropic (USA); drafts are reviewed by us before anything is sent. Website statistics, only with your consent: Google Analytics (Google). Payments: Wise for bank transfers, and a digital-asset provider based in the Comoros for our USDC wallet. For the residency procedure: the Paraguayan authorities and our partners in Paraguay (partner lawyer, sworn translators, gestores, notaries, accountant). Commission-paying partners (for example our US LLC partner, notarity, Reloship or Fluido Spanish) receive your contact details only if you ask us for an introduction or click through to them yourself; some of them pay us a commission, which we disclose on our editorial-standards page.
Documents you send us by WhatsApp or email
Clients usually send passports, certificates and police clearance certificates by WhatsApp or email. We use them only for your procedure and forward them only to the authorities and partners named above. We delete our copies at the latest six months after your cédula has been issued or our contract has ended, unless you ask us to delete them earlier or the law requires us to keep them longer. Invoices are kept for as long as tax law requires.
Children
Our website and forms are not intended for persons under 18. Where a family applies together, the data of minor children is provided by their parents and processed only for the residency procedure.
Information for users in specific countries
You can exercise your rights (access, correction, deletion, withdrawal of consent, and where the law provides it, portability or nomination) by writing to info@paraguay-taxfree.com. We answer within 30 days. You may also complain to the authority of your country:
- India: Digital Personal Data Protection Act, 2023. Grievances go first to info@paraguay-taxfree.com; you may then approach the Data Protection Board of India.
- Canada: Personal Information Protection and Electronic Documents Act (PIPEDA). You may complain to the Office of the Privacy Commissioner of Canada.
- Brazil: Lei Geral de Proteção de Dados (LGPD). You have the rights under Article 18 LGPD and may complain to the Autoridade Nacional de Proteção de Dados (ANPD).
- Nigeria: Nigeria Data Protection Act, 2023. You may complain to the Nigeria Data Protection Commission (NDPC).
- Kenya: Data Protection Act, 2019. You may complain to the Office of the Data Protection Commissioner (ODPC).
- Ghana: Data Protection Act, 2012. You may complain to the Data Protection Commission.
- South Africa: Protection of Personal Information Act (POPIA). You may complain to the Information Regulator.
- United Arab Emirates: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. You may contact the UAE Data Office.
- Argentina: Ley 25.326 on the protection of personal data. Providing your data in our forms is voluntary, but without it we cannot answer your request. You have the rights of access, rectification and deletion, and you may contact the Agencia de Acceso a la Información Pública (AAIP).
- Uganda: Data Protection and Privacy Act, 2019. The data we collect, why, who receives it and how long we keep it are described above. Providing it is voluntary, but without it we cannot answer your request. You may complain to the Personal Data Protection Office (PDPO).
- Paraguay: we apply the personal-data protection law (Ley 7593/2025) from its entry into force; until then the general rules on personal data and consumer protection apply.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA member state of your habitual residence, place of work or the place of the alleged infringement, or, in the United Kingdom, with the Information Commissioner’s Office (ICO).
Last updated: October 9, 2026.