This is an English translation provided for convenience. In case of any discrepancy, the Spanish version, governed by Colombian law, prevails.
1. Data controller
Sindy Pallares Sandoval, as the controller of the personal data collected through the website www.sindypallares.com, establishes this Personal Data Processing Policy in accordance with the Colombian data protection regulations.
The purpose of this policy is to inform data subjects how their personal information is collected, used, stored, protected and, where applicable, deleted.
- Controller: Sindy Pallares Sandoval
- Domicile: Bogotá D.C., Colombia
- Website: www.sindypallares.com
- Email: pallaresbackup@gmail.com
- Phone / WhatsApp: +57 305 728 0896
2. Legal framework
This Policy is based mainly on:
- Political Constitution of Colombia, article 15.
- Law 1581 of 2012, which sets out general provisions for the protection of personal data.
- Decree 1377 of 2013, where applicable.
- Single Regulatory Decree 1074 of 2015, regarding personal data protection.
- Any other regulations that amend, add to or replace the above.
3. Definitions
Personal data. Any information that can be associated with an identified or identifiable natural person.
Processing. Any operation performed on personal data, such as collection, storage, use, consultation, updating, circulation or deletion.
Data subject. The natural person to whom the personal data belongs.
Controller. The natural or legal person who decides on the database and/or the processing of personal data.
Processor. The natural or legal person who processes personal data on behalf of the controller.
Authorization. Prior, express and informed consent given by the data subject for the processing of their personal data.
4. Personal data that may be collected
Through the website, contact forms and available communication channels, the following data may be collected:
- Name.
- Company or organization.
- Email address.
- WhatsApp or phone number.
- Information related to the need or service requested.
- Information voluntarily included by the data subject in the message field.
- Information necessary to manage a request or communication.
- Technical and browsing data collected through analytics cookies, as explained in section 12.
Sensitive personal data will not be deliberately requested through the contact form.
Data subjects should avoid providing sensitive, financial, medical, biometric or minors-related information, or any other specially protected information, when it is not necessary to handle their request.
5. Purposes of processing
5.1 Handling requests. To handle, answer and follow up on inquiries, requests or messages sent through the website.
5.2 Professional contact. To contact the data subject by email, WhatsApp or phone when necessary to respond to their request or discuss the services requested.
5.3 Service delivery. When the data subject decides to hire a service, to use the necessary information to manage the business relationship and properly deliver the service.
5.4 Preparing proposals. To use the information provided to understand the potential client’s needs and prepare business proposals related to the services requested.
5.5 Administrative and commercial management. To manage communications, requests, quotes, meetings and other activities necessary for a professional or business relationship.
5.6 Website security and operation. To use certain technical data or information necessary to ensure the security, operation and maintenance of the website.
5.7 Legal compliance. To process data when necessary to comply with legal obligations, requests from competent authorities or to exercise rights in judicial or administrative proceedings.
5.8 Website measurement and improvement. To analyze, in aggregate form, how the website is used, where visits come from and which content generates the most interest, in order to improve the information published and the service provided to visitors.
6. Data subject’s authorization
Where required by law, the processing of personal data will be subject to the prior, express and informed authorization of the data subject. In the contact form, authorization is given by checking the box with the following text:
“I authorize the processing of my personal data in accordance with the Personal Data Processing Policy, to manage my request, contact me and provide me with information related to the services requested.”
As proof of authorization, the date and time of submission, the accepted text and the version of this Policy in force at that time are kept.
7. Data subjects’ rights
- To know the personal data being processed.
- To request the updating of their data when it is outdated.
- To request the correction of data that is incorrect, incomplete or inaccurate.
- To request proof of the authorization given for the processing of their data.
- To request information about how their personal data has been used.
- To request the deletion of their personal data where applicable.
- To revoke the authorization given for the processing of their data, where appropriate.
- To file complaints with the Superintendence of Industry and Commerce (SIC) if they believe data protection rules have been breached, once the inquiry or claim procedure with the controller has been exhausted.
- To access their processed personal data free of charge.
8. Procedure to exercise these rights
Requests will be handled directly by Sindy Pallares Sandoval, as controller. Data subjects may submit them by email to pallaresbackup@gmail.com.
Requests must include at least:
- Full name of the data subject.
- Contact method to receive the response.
- A clear description of the request.
- Information that allows identification of the data concerned, where applicable.
When necessary, additional information may be requested to verify the requester’s identity and prevent unauthorized third parties from accessing personal information.
