Privacy Policy

1. Introduction

Cafeto ("we", "us", "our") takes the protection of personal information seriously. This policy explains what data we collect through this website and through our advisory services, how we use it, and what rights you have over it.

This policy applies to anyone who contacts us, visits our website at cafeto.cyou, or engages us for consulting services. It is written to comply with Colombia's Law 1581 of 2012 on personal data protection (Ley de Protección de Datos Personales).

2. Data we collect

We collect information only when you provide it to us directly, or when it is generated automatically through normal website use.

Information you provide:

• Name and contact details (email address, phone number)
• Business information shared during sessions or in messages
• Any other information you choose to include in messages or forms

Information collected automatically:

• Cookies and similar tracking technologies (see our Cookie Policy)
• Basic usage data (pages visited, referrer, device type) via analytics
• IP address for security and analytics purposes

3. How we use your data

We use personal data for the following purposes, based on the legal grounds indicated:

• Service delivery — To arrange and conduct advisory sessions, send summaries, and manage follow-ups. Basis: contract performance.
• Communication — To respond to enquiries and provide the support you requested. Basis: legitimate interest or consent.
• Website improvement — To understand how visitors use the site and make it more useful. Basis: legitimate interest.
• Legal compliance — To meet obligations under Colombian law and applicable regulations. Basis: legal obligation.

4. Data retention

We keep personal data only as long as necessary:

• Contact enquiries not resulting in an engagement: up to 12 months
• Active client records: duration of the engagement plus 3 years
• Analytics data: up to 14 months (aggregated after 6 months)
• Financial records: 5 years as required by Colombian tax law

5. Data sharing

We do not sell personal data. We share data only where necessary to operate our services:

• Analytics providers (e.g. Google Analytics): anonymised website usage data
• Email and scheduling tools used to conduct our business
• Legal authorities: only when required by Colombian law

All third-party tools we use are evaluated for adequate data protection standards.

6. Data security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, disclosure, or loss. These include encrypted communications (HTTPS), restricted internal access, and regular review of our data handling practices. No system is entirely infallible — if we become aware of a breach affecting your data, we will notify you promptly.

7. Cookies

We use cookies to help the site function and to understand how it is used. For a full explanation of the cookies we use and how to manage them, please see our Cookie Policy.

8. Your rights

Under Colombia's Law 1581 of 2012, you have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Correction — Ask us to correct inaccurate or incomplete data.
• Deletion — Request deletion of your data, subject to legal retention requirements.
• Objection — Object to processing based on legitimate interest.
• Withdrawal of consent — Where we rely on consent, withdraw it at any time.
• Complaint — Lodge a complaint with the Superintendencia de Industria y Comercio (SIC), Colombia's data protection authority, at www.sic.gov.co.

To exercise any of these rights, contact us at [email protected]. We will respond within 10 business days.

9. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

10. Children

Our services are intended for adults (18 years and older). We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently done so, please contact us immediately.

11. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date above. If changes are significant, we will notify active clients by email. Continued use of our website or services after changes constitutes acceptance of the revised policy.

12. Contact

Data controller: Cafeto

Address: Calle 44 #79-32, Medellín, Colombia

Privacy enquiries: [email protected]