Privacy Policy

1. Introduction

Sumapaz ("we," "us," "our") is an advisory firm registered in Manizales, Caldas, Colombia. We take the protection of personal data seriously and handle all information shared with us with care and discretion.

This policy explains what personal data we collect, how we use it, how we protect it, and what rights you have. It applies to information gathered through our website (https://sumapazx.blog) and through the provision of our advisory services.

2. Data We Collect

We collect only what is necessary for the purpose it is collected for. This includes:

• Contact information: name, email address, phone number — gathered when you submit an enquiry via our website contact form or contact us directly.
• Business information: details about your operation shared during advisory engagements, including production data, cost structures, and market relationships.
• Usage data: general analytics information about how visitors interact with our website, collected through cookies (see Section 5).

Legal basis: We process personal contact information on the basis of your consent (when you submit a form) and legitimate interest (managing existing client relationships). Business information shared during engagements is processed on the basis of contract.

Retention: Contact enquiries are retained for 24 months. Client engagement records are retained for 5 years, in line with Colombian commercial record-keeping obligations, then deleted.

3. How We Use Your Data

• Responding to enquiries and scheduling initial conversations
• Delivering advisory services as agreed
• Sending relevant service updates if you have consented to this
• Improving our website through aggregated analytics data
• Meeting our legal obligations under Colombian law

We do not sell personal data to third parties. We do not share individual client business information with any external party without explicit consent, except where required by law.

4. Data Protection

We apply appropriate technical and organisational measures to protect the data we hold:

• Encrypted storage for digital records
• Access limited to team members with a need to know
• Website served over HTTPS
• Data breach notification to affected parties within 72 hours of discovery

5. Cookies

Our website uses a small number of cookies. Essential cookies are required for the site to function. Analytics cookies, if you accept them, help us understand how the site is used. You can manage your cookie preferences at any time through our Cookie Policy page.

6. Your Rights

Under Colombia's Ley 1581 de 2012 (Statutory Law on Personal Data Protection) and its regulatory decrees, you have the right to:

• Know what personal data we hold about you
• Request correction of inaccurate data
• Request deletion of data we are not required to retain
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Superintendencia de Industria y Comercio (SIC)

To exercise any of these rights, write to us at [email protected]. We will respond within 15 business days.

7. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy policies independently.

8. Children

Our services are directed at adults (18+) operating in an agricultural or commercial capacity. We do not knowingly collect data from anyone under 18.

9. Policy Changes

We may update this policy periodically. Material changes will be noted on this page with a revised date. Continued use of the site after changes constitutes acceptance.

10. Contact

For data-related enquiries:

Sumapaz
Carrera 23 #62-40, Manizales, Caldas, Colombia
Email: [email protected]
Phone: +57 606 384 7159