Skip to content
Privacy and cookies

Privacy notice

How we handle personal data on the public marketing site and which essential cookies we use.

Last updated: August 1, 2026

Who operates this site

Pullmío is a competency governance and learning platform (multi-organization LMS). This notice describes data processing on the public marketing site at pullmio.com and the technical cookies the site uses.

For privacy questions about this notice: [email protected].

Data that a customer organization loads into its workspace (employees, courses, policies, certificates, and so on) is processed under the contract or agreement with that organization. This notice does not replace that agreement or the customer’s internal policies.

What data we collect

On the marketing portal we may process: data you submit in the contact form (name, email, organization, message, and technical submission metadata); account data if you sign in to the panel; and minimal technical request information (for example IP address, user agent, and security logs from the infrastructure provider).

We also use Google Analytics 4 on the marketing site to measure visits, page views, and aggregated portal usage. Google may process technical identifiers (e.g. cookies) under its own policy. We do not load Meta Pixel or third-party advertising networks on this site.

How we use it

To respond to commercial or evaluation requests; to operate, secure, and improve the site and service (including portal traffic measurement with Google Analytics); to meet applicable legal obligations; and, where a contractual relationship exists, to provide the service to the customer organization as agreed.

We do not sell personal data or use it for third-party behavioral advertising.

Cookies and similar technologies

We use cookies and similar storage needed for the site to work, plus Google Analytics 4 measurement cookies on the marketing portal. We do not use third-party advertising cookies.

Cookie Purpose Duration
pulmio-session Application session (security and visit continuity). Session / per server configuration
XSRF-TOKEN Protection against forged requests (CSRF). Session
pullmio_locale Remember the preferred portal language (ES/EN). Up to 1 year
__cf_bm Cloudflare cookie used to mitigate bots and abuse. Short-lived (minutes)
_ga / _ga_* Google Analytics 4: distinguish visitors and measure aggregated portal usage. Up to 2 years (per Google)

Providers and processors

The site and application are hosted on managed infrastructure (Laravel Cloud / associated cloud providers) and may go through Cloudflare for delivery, security, and abuse mitigation. Commercial contact email is handled with Google Workspace. Marketing-site measurement uses Google Analytics (Google LLC).

These providers act as processors or supporting infrastructure and should only process data to deliver their respective services.

Retention

We keep contact messages for as long as needed to handle the request and a reasonable period for commercial follow-up or claim defense. Session cookies expire according to browser and server settings. Customer LMS data is retained under each organization’s contract and policies.

Your rights and contact

You may request access to, correction of, or deletion of personal data we control directly (for example, a message sent through the contact form) by writing to [email protected]. If your data lives in a customer organization’s workspace, that organization is usually the primary controller; we will help route the request when appropriate.

If you visit from the European Economic Area or another jurisdiction that requires prior consent for analytics, we may adjust consent mode or a cookie banner; contact us if you need to exercise rights related to measurement.

Changes to this notice

We may update this page to reflect product, infrastructure, or legal changes. The “Last updated” date shows the current version. Continued use of the site after a material change means you have had the chance to review the updated notice.

Questions about privacy?

Write to us and we will help with requests about this notice or route organization-scoped data questions when needed.