Privacy Policy

1. Introduction

Cattleya ("we", "us", "our") is a business consulting firm based in Cali, Colombia, registered and operating under Colombian law. We take the privacy of our clients and website visitors seriously. This policy explains how we collect, use, and protect your personal information when you engage with our website or services.

This policy applies to all personal data we process and reflects our obligations under Colombian Law 1581 of 2012 (Ley Estatutaria de Protección de Datos Personales) and its regulatory decrees. If you have questions about anything in this document, please contact us at [email protected].

2. Data Controller

The data controller responsible for your personal information is:

• Business name: Cattleya
• Address: Avenida 4N #16-58, Cali, Colombia
• Email: [email protected]
• Phone: +57 602 471 8395

3. What Personal Data We Collect

We collect the following types of personal information:

• Contact information: Name, email address, and phone number — provided when you submit our contact form or reach out directly.
• Communication data: The content of messages you send us, including enquiries about our services.
• Usage data: Information about how you interact with our website, collected through cookies and analytics tools where you have consented.
• Service-related data: Notes and materials shared during consulting engagements, retained to deliver our services.

4. Legal Basis for Processing

We process your personal data on the following legal bases under Colombian law:

• Consent: When you submit a contact form or provide information voluntarily, including for optional cookie categories.
• Contractual necessity: Processing required to deliver consulting services you have requested.
• Legitimate interest: For basic website analytics to improve our service, where not overridden by your rights.
• Legal obligation: Where required by Colombian law or regulatory authorities.

5. How We Use Your Data

• To respond to enquiries and arrange initial consultations
• To deliver the consulting services you have engaged us for
• To send information about our services where you have expressed interest
• To improve the usability and content of our website (analytics only with consent)
• To fulfil legal and regulatory requirements

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6. Data Sharing

We may share your data with:

• Analytics providers: Where you have consented to analytics cookies (e.g. Google Analytics), usage data is processed by that provider under their own terms.
• Hosting and infrastructure: Our website and any data held digitally are stored with reputable hosting providers.
• Legal authorities: Where required to comply with Colombian law or respond to valid legal requests.

7. Data Retention

We retain personal data for as long as necessary to deliver services and meet legal obligations:

• Contact form submissions: up to 12 months from last interaction
• Client engagement files: up to 3 years after engagement closes, or as required by law
• Analytics data: retained according to the analytics provider's policy (typically 14–26 months)

8. Cookies

Our website uses cookies to function and, where you consent, to analyse usage. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under Colombian Law 1581 of 2012, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data where no legal basis remains for its retention
• Object to processing based on legitimate interest
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Lodge a complaint with the Superintendencia de Industria y Comercio (SIC), Colombia's data protection supervisory authority, at www.sic.gov.co

To exercise any of these rights, please contact us at [email protected]. We will respond within 15 business days.

10. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include:

• Secure transmission via HTTPS for all website communications
• Access controls limiting who within our team can view client data
• Secure storage practices for digital and physical client documents

In the event of a data breach that poses a risk to your rights, we will notify you and the SIC as required by law.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

12. Children's Privacy

Our services are intended for adults (18 years and older). We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our website or services after changes constitutes acceptance of the updated policy. For significant changes, we will make reasonable efforts to notify affected users.

14. Contact

For any privacy-related questions or to exercise your rights, please contact:

• Email: [email protected]
• Phone: +57 602 471 8395
• Address: Avenida 4N #16-58, Cali, Colombia