Inquiries will be answered within a maximum of ten (10) business days from receipt. If this is not possible, the data subject will be informed of the reasons for the delay and the date on which the inquiry will be answered, which may not exceed five (5) business days after the first deadline.
Claims (updating, correction, deletion or revocation) will be answered within a maximum of fifteen (15) business days from the day after receipt. If this is not possible, the data subject will be informed of the reasons for the delay and the date on which the claim will be answered, which may not exceed eight (8) business days after the first deadline.
9. Revocation of authorization
Data subjects may request the revocation of their authorization, where legally appropriate, by email to pallaresbackup@gmail.com.
Revocation will not have retroactive effects on processing lawfully carried out before the request.
When a legal or contractual obligation requires certain information to be kept, the data may be retained for the corresponding period, even if deletion is requested.
10. Information security
Sindy Pallares Sandoval will adopt reasonable technical, human and administrative measures to protect personal data against loss, unauthorized access, alteration, misuse or unauthorized disclosure.
Access to information will be limited to the people or providers who need it for the authorized or legally permitted purposes.
However, no storage or transmission system over the Internet can guarantee absolute security.
11. Third parties and technology providers
The following technology providers, which may act as data processors, are used to operate the website and handle requests:
- Google LLC (Google Sheets, Google Apps Script and Gmail): storage of requests received through the form and management of email communications.
- Google LLC (Google Analytics 4): statistical measurement of website usage, as explained in section 12.
- Netlify, Inc.: website hosting and publishing.
- WhatsApp (Meta Platforms, Inc.): communications when the data subject chooses this channel.
These providers must process data in accordance with the authorized purposes and applicable data protection obligations. If new tools are added, this Policy will be updated.
12. Cookies and similar technologies
The website uses Google Analytics 4, a web analytics service provided by Google LLC, to understand in aggregate form how the site is used and to improve it.
Google Analytics uses cookies (such as _ga and
_ga_<ID>) that are stored in the visitor’s browser and
may last up to 2 years. They collect information such as:
- Pages visited and time spent on the site.
- Source of the visit, for example a search engine, a social network, a shared link or a QR code.
- Device type, browser, operating system, language and approximate location (city or country).
- Interactions with the site, such as clicks on WhatsApp buttons and contact form submissions.
Google Analytics 4 does not log or store full IP addresses. The information is analyzed in aggregate, statistical form; it is not used to identify specific individuals or for advertising purposes. The website does not use advertising cookies.
Visitors can prevent or limit the use of these cookies at any time:
- By setting their browser to block or delete cookies.
- By installing the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout.
Disabling these cookies does not prevent browsing the site or contacting us. For more information on how Google processes this data, see policies.google.com/technologies/partner-sites.
13. Minors’ data
The website and the services offered by Sindy Pallares Sandoval are not specifically directed at minors.
Personal data of children or adolescents will not be deliberately requested through the contact form.
If it is detected that personal data of a minor has been collected without the corresponding safeguards, the necessary measures will be taken in accordance with applicable law.
14. International transfer or transmission of data
The providers listed in section 11 may store or process information on servers located outside Colombia, under their own security measures. By giving their authorization, data subjects accept that their data be processed by these providers for the purposes described in this Policy.
Where applicable, the measures and conditions required by Colombian law will be adopted to ensure the protection of personal data.
15. Data retention
Personal data will be kept for as long as necessary to fulfill the purposes for which it was collected and, thereafter, for the periods necessary to comply with legal or contractual obligations or address possible liabilities.
When data is no longer needed and there is no legal or contractual obligation to keep it, it will be deleted or appropriate measures will be applied to prevent its use.
16. Effective date
Version 1.0 of this Policy became effective on October 3, 2026. Version 1.1, effective as of October 26, 2026, adds the use of Google Analytics (sections 4, 5, 11 and 12).
It may be updated when necessary due to regulatory changes, changes in services, new processing purposes or changes in the tools used to manage information.
When relevant changes are made, an updated version will be published at www.sindypallares.com/politica-de-datos. The version published on the website is the version in force.
17. Contact
For inquiries or requests to update, correct, delete or revoke authorization regarding personal data processing, data subjects may contact:
- Sindy Pallares Sandoval — Bogotá D.C., Colombia
- Email: pallaresbackup@gmail.com
- WhatsApp: +57 305 728 0896
- Website: www.sindypallares.com
18. Authorization
When using the contact form available on this website, data subjects may give their authorization by expressly checking the corresponding box.
The authorization will be linked to the information provided and the purpose stated at the time of collection.