Privacy policy.

1. Data controller

The data controller responsible for your data is TRIAD, operated by Stiven Ricardo Varilla and Leidy Carolina Mestra Payares (individuals), domiciled at Turbo, Antioquia, Colombia.

For inquiries and complaints about personal data, write to us at consulta@triadcol.com.

2. What data we collect

We collect only what is necessary to assist you:

• Contact form: your name, your email, the services you are interested in, your message, and the site language.
• Site chat and WhatsApp: if you write to us, your session identifier or number, your profile name when applicable, and the content of the conversation.
• Technical data: as on any website, the server records minimal information about each visit (IP address, browser, date and time) for the operation and security of the site.

We do not ask for sensitive data or data of minors.

3. What we use your data for

We use your data to:

• Respond to your request.
• Prepare and send you a proposal.
• Follow up commercially on your request.
• Maintain the security of the site and prevent spam.
• Comply with legal obligations.

We do not sell your data or use it for third-party advertising.

4. Your authorization

Before submitting the form, we ask you to check that you accept this policy and authorize the processing of your data for the purposes described. We store the date and time of your authorization as proof.

If you write to us on WhatsApp, we understand that you authorize the use of that data to respond to you.

You may revoke your authorization at any time, as explained below.

5. Who we share it with

We use providers that process data on our behalf, solely to operate the site:

• Vercel: website hosting.
• Railway: database where the form messages are stored.
• GoDaddy: professional email.
• Resend: sending internal email notifications, when enabled.
• Meta (WhatsApp): when you write to us on WhatsApp.
• OpenAI: artificial intelligence provider that processes chat and WhatsApp messages to generate assistant replies.

Some of these providers have servers outside Colombia, mainly in the United States, so your data may be transmitted or transferred abroad. We require our providers to apply adequate security measures. We do not disclose your data to other third parties, except by order of a competent authority.

6. Your rights

As a data subject, under Colombian Law 1581 of 2012, you have the right to:

• Know, update, and rectify your data.
• Request proof of the authorization you gave us.
• Be informed about how we use your data.
• File complaints with the Superintendence of Industry and Commerce (SIC).
• Revoke the authorization and request that we delete your data.
• Access your data free of charge.

7. How to exercise your rights

Write to us at consulta@triadcol.com stating your full name, how we can contact you, and what you are requesting.

We respond to inquiries within a maximum of 10 business days and to complaints within a maximum of 15 business days. If we need more time, we will notify you before the deadline expires, stating the reason and the new date (up to 5 additional business days for inquiries and 8 for complaints).

If you are not satisfied with our response, you may go to the Superintendence of Industry and Commerce (SIC) (www.sic.gov.co).

8. How long we keep your data

We keep the form messages for as long as they are necessary to handle your request and carry out commercial follow-up. After that, we delete or anonymize them, unless the law requires us to keep them longer. You may ask us to delete them sooner.

9. Security

We apply reasonable measures: encrypted connection (HTTPS), access to the administration panel restricted to authorized persons with Google account verification, and a database with protected access. No measure is infallible. If an incident affecting your data occurs, we will act as the law requires.

10. Cookies

This site uses only one necessary cookie, which remembers the language you chose. We do not use advertising or tracking cookies. If we later add analytics tools, we will update this policy.

11. Minors

This site is not directed at persons under 18 years of age and we do not knowingly collect data from minors. If you believe a minor has sent us data, write to us so we can delete it.

12. Changes to this policy

We may update this policy. We publish the current version on this page, with its date. If the change is significant, we will highlight it on the site.