Contact form privacy notice

01Controller and contact

SUMAR INTEGRAL SAS, tax ID 902108376-1, Carrera 52b 37-05, Rionegro, Antioquia, Colombia, is the data controller. Privacy requests and complaints are received at sumarcap@sumarintegral.com with the subject Personal data – contact form.

02Data we collect

From the form: the topic of your request, your name, email address and message, which are required; and your organization and phone number, which are optional.

From the submission: the page you write from, the link's campaign parameters when present (source, medium and campaign), the date and time, and the version and fingerprint of this notice you accepted. We do not keep your IP address or the anti-bot verification token.

We do not ask for health data. Choosing Psychological care only indicates the topic of your request. Please do not include diagnoses, symptoms, clinical records or third-party data in your message.

03Purposes

We use this data to answer your request by email, phone or WhatsApp; to record it and follow it up commercially in SUMAR's lead management system; to arrange a demonstration or proposal when you ask for one; and to produce internal aggregate figures about the requests received.

We do not sell your data, use it for third-party advertising or automated decisions, or subscribe you to newsletters. Any commercial communication other than the answer to your request requires a separate authorization.

04Authorization

By ticking the box and sending the form you authorize the processing described in this notice. The box is not pre-ticked. As proof of your authorization we keep the version of this notice, its SHA-256 fingerprint and the date and time of acceptance.

If you do not authorize it, you can write to us on WhatsApp or by email; in that case those services' terms apply and processing is limited to answering you.

05Protection against automated submissions

The form uses Cloudflare Turnstile to tell people from automated programs. To do so, Cloudflare processes technical signals from your browser and your IP address, as a processor, during verification. SUMAR does not keep that IP address. We also limit the number of submissions per address and discard automated submissions without storing them.

06Who