Privacy Policy

1. Introduction

Bachué S.A.S. ("Bachué", "we", "us", "our") is a business consulting practice based in Medellín, Colombia. We are committed to handling the personal information you share with us with care and in accordance with Colombian data protection legislation, principally Ley Estatutaria 1581 de 2012 (Ley de Protección de Datos Personales) and its regulatory decrees.

This policy explains what personal data we collect, how we use it, how we protect it, and what rights you have. If you have questions about anything in this policy, please write to us at [email protected].

2. What personal data we collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number, business address
• Business information: company name, industry, current challenges, goals — shared in the context of advisory sessions
• Communications: content of messages sent through our contact form or by email
• Technical data: browser type, device type, pages visited, and timestamps (collected via cookies where consent is given)

We collect this data directly from you when you submit our contact form, send us an email, schedule a session, or use our website.

Legal basis for processing: We process your data on the basis of your consent (where requested), to fulfil a service agreement you enter into with us, or on the basis of our legitimate interest in responding to enquiries and delivering our advisory services.

Retention: Contact enquiry data is held for up to 2 years from the date of collection. Client session data and deliverables are held for the duration of the engagement and for 12 months thereafter, unless you request earlier deletion.

3. How we use your data

• To respond to your enquiries and arrange sessions
• To deliver advisory services you have requested
• To send written summaries and agreed deliverables
• To send administrative communications about your engagement (scheduling, billing)
• To improve our website using aggregated, anonymised analytics data
• To comply with legal obligations under Colombian law

We do not use your personal data for marketing without your explicit consent. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Third-party services: We may use trusted third-party tools to deliver emails and manage scheduling. These providers process data solely on our behalf and are contractually bound to handle it appropriately.

4. Data protection measures

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. These include:

• Encrypted transmission of data via HTTPS
• Access controls limiting who within Bachué can view client data
• Secure document storage with restricted permissions
• Regular review of our data handling practices

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant supervisory authority (Superintendencia de Industria y Comercio — SIC) in accordance with applicable law.

5. Cookies

Our website uses cookies to keep basic site functions running and, where you consent, to understand how visitors use the site. You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your rights

Under Ley 1581 de 2012 and applicable Colombian regulations, you have the following rights with respect to your personal data:

• Right of access: to know what personal data we hold about you
• Right of rectification: to correct inaccurate or incomplete data
• Right of deletion (habeas data): to request that we delete your data, subject to legal obligations
• Right to revoke consent: to withdraw consent to processing at any time
• Right to lodge a complaint: with the Superintendencia de Industria y Comercio (SIC) at www.sic.gov.co

To exercise any of these rights, write to us at [email protected]. We will respond within 15 business days.

7. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

8. Children's privacy

Our services are intended for adults (18 and over) running businesses. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services after any change constitutes acceptance of the updated policy. For significant changes, we will notify active clients by email.

10. Contact

For privacy-related questions or to exercise your rights:

Data Controller: Bachué S.A.S.
Calle 10 #43-30, Medellín, Colombia
[email protected]