LET'S BUILD SOMETHING

[ LEGAL / 03 ]

Personal Data Processing Policy

LEGAL

Updated: October 12, 2026

This policy implements Colombian Statutory Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Decree 1074 of 2015). It applies to all personal data Owlcy Labs collects through the website, the contact form, WhatsApp, social media and client relationships.

1. Data controller

2. Processing and purposes

We collect, store, use and, when needed, share with our processors the data you give us (name, email or phone, company, information about your project) to:

  • Answer your inquiries and prepare proposals.
  • Deliver contracted projects and invoice them.
  • Follow up commercially and, if you allow it, share lab news.
  • Measure site usage in aggregate to improve it.

Details on data, processors and retention periods are in the Privacy Policy.

We process your data with your prior, express and informed consent. On the form you give it by ticking the acceptance box; on WhatsApp, email or social media, by writing to us and sharing your data so we can reply. We keep proof of consent.

We do not intentionally process sensitive data or data from children and teenagers. If we receive it, we delete it.

4. Data subject rights

As a data subject you may, at any time and free of charge:

  • Know, update and correct your data.
  • Request proof of the consent you gave.
  • Be informed of how we use your data.
  • File complaints with the Superintendence of Industry and Commerce (SIC).
  • Revoke consent and request deletion of your data, unless a legal or contractual duty requires us to keep it.
  • Access your personal data.

5. How to exercise your rights

Write to info@owlcy.com with your name, how to reach you and what you are requesting. Owlcy Labs’ partners handle these requests.

  • Inquiries: we reply within 10 business days at most. If that is not possible, we explain why and reply within 5 more business days.
  • Claims (correction, update, deletion or non-compliance): we reply within 15 business days, extendable by 8 business days with notice of the reason. If a claim is incomplete, we ask you to complete it within 5 days; after 2 months without a reply, we consider it withdrawn.

You may only go to the SIC after completing this process with us.

6. Security and transfers

We apply reasonable technical and organizational measures to protect your data. Some processors (hosting, email, analytics) operate outside Colombia; in those cases we require safeguards equivalent to Colombian law.

7. Validity

This policy is effective from the date above. Databases are kept for as long as the processing purpose and legal periods require. Any changes will be published here.