Privacy policy

1. Who is responsible

Arqly S.A.S., Colombian tax ID (NIT) 901.756.547-1, Villavicencio, Meta, Colombia. Privacy contact: [email protected]. Stevens Sánchez, legal representative, handles questions and complaints.

2. What data we collect and where it comes from

• Contact form: name, company email, company, what you need, how you found us, your message and any link you send.
• Email and WhatsApp: what you write to us.
• Prospecting: business contact details published by your company or on LinkedIn, when we contact you first.

We don't ask for sensitive data or data about minors. Please don't send it.

3. Why we use it and on what legal basis

• To answer your enquiry and send you a quote: your consent (Colombia Law 1581) and the steps you ask us to take before a contract (GDPR art. 6.1.b).
• To run the project and invoice, if we work together: the contract (GDPR art. 6.1.b) and legal obligations (tax and accounting).
• To keep a business relationship and send relevant updates about our BIM services: our legitimate interest (GDPR art. 6.1.f). You can object at any time.

4. Where your data is processed and who helps us

We process your data from Colombia. The European Commission has not issued an adequacy decision for Colombia. Colombia's data protection authority considers the United States, the EU, Spain and the UK to provide an adequate level of protection.

These providers process data on our behalf:

• Cloudflare, Inc. (United States): hosting, security and the contact form.
• Resend, Inc. (United States): sending the contact form emails.
• Microsoft Corporation (United States): our email (Microsoft 365).
• Plausible Insights OÜ (Estonia, EU servers): cookie-free analytics.
• WhatsApp (Meta): only if you write to us on WhatsApp.

For providers in the United States we rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.

5. How long we keep it

Enquiries that do not become a project: up to 24 months after our last contact, then we delete them. Client and project data: for the length of the contract and then as long as Colombian tax and commercial law requires.

6. Your rights

You can ask to access, correct or delete your data, object to marketing, limit its use, take a copy (portability) or withdraw your consent, by writing to [email protected]. Under Colombian law we answer queries within 10 business days and complaints within 15 business days; under the GDPR, within one month.

You can also complain to the data protection authority: the Spanish AEPD (aepd.es), the UK ICO (ico.org.uk) or Colombia's Superintendencia de Industria y Comercio.

7. Analytics and cookies

This site does not use advertising or tracking cookies, and does not load third-party widgets that set cookies. Email and WhatsApp links open your own apps; we do not embed them in the page.

We measure visits with Plausible Analytics: no cookies, no personal data, aggregate figures only, servers in the EU. Visitors are counted with a daily hash that cannot be reversed and is discarded every 24 hours. Cloudflare may set strictly necessary security cookies.

To stop Plausible counting your visits on this browser: Exclude my visits

8. For California visitors (CalOPPA)

• Categories of data and third parties: see sections 2 and 4. We do not sell or share personal data for advertising.
• No third party collects data about your online activity across sites through this site.
• Do Not Track: we do not track you across sites, so DNT signals do not change how this site works.
• Changes: we publish each new version on this page with its date and keep previous versions.

9. Automated decisions and AI

We do not make automated decisions with legal or similar effects about you. We may use AI tools to help manage enquiries.

10. Version and changes

Version 1.0, 16 October 2026. We keep earlier versions as a record of the consent given under each one.