Personal data processing policy

The controller of your personal data is Novieri, a company domiciled in Barranquilla, Atlántico, Colombia.

For any matter related to this policy, including exercising your rights as a data subject, write to sales@novieri.com. This is the official channel for data subject requests.

This policy is governed by the Political Constitution of Colombia (article 15), Statutory Law 1581 of 2012, Single Regulatory Decree 1074 of 2015 (which compiled Decree 1377 of 2013), and the circulars and instructions of the Superintendence of Industry and Commerce, Colombia's data protection authority.

We only collect the data we need to handle your request. Depending on how you interact with us, this may include:

• Identification and contact data: name, email address, company, and role, when you complete the contact form or book a call.
• The content of your communications: the message you send us, the service you're interested in, and your conversations with the website assistant.
• Technical browsing data: IP address, device and browser type, pages visited, and aggregate usage data, for statistical and security purposes.
• Data arising from a commercial relationship: billing and operational contact information, once we reach a services agreement.

We do not collect sensitive data (racial or ethnic origin, political views, religious beliefs, union membership, health data, sexual life, or biometric data) through this website. We also do not request data from children or adolescents. If you believe a minor has sent us personal data, write to us and we will delete it.

We process your personal data for the following purposes:

• Responding to your questions and requests for commercial information.
• Preparing and sending service proposals and quotes, and scheduling meetings.
• Delivering, administering, and invoicing contracted services.
• Providing technical support and sending you relevant operational information about the services.
• Sending you commercial communications about our services where you have authorized it; you may withdraw that authorization at any time.
• Keeping the site secure, preventing fraud and abuse, and maintaining internal and accounting records.
• Complying with legal, accounting, and tax obligations and with requests from competent authorities.

We do not use your data for purposes other than those stated, and we do not make automated decisions that produce legal effects on you.

By submitting the contact form, writing to us by email or WhatsApp, or chatting with the website assistant, you give prior, express, and informed authorization for the processing of your personal data in accordance with this policy.

Authorization to receive commercial communications is optional and separable: you may decline it and still have your request handled. We keep evidence of the authorization granted, as required by law.

As the owner of the personal data, Colombian law grants you the following rights:

• To access, update, and rectify your personal data held by Novieri.
• To request proof of the authorization you granted, except where the law does not require it.
• To be informed, upon request, about how we have used your data.
• To file complaints with the Superintendence of Industry and Commerce for breaches of data protection rules.
• To revoke your authorization and/or request deletion of your data, where no legal or contractual duty requires us to keep it.
• To access your personal data free of charge.

You may exercise your rights by writing to sales@novieri.com from an address that identifies you, stating your name, a description of your request, and any supporting documents.

We answer queries within a maximum of ten (10) business days, extendable by five (5) further business days when they cannot be resolved in that time, informing you of the reasons and the date of resolution.

Complaints are handled within a maximum of fifteen (15) business days, extendable by eight (8) further business days, following the procedure in article 15 of Law 1581 of 2012. If a complaint is incomplete, we will ask you for the missing information within five (5) days of receiving it.

To run the website and deliver our services we use technology providers that may act as data processors and be located outside Colombia, including: web hosting and email, productivity and storage tools, CRM and online meeting scheduling, website analytics, the form anti-abuse service (Google reCAPTCHA), and the AI model provider behind the website assistant.

Where such international transfers or transmissions occur, we require our providers to apply security and confidentiality standards equivalent to those in this policy, through data transmission agreements or contractual protection obligations, in accordance with articles 25 and 26 of Law 1581 of 2012.

We do not sell, rent, or trade your personal data with third parties.

The site offers a virtual assistant that answers questions about Novieri. The content of the conversation is sent to our AI model provider solely to generate the reply.

Please do not enter sensitive data, credentials, third-party confidential information, or personal data that isn't necessary for your question. If you need to discuss something confidential, write to sales@novieri.com.

We apply reasonable technical, human, and administrative measures to protect your data against unauthorized access, loss, alteration, or misuse: encryption in transit, role-based access control, activity logging, and periodic review of our providers.

We retain your data while a commercial relationship or an active purpose exists, and afterwards for as long as needed to meet legal, accounting, and tax obligations. Once those periods lapse, we delete or anonymize it.

This policy applies from the date of its last update and remains in force for as long as Novieri processes personal data. Any substantial change will be published on this page; we recommend reviewing it periodically.

Databases are kept for as long as the processing purposes and applicable legal duties remain in force.