01
Data Controller Information
In compliance with Law 1581 of 2012 and Decree 1377 of 2013 of the Republic of Colombia, INGRUVO S.A.S. hereby informs about the processing of personal data.
02
Collected Data
We collect the minimum amount of information necessary to provide our services:
Identification Data
- Full name and identification document
- Email address and phone number
- Physical address (when applicable for billing purposes)
Business Data
- Company name, job title, tax ID (NIT/RUT)
- Economic sector and billing information
Technical Data (Automated)
- IP address and device/browser type
- Analytical cookies from Google Analytics 4
- Record of visits and navigation flow throughout the website
We do not collect sensitive data (ethnic origin, health, political affiliation, biometric data).
03
Purposes of Processing
Your data is processed exclusively for the following purposes:
- Provision of contracted services (development, design, marketing)
- Answering technical inquiries and quotation requests
- Sending relevant commercial communications (only with your explicit consent)
- Post-sales follow-up and technical support
- Compliance with legal, tax, and accounting obligations
- Continuous improvement of our services through statistical analysis
- Fraud prevention and ensuring IT security across our channels
04
Your Rights as a Data Subject
As the owner of personal data under Colombia's Law 1581/2012, you have the right to:
- Access: Know at any time what data we have stored about you
- Update: Request correction of inaccurate or outdated information
- Rectification: Modify incomplete or erroneous records
- Erasure: Request the deletion of your data (right to be forgotten)
- Revocation: Withdraw your consent at any time
- Portability: Obtain a structured copy of your personal data
- Complaint: Submit claims before the Superintendency of Industry and Commerce (SIC)
To exercise any of these rights, please write to us at info@ingruvo.com. We respond within a maximum of 10 business days.
05
Security Measures
We implement robust technical and organizational safeguards:
- SSL/TLS encryption on all communications (forced HTTPS redirect)
- Restricted access to databases via role-based permissions and 2FA
- Encrypted backups with geographic redundancy
- Continuous security monitoring and intrusion detection setups
- Bi-annual data protection training for all staff members
- Periodic security audits and penetration testing
06
Cookies & Analytics
Our website utilizes the following tracking technologies:
- Google Analytics 4 (GA4): Used for traffic analysis and user behavior. All data is anonymized and aggregated.
- Session Cookies: Strictly necessary for the basic operation of the site. They do not require consent.
- Preference Cookies: Remember user preferences. They can be disabled without affecting core functionality.
You can configure your browser to reject cookies. To opt out of being tracked by GA4, you can install the Google Analytics Opt-out Browser Add-on.
07
Transfer to Third Parties
Your data is never sold or leased to third parties for commercial gain. We only share it when strictly necessary:
- Google (Analytics, Ad Manager): For web traffic analysis
- Hosting / Infrastructure Providers: For site operations and uptime maintenance
- Financial Institutions: Exclusively for secure payment processing
- Colombian Authorities: When required by legal mandate or judicial orders
All third-party partners are contractually obliged to comply with Law 1581/2012 and applicable privacy standards.
08
Data Retention Period
- Active Clients: For the entire duration of the commercial relationship
- Former Clients: 5 years for accounting, tax, and legal compliance
- Prospects / Leads: 2 years from the last contact point
- Marketing Data: Until consent is withdrawn or after 3 years of inactivity
- Web Analytics Data: 14 months (default GA4 configuration)
After these periods, the data is securely deleted or irreversibly anonymized, unless there is a longer legal obligation to preserve it.
09
Data of Minors
Our services are directed exclusively to individuals who are 18 years of age or older. We do not intentionally collect personal data from minors.
If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete such information from our systems. If you have knowledge of such a situation, please notify us at info@ingruvo.com.
10
Updates to this Policy
This policy may be updated from time to time. Significant updates will be notified via:
- Direct email alerts to active and registered clients
- Featured notice on our website's homepage
The current version will always be accessible at ingruvo.com/privacidad along with its last updated date.