Skip to content
Start a project

Privacy and data processing policy

Last updated:

At Zofesto we take care of the data you share with us. This policy explains what data we collect on zofesto.com and while providing our services, what we use it for, who we share it with, and how you can access, update or delete it. It applies under Article 15 of the Colombian Constitution, Law 1581 of 2012, Decree 1074 of 2015 (which incorporates Decree 1377 of 2013) and related regulations.

1. Data controller

  • Controller: Zofesto, a brand of Estiven Velásquez (individual)
  • Tax ID (NIT): 1.026.150.471-4
  • Address: Medellín, Antioquia, Colombia
  • Email for personal data matters: hola@zofesto.com
  • WhatsApp: +57 300 473 2879

2. Data we collect

  • Contact form: name, email, company, phone, services of interest, budget, timeline and your message.
  • Newsletter: email address and preferred language.
  • WhatsApp, email or calls: whatever you share when you contact us.
  • Clients: contact and billing details needed for the contract, plus any access or content you give us to deliver the project.
  • Browsing: technical data (browser, device, pages visited) only if you accept analytics cookies. See the Cookie policy.

We don't ask for sensitive data (health, ethnic origin, political views, biometrics and the like). The site isn't aimed at minors.

3. What we use it for

  • Replying to your messages, preparing proposals and quotes, and scheduling calls.
  • Delivering the projects and services you hire, including support afterwards.
  • Invoicing and meeting legal, accounting and tax obligations.
  • Sending the newsletter and news about Zofesto and its products (such as Kroketa), if you subscribed. You can unsubscribe at any time from the link in every email.
  • Measuring and improving the site with usage statistics, if you accepted analytics cookies.
  • Handling questions, requests and complaints, and evaluating service quality.

We don't sell or rent your data, and we won't use it for other purposes without asking for your consent again.

4. Consent

On the contact form you give consent by ticking the acceptance box. On the newsletter, the notice next to the field links to this policy and subscribing is your acceptance. We keep a record of your consent.

5. Who we share it with

We use technology providers that process data on our behalf and may only use it to provide their service:

  • Vercel (United States): website hosting.
  • Resend (United States): delivery of contact form emails.
  • Brevo (European Union): contact management and newsletter delivery.
  • Google and other analytics or advertising tools, only if you accept them in the cookie notice.
  • WhatsApp (Meta), when you choose to message us there.

Some of these providers store data outside Colombia, under their contractual security terms and with adequate levels of protection, as Law 1581 of 2012 allows. We may also disclose data to authorities acting within their legal powers or under a court order.

6. How long we keep it

  • Messages and proposals that don't become a project: up to 2 years after the last contact.
  • Clients: for the duration of the relationship and then as long as accounting and tax rules require.
  • Newsletter: until you unsubscribe.

7. Your rights

Free of charge, you can access, update and correct your data; ask for proof of your consent; know how we've used your data; withdraw consent or ask us to delete your data when no legal or contractual duty requires us to keep it; and file complaints with Colombia's Superintendence of Industry and Commerce (SIC) after contacting us first.

8. How to exercise them

Email hola@zofesto.com with the subject “Personal data”, including your name, a way to reach you, what you need and, for complaints, a description of the facts and any supporting documents. We answer questions within 10 business days (extendable by 5) and complaints within 15 business days (extendable by 8), always telling you the reason for any delay.

9. Security

We protect data with reasonable technical and administrative measures: encrypted connections (HTTPS), access limited to the team members who need it, providers with recognized security standards and limits against bulk form submissions. Everyone handling data at Zofesto must keep it confidential, even after their relationship with us ends.

10. Effective date and changes

This policy is effective as of October 8, 2026 and replaces the previous version. If we make significant changes, we'll publish them here with the new date and, if the purposes change, ask for your consent again. If the Spanish and English versions differ, the Spanish version prevails.