YaEsta.online

Legal notice

Personal Data Treatment Policy

In compliance with Colombian Law 1581 of 2012 and Decree 1377 of 2013 — Last updated: May 8, 2026

This English version is an unofficial translation provided for convenience. The Spanish version above is the legally binding text under Colombian law.

1. Data controller

YaEsta.online is the controller of personal data collected through this website and through the websites we host for our clients. Domiciled in the department of Cauca, Colombia. Contact details:

2. Personal data we collect

We only collect data needed to provide our services: client identification (name, ID, address), contact details, billing data, and technical access logs. We do not collect sensitive data (sexual orientation, political ideology, religion, health, biometric data) without specific additional consent.

3. Purposes

Your data is processed exclusively to: execute the Service Contract, issue invoices, provide technical support, communicate operational notices, comply with Colombian legal/accounting/tax obligations, and retain contract records for the legally required period. Your data is not sold, nor shared with third parties beyond what is strictly necessary for service delivery.

4. Data through hosted client sites

When we host a client's website, we may have technical access to data submitted by the client's end users. In this scenario the client is the Data Controller, YaEsta.online acts as Data Processor (Article 25 of Decree 1377 of 2013). The client is responsible for obtaining their users' consent and publishing their own data treatment policy.

5. Your rights

Under Colombian Law 1581 of 2012 you have the right to: know what data of yours is being processed; update and rectify it; request proof of authorization; revoke authorization and/or request data deletion when no legal obligation requires retention; file complaints with the Superintendencia de Industria y Comercio (SIC) for misuse of your data.

6. Exercising your rights

Send a request via the email or WhatsApp in section 1. We respond to inquiries within ten (10) business days; complaints within fifteen (15) business days.

7. Retention

Personal data is retained during the contract term and for up to ten (10) years afterwards, per Colombian accounting, tax and commercial obligations. After this period, or upon explicit deletion request, data is securely erased.

8. Security

We apply reasonable technical and administrative safeguards: encryption in transit (SSL/TLS), server access control, periodic backups, and per-client data isolation. No system is 100% breach-proof; in case of a security incident, we notify clients without undue delay.

9. Cookies

This site uses only technical cookies (language preference, session). No third-party advertising or analytics cookies without your consent.

10. Changes

This policy may be updated. The last-update date appears at the top. Material changes are emailed to active clients.

11. Contact and authority

For questions or to exercise your rights, contact us via section 1. Colombia's control authority is the Superintendencia de Industria y Comercio (sic.gov.co).