Privacy and personal data policy

1. Data controller

• Company name: ECLOSION S.A.S. (Eclosion IT)
• Tax ID (NIT): 830.136.430-1
• Address: Calle 98 A # 51-37, Oficina 302, Bogotá D.C., Colombia
• Email for personal data matters: sgarzon@eclosionit.com
• Website: www.eclosionit.com

2. Definitions

• Personal data: any information linked or linkable to an identified or identifiable natural person.
• Data subject: the natural person whose personal data is processed.
• Processing: any operation on personal data, such as collection, storage, use, circulation or deletion.
• Authorization: the data subject’s prior, express and informed consent to the processing of their data.
• Processor: a person who processes data on behalf of the controller.

3. Data we collect

We may collect, among others:

• Identification and contact data: name, company, job title, email and phone.
• Information the data subject voluntarily shares about their needs or project, including files attached to support requests.
• Client and supplier data required for the contractual relationship, e-invoicing and tax obligations.
• Basic technical browsing data (IP address, browser type) logged by the server for security and abuse prevention.

Eclosion IT does not request sensitive data through the Site. If ever needed, we will explain it is optional and request express authorization.

4. Purposes

• Respond to contact requests, quotes, demos and consultations.
• Record and manage sales opportunities in our customer relationship management (CRM) system.
• Enter into, perform and manage service contracts with clients and suppliers.
• Provide technical support, manage help desk tickets, and deliver training and project assistance.
• Comply with legal, accounting and tax obligations, including DIAN e-invoicing.
• Send commercial information about services, events and news, when authorized.
• Keep the Site secure and prevent fraud or automated submissions.

5. Data subject rights

Under article 8 of Law 1581 of 2012, the data subject has the right to:

1. Know, update and correct their personal data.
2. Request proof of the authorization granted, except where not required by law.
3. Be informed about how their data has been used.
4. File complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law.
5. Revoke the authorization and/or request deletion of their data when there is no legal or contractual duty to keep it.
6. Access their processed personal data free of charge.

6. Queries and claims

Data subjects, their successors or representatives may exercise their rights by writing to sgarzon@eclosionit.com, including full name, ID number, contact details, a description of the request and any supporting documents.

Queries

Answered within ten (10) business days of receipt. If not possible, we will explain why and set a new date no later than five (5) additional business days.

Claims

Answered within fifteen (15) business days from the day after receipt. If not possible, we will explain why and set a new date no later than eight (8) additional business days. If a claim is incomplete, we will ask for the missing information within five (5) days; if it is not provided within two (2) months, the claim will be deemed withdrawn.

7. Authorization

By completing the contact form and ticking the consent box, or by providing data through any other channel, the data subject grants prior, express and informed authorization for processing under this policy.

8. Transfers and transmissions

To operate our services we rely on technology providers (e.g., cloud computing, our CRM, email and e-invoicing technology providers), which may store information on servers outside Colombia. In such cases we require adequate levels of data protection, as provided by law and SIC guidelines.

Eclosion IT does not sell or assign personal data to third parties for commercial purposes.

9. Information security

We adopt reasonable technical, human and administrative measures to protect personal data against tampering, loss, or unauthorized access or use, including HTTPS encryption, a content security policy and controls against automated submissions.

10. Cookies and local storage

We use your browser’s local storage to remember your theme (light or dark), language and cookie preferences. This information never leaves your device and is not used to identify you.

Only if you accept in the cookie notice, the Site loads Google Analytics (Google LLC), to measure visits and use of the Site in aggregate, and the Meta Pixel (Meta Platforms, Inc.), to measure and improve our ads on Facebook and Instagram. These tools set cookies and send those providers, which may be located outside Colombia, data such as your IP address, browser, pages visited and forms submitted (not their content). If you reject, none of them is loaded.

To protect the contact and support forms from automated submissions we use Cloudflare Turnstile (Cloudflare, Inc.), which analyzes technical browser signals without advertising cookies. It is required for the Site’s security, so it does not depend on the cookie notice. We also use Cloudflare Web Analytics, which counts visits in aggregate, without cookies and without identifying the visitor.

You can change your choice at any time from the Cookie preferences link at the bottom of every page, and delete cookies from your browser settings.

11. Children’s data

The Site is aimed at businesses and professionals. We do not knowingly collect data from minors; if we do, their prevailing rights will be respected as required by law.

12. Validity and changes

This policy is effective from its publication date. Databases are kept as long as necessary for the purposes described and applicable legal obligations. Any material change will be announced on the Site. In case of discrepancy, the Spanish version prevails.