Privacy and personal data processing policy

Last updated: March 2026


1. IDENTIFICATION OF THE DATA CONTROLLER

In compliance with Law 1581 of 2012, Decree 1377 of 2013, and other concurring regulations on personal data protection in Colombia, we inform you that the data controller for personal data collected through the website lorehoyuela.com is:

Name: Lore Hoyuela Activity: Personal brand and marketing strategic consulting Address: Bogotá, Colombia Email: info@lorehoyuela.com Website: www.lorehoyuela.com


2. APPLICABLE LEGAL FRAMEWORK

This Privacy Policy is governed by the following regulations:

In Colombia: Law 1581 of 2012 on Personal Data Protection, Decree 1377 of 2013, Decree 1074 of 2015, circulars from the Superintendence of Industry and Commerce, and other regulations that modify or complement them.

For users in the European Union and Spain: General Data Protection Regulation (GDPR) · EU Regulation 2016/679.

For users in the United States: California Consumer Privacy Act (CCPA) where applicable.


3. PERSONAL DATA WE COLLECT

We collect the following types of personal data depending on the user's interaction with the site:

3.1 Data provided directly by the user:

  • Full name

  • Email address

  • Phone number or WhatsApp

  • Country and city of residence

  • Information about your professional activity or business

  • General financial information related to your business when relevant for providing consulting services

  • Any other information voluntarily provided by the user through the site's forms

3.2 Automatically collected data:

  • IP address

  • Browser type and version

  • Operating system

  • Pages visited and time spent

  • Referral source to the site

  • Browsing behavior data

3.3 Transaction data:

  • Information necessary to process payments through Shopify Payments gateway

  • Purchase history on the site


4. PURPOSES OF PROCESSING

The personal data collected will be used for the following purposes:

4.1 Main purposes:

  • Manage and execute contracted consulting services

  • Process payments and manage commercial transactions

  • Send communications related to purchased or requested services

  • Respond to inquiries, requests, and forms submitted through the site

  • Manage the pre-qualification process for consulting programs

  • Coordinate sessions and appointments through Calendly

  • Send the physical book purchased and manage its dispatch

4.2 Secondary purposes with consent:

  • Send marketing communications and educational content through Mailchimp when the user has voluntarily subscribed

  • Perform statistical analysis on user behavior on the site through Google Analytics

  • Display relevant advertising through Meta Pixel from Facebook and Instagram

  • Improve the user experience on the website

  • Conduct market research and trend analysis in an aggregated and anonymized manner


5. PLATFORMS AND THIRD PARTIES RECEIVING DATA

In the development of our activity, we use the following platforms that may have access to users' personal data:

Shopify Inc. E-commerce platform that hosts the website and processes payment transactions. Privacy policy available at: www.shopify.com/legal/privacy

Google Analytics · Google LLC Web analytics tool that collects anonymized browsing behavior data. Privacy policy available at: policies.google.com/privacy

Meta Platforms Inc. · Facebook and Instagram Tracking pixel for advertising campaign optimization. Privacy policy available at: www.facebook.com/privacy/policy

Mailchimp · The Rocket Science Group LLC Email marketing platform used for sending communications to subscribers. Privacy policy available at: mailchimp.com/legal/privacy

Calendly LLC Appointment scheduling platform. Privacy policy available at: calendly.com/privacy

All mentioned third parties have their own privacy policies and are responsible for processing the data they receive according to their terms. Lore Hoyuela is not responsible for the processing of personal data carried out by these third parties.


6. RIGHTS OF DATA SUBJECTS

In compliance with Law 1581 of 2012 and the GDPR where applicable, personal data subjects have the following rights:

  • Know, update, and rectify their personal data

  • Request proof of the authorization granted for processing

  • Be informed about the use that has been given to their personal data

  • File complaints before the Superintendence of Industry and Commerce for legal infringements

  • Revoke authorization and request the deletion of their data when there is no legal or contractual obligation preventing it

  • Access their personal data free of charge that has been processed

  • For users in the European Union: right to data portability and right to be forgotten in accordance with the GDPR

To exercise any of these rights, the data subject can write to info@lorehoyuela.com stating their full name, the right they wish to exercise, and a description of their request. We will respond within a maximum of ten business days for inquiries and fifteen business days for claims in accordance with Colombian law.


7. COOKIES AND TRACKING TECHNOLOGIES

The website lorehoyuela.com uses cookies and similar technologies to improve the browsing experience and collect statistical information. The types of cookies used are:

Technical or essential cookies: Necessary for the basic functioning of the site. Cannot be deactivated.

Analytical cookies: Used by Google Analytics to collect statistical information about site usage in an anonymized manner.

Marketing cookies: Used by Meta Pixel to optimize the delivery of relevant advertising on Facebook and Instagram.

The user can configure their browser to reject or delete cookies. However, deactivating certain cookies may affect the site's functionality. By continuing to browse the site, the user accepts the use of cookies in accordance with this policy.


8. DATA SECURITY

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. Payment processing is carried out through Shopify Payments' secure infrastructure, which complies with PCI DSS standards.


9. INTERNATIONAL DATA TRANSFERS

Given that we use platforms with servers located outside of Colombia, such as Shopify, Google, Meta, and Mailchimp, users' personal data may be transferred and processed in other countries. These transfers are carried out in accordance with applicable legal mechanisms, including standard contractual clauses approved by competent authorities and internationally recognized data protection frameworks.


10. DATA RETENTION

We retain personal data for the time necessary to fulfill the purposes described in this policy and in accordance with applicable legal obligations. Customer data is retained for the duration of the commercial relationship and for an additional period of five years to comply with tax and accounting obligations. Email subscriber data is retained until the user requests its deletion or unsubscribes from the list.


11. MINORS

The services offered on lorehoyuela.com are exclusively aimed at individuals over 18 years of age. We do not intentionally collect personal data from minors. If we become aware that we have collected data from a minor without the verifiable consent of their parents or guardians, we will immediately delete such information.


12. MODIFICATIONS TO THIS POLICY

We reserve the right to modify this Privacy Policy at any time. Any modification will be published on this page with the corresponding update date. Continued use of the site after the publication of changes implies acceptance of the modified policy. We recommend reviewing this policy periodically.


13. CONTACT AND COMPLAINTS

For any inquiries, requests, or complaints related to the processing of personal data, you can contact us at:

Email: info@lorehoyuela.com Website: www.lorehoyuela.com City: Bogotá, Colombia