Legal document

Personal Data Processing Policy

Effective: October 2, 2026 · Last updated: October 2, 2026 · Applies to tutablero.com and its subdomains. This is a courtesy translation: if there is any difference, the Spanish version prevails.

This policy explains, in plain language, what we do with the personal data of people who contact us through tutablero.com. It is issued in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and the other Colombian data protection (habeas data) rules.

1. Who is responsible

2. What data we collect

We only collect what you give us when you fill in the contact form or write to us:

• Name.
• Email address.
• The text you write in “What do you want to connect?” (for example, the tools you use).
• Date and time of submission, the language of the page you used and the record of your authorization.
• If you write to us on WhatsApp, your phone number and the content of the conversation.

We do not ask for sensitive data (health, racial origin, political orientation, biometric data, among others) or data of minors, and we ask you not to send them. This site is not directed to people under 18.

In addition, to stop spam, the server temporarily keeps submission counters associated with an encrypted fingerprint of your IP address and your email (we do not store the IP or the email in clear text in those counters). The counters reset on their own after an hour or a day.

3. What we use it for

We use your data only to:

1. Reply to your request and send you the automatic confirmation that we received it.
2. Contact you (by email or WhatsApp) to run the free assessment and, if you are interested, send you a proposal or quote.
3. Provide the service if you decide to hire us, and handle later questions, requests and complaints.
4. Protect the form against abuse and spam.
5. Meet legal, accounting and tax obligations, where applicable.

We do not sell your data, we do not hand it to third parties for advertising and we do not use it to build profiles. If one day we want to send you news or commercial content, we will ask for separate authorization.

Basis for processing. We process your data with your prior, express and informed authorization, which you give by ticking the box on the form. You can withdraw it at any time (see section 7).

4. Who we share it with

To run the site we rely on providers that process data on our behalf (processors) or that receive data when you decide to use them:

Some of these providers are outside Colombia (for example, in the United States). When that happens, we make an international transmission or transfer of data to recognized providers that apply their own security measures, and only for the purposes in section 3.

We may also hand data to Colombian authorities when a law or a court or administrative order requires it.

5. How long we keep it

• If we do not end up working together: we keep your request for up to 2 years from the last contact and then delete it.
• If you hire us: during the contractual relationship and for as long as accounting, tax and contractual liability rules require.
• If you ask for deletion of your data, we delete it, unless a legal or contractual obligation requires us to keep it.

This site does not store form data in its own database: the request arrives as an email and is kept in the mailboxes listed in section 4.

6. Your rights as a data subject

Under article 8 of Law 1581 of 2012, you have the right to:

• Know, update and correct your personal data.
• Request proof of the authorization you gave us.
• Be informed, if you ask, about how we have used your data.
• File complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law, once you have exhausted the inquiry or claim with us.
• Withdraw the authorization and/or request deletion of your data when principles, rights and guarantees are not respected, or when it is no longer needed.
• Access your personal data free of charge.

7. How to exercise your rights

Write to info@tutablero.com with the subject “Personal data” and include:

• your name and the email you used to contact us,
• what you are asking for (inquiry, update, correction, deletion or withdrawal), and
• any extra detail that helps us locate your information.

Inquiries: we answer within 10 business days. If we cannot do it in that time, we will tell you why and give you a new date, which will not exceed 5 additional business days.

Claims (to correct, update or delete data, or for alleged non-compliance): we answer within 15 business days. If we need more time, we will tell you and the answer will not exceed 8 additional business days. If your claim is incomplete, we will ask you to complete it within the following 5 days.

If you are not satisfied with our answer, you can go to the Superintendence of Industry and Commerce (sic.gov.co).

Visitors from other countries. This policy is issued under Colombian law. If you contact us from another country, we will handle your request under Colombian law and will do our best to honor reasonable requests under the data protection law that applies where you live.

8. Security

We apply reasonable measures to protect the data: encrypted connection (HTTPS) across the whole site, emails sent over an encrypted connection, protection of the form against abuse, restricted access to the mailboxes where requests arrive, and credentials that are protected and blocked from public access. No system is infallible; if an incident affects your data, we will manage it and inform you as the law requires.

9. Cookies and tracking

Today this site does not set cookies or store information in your browser, and does not use analytics or advertising tools. All fonts, maps and scripts are served from this same site: your browser does not contact third parties while you browse (only if you open a link to WhatsApp).

If in the future we add analytics or other tools that use cookies, we will update this policy and let you know on the site before turning them on.

10. Data of the companies that hire us

When we connect a company's tools (CRM, billing, support, spreadsheets) to build its dashboards, that company remains the controller of the data of its own customers, employees or users, and TuTablero acts as processor: it processes the data only to provide the agreed service, with minimum access, under a confidentiality agreement and without using it for its own purposes. The specific terms are set in the proposal or contract of each project.

11. Changes and validity

We may update this policy. We will publish the new version at this same address with its update date and, if the change significantly affects the use of your data, we will let you know. This policy applies from the date above and for as long as [to be completed] processes personal data.

See also the Terms and Conditions of the site.