This is a translation provided for convenience. In case of any discrepancy, the Spanish version prevails.
1. Data controller
ZERO ONE GROUP Y/O JORGE ANDRES CASTRO ANGULO, Colombian tax ID (NIT) 94401631-0, domiciled at Colombia. Contact email for personal data matters: [email protected].
2. Data we collect
Name, company, tax ID, job title, email address, phone number and the information you share when you write to us, take the assessment or request a quote or purchase. We also record the date and IP address from which you give your consent, as proof of it.
3. Purposes
We use your data to answer your requests, prepare quotes, process and deliver orders, issue invoices, provide technical support, comply with legal and accounting obligations and, if you authorize it, send you information about our services. We do not sell or transfer your data to third parties.
4. Your rights
As the data subject, you can access, update and correct your data; request proof of your consent; be informed about how we use it; revoke your consent or request deletion when there is no legal duty to keep it; and file complaints with the Superintendence of Industry and Commerce (SIC) of Colombia.
5. How to exercise your rights
Write to [email protected] stating your name, ID and your request. We handle inquiries within a maximum of ten (10) business days and claims within a maximum of fifteen (15) business days, as set by law.
6. Security
We apply technical and administrative measures to protect your information: encrypted connections, role-based access, strong passwords and audit logs.
7. Service providers
To operate, we use web hosting, email and payment gateway (Wompi) providers. These providers process data only to provide their service and under their own security and confidentiality obligations.
8. Cookies
We only use cookies and storage that are strictly necessary for security, the cart and your preferences. We do not use advertising cookies. Details are in our Cookie policy.
9. Where your data is stored
The website and its database are hosted with a provider whose servers may be located outside Colombia, including the United States, a country recognized by the Colombian Superintendence of Industry and Commerce as providing an adequate level of protection. The provider acts as a data processor and only stores the information so the website can work.
10. Retention
We keep messages and quotes for as long as necessary to serve you and follow up commercially (up to 3 years without activity), and orders and invoices for the period required by accounting and tax regulations (10 years). After that, we delete or anonymize them.
11. Visitors from the European Union and the United Kingdom (GDPR)
If you contact us from the European Economic Area or the United Kingdom, we process your data based on your consent (forms), on the performance of a contract or pre-contractual steps (quotes and orders) and on our legal obligations (invoicing). You have the right to access, rectify, erase, restrict and object to processing, to data portability and to withdraw your consent at any time, without affecting prior processing. You may also lodge a complaint with the data protection authority in your country. We do not make automated decisions that significantly affect you.
12. United States residents (CCPA/CPRA and state laws)
We do not sell or share your personal information for cross-context behavioral advertising, and we have not done so in the last 12 months. The categories of data we collect are listed in section 2, for the purposes in section 3. You have the right to know what data we hold, to request correction or deletion, and not to be discriminated against for exercising these rights. We honor the Global Privacy Control (GPC) signal as an opt-out request. To exercise your rights, write to [email protected]; we will verify your identity before responding.
13. Minors
Our services are intended for businesses and adults. We do not knowingly collect data from people under 18.
14. Effective date
This policy is effective since 2026. Data will be kept for as long as the business relationship exists and for the periods required by law. Any substantial change will be published on this page.