Privacy Policy

1. Introduction

Bochica ("we", "us", or "our"), a business consulting practice registered in Cali, Colombia, is committed to handling personal information with care, transparency, and respect. This Privacy Policy explains what information we collect through our website at bochica.cyou, how we use it, and what rights you have over it.

This policy applies to all visitors and clients who interact with us through our website or contact forms. For questions about this policy, please write to us at [email protected].

2. Data We Collect

We collect the following categories of personal information:

• Contact details: Name, email address, and phone number when you submit our contact form.
• Message content: The content you include in your inquiry form, which may include information about your organization.
• Usage data: Anonymized data about how visitors interact with our website, collected via analytics tools.
• Cookie data: Preferences you express through our cookie consent mechanism.

We do not collect sensitive personal categories of data (such as health, religious, or financial information) through our website.

3. Legal Basis for Processing

We process your data on the following legal bases, consistent with Colombia's Ley 1581 de 2012 (Habeas Data) and applicable international standards:

• Consent: Where you have given clear consent, for example by submitting our contact form or accepting non-essential cookies.
• Legitimate interest: To respond to inquiries and improve our website, in ways that do not override your rights.
• Contract: To fulfill our obligations when you engage us for consulting services.

4. How We Use Your Information

We use the personal information we collect to:

• Respond to your inquiry in a timely and appropriate way
• Schedule and manage consulting engagements
• Send information about our services when you have requested it
• Improve our website based on aggregated usage patterns
• Comply with legal obligations applicable in Colombia

We do not sell, rent, or trade your personal information to third parties.

5. Data Sharing

We may share data with the following categories of third parties in limited circumstances:

• Analytics providers: Anonymized data may be shared with services such as Google Analytics to understand website usage.
• Communication tools: Email providers used to send and receive correspondence.
• Legal obligation: When required by Colombian law or a valid legal authority.

All third-party providers used are required to handle data in ways consistent with applicable privacy law.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Contact form submissions: up to 24 months from last contact
• Client engagement records: up to 5 years following the close of an engagement, in line with Colombian legal requirements
• Website analytics data: anonymized and aggregated, retained indefinitely in aggregated form

7. Cookies

Our website uses cookies to function correctly and, with your consent, to gather anonymized analytics. Our Cookie Policy explains the types we use, their purpose, and how to manage them. You can withdraw cookie consent at any time through your browser settings or by visiting our Cookie Policy page.

8. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. These include:

• Secure transmission via HTTPS
• Access controls limiting who can view client data internally
• Regular review of our data handling practices

No method of data transmission or storage is entirely without risk. In the event of a data breach affecting your rights, we will notify you and the relevant Colombian authority (Superintendencia de Industria y Comercio) within the timeframe required by law.

9. Your Rights

Under Colombian Ley 1581 de 2012 and related regulations, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data where no legal obligation requires us to keep it
• Withdraw consent at any time where consent is the basis for processing
• Object to processing based on legitimate interest
• Lodge a complaint with the Superintendencia de Industria y Comercio (SIC)

To exercise any of these rights, contact us at [email protected]. We will respond within fifteen business days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before sharing any personal information.

11. Children

Our services are directed at organizations and individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have done so inadvertently, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically.