Personal Data Processing Policy

1. Data controller

This policy complies with Colombia's Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Single Decree 1074 of 2015). Requests about personal data are handled by the VALNET IA team at contacto@valnet.com.co.

2. What data we process

Data you give us

• Contact form: name, company (optional), the service you are interested in, preferred channel, a phone number or email address, and the message you write.
• WhatsApp, email or phone call: the information you share in the conversation.
• If you are a client: the data needed for the proposal, contract, invoicing and support.

We only ask for what we need to respond to you. We don't request sensitive data (health, racial origin, political or religious views, biometrics, etc.), and we ask you not to include it in your messages, nor any passwords or access keys.

Minimal technical data

• IP address, for abuse protection only: when you submit the form, we use your IP to limit repeated submissions. It is automatically deleted within 24 hours and is never linked to your request.
• Visit statistics: we count how many times each page is opened per day. The count doesn't use cookies, doesn't store your IP and can't identify you.
• Approximate country of connection: our server uses it at request time to show you the site in Spanish or English. It is not stored.
• Our hosting provider's security logs (Cloudflare), which processes connections to protect the site from attacks.

Minors

This website is intended for businesses and adults. We do not knowingly collect data from minors.

3. How we use it

• To respond to your request, prepare a proposal and follow up on that request.
• To provide, invoice and support the services you hire us for.
• To send you information about services similar to those you asked about, only if you haven't objected. You can ask us to stop at any time.
• To protect the site against abuse and meet our legal, accounting and tax obligations.

We don't sell, rent or share your data with third parties for their own purposes.

4. Authorization

We process your data with your prior, express and informed authorization. On the form, you give it by checking the consent box; without it, the request is not sent. We keep a record of the date, the request reference and the version of this policy you accepted.

If you contact us by WhatsApp, email or phone, we understand that you authorize us to use that information to respond to you, and we will share this policy with you if we start a business relationship.

You can revoke your authorization at any time, except where there is a legal or contractual duty to keep the data.

5. Your rights

As the data subject, you can:

• Access, update and correct your data.
• Request proof of the authorization you gave us.
• Find out how we have used it.
• Revoke your authorization or ask us to delete it.
• Access your data free of charge.
• File a complaint with Colombia's Superintendence of Industry and Commerce (SIC) after contacting us first.

6. How to exercise them

Write to us at contacto@valnet.com.co with your name, the contact details you used to reach us and what you need. We may ask for additional information to verify your identity.

7. Service providers and transfers

We use technology providers that process data on our behalf and under our instructions:

• Cloudflare, Inc. (United States): website hosting, database and attack protection.
• WhatsApp / Meta Platforms, when you choose to message us on WhatsApp. That conversation is also governed by WhatsApp’s policies.
• Email provider, when you email us or we reply by email.
• Automation servers we contract , used to organize and follow up on requests.

Some of these providers are located outside Colombia. We only use providers in countries with an adequate level of protection according to Colombia's Superintendence of Industry and Commerce, or with equivalent contractual safeguards.

8. Security

We protect information with encrypted connections (HTTPS), access restricted to authorized staff with a username, password and optional two-factor authentication, passwords stored with one-way hashing, and a change log. No system is infallible; if an incident affecting your data occurs, we will notify the authorities and the people affected as required by law.

9. How long we keep it

• Requests that don't lead to a contract: up to 24 months after the last contact, after which we delete or anonymize them.
• Clients: for the duration of the business relationship and afterwards for as long as accounting, tax or legal-defense rules require.
• Abuse-protection IP: 24 hours at most.
• If you ask us to delete your data, we will, unless the law requires us to keep it.

10. Cookies

The site's public pages don't use advertising or analytics cookies, only a language-preference cookie if you choose one. Details are in the cookie policy.

11. Changes to this policy

If we make significant changes, we will publish the new version on this page with its effective date and, where applicable, ask for your authorization again.