Personal Data Privacy Policy

1. Data controller

Andrés Felipe Quiñones Espinel, an individual doing business as «Gurú Gráfico». Bogotá D.C., Colombia. Email: xndres18@gmail.com. WhatsApp: +57 320 478 1661. Website: gurugrafico.com.

2. What data we process

• Contact data: name, phone number, email, company and job title, and anything you write in forms or messages.
• Business data: public information about businesses (name, address, phone number, website, reviews and photos published on Google Maps or on their own website), which we use to prepare prototypes and proposals.
• Browsing data: pages viewed, clicks and time spent on our proposals and demos, device and approximate location, collected through cookies and analytics tools.
• Client data: information needed to quote, contract, bill and provide support, as well as Studio user accounts.

We do not request sensitive data or data from children and adolescents.

3. How we use it

• To answer requests, schedule calls, and send quotes and proposals.
• To prepare website prototypes for businesses using public information, and to contact them to offer those prototypes.
• To deliver our services: building and publishing websites, providing Studio access, support, and invoicing or payment requests.
• To measure interest in our proposals and improve our service.
• To showcase case studies and testimonials, only with written authorization.
• To comply with legal, accounting and tax obligations.

4. Your rights

You have the right to access, update and correct your data; to request proof of your authorization; to know how we use your data; to revoke your authorization or ask us to delete your data when there is no legal duty to keep it; to access it free of charge; and to file complaints with Colombia's Superintendence of Industry and Commerce (SIC) after first completing the process with us.

5. How to exercise them

Write to xndres18@gmail.com or message us on WhatsApp at +57 320 478 1661, including your name, ID number, your request and a way to contact you. Inquiries: answered within 10 business days (extendable by 5). Claims (correction, deletion, revocation): answered within 15 business days (extendable by 8). If you no longer want to receive sales messages, just reply «No me interesa» (not interested) or «Baja» (unsubscribe) and we will stop contacting you.

6. Who we share it with

We do not sell data. We rely on providers that process data on our behalf (data processors), some of them with servers outside Colombia, mainly in the United States: Netlify (hosting), Supabase (database), Render (servers), Google (Workspace, Maps, Analytics), Meta (WhatsApp Business) and Telegram (internal alerts). We require each of them to maintain security and confidentiality safeguards.

7. Our clients' websites

On the forms of the websites we build, the business that owns the site is the data controller and Gurú Gráfico acts as a data processor: we only use the data to deliver the messages to the business and to keep the service running. Each site links to the business's own privacy policy.

8. Security and retention

We use HTTPS, per-user and role-based access control, encrypted passwords and backups. We keep data for as long as the business relationship or the legitimate interest in contact lasts, and accounting records for up to 10 years, as required by law. Data from prospects who do not respond is deleted or anonymized after 12 months.

9. Changes

We will publish any material change at gurugrafico.com/privacidad before it takes effect. This policy does not need to be registered in Colombia's National Database Registry, because that obligation applies to companies and entities with assets above 100,000 UVT (Decree 090 of 2018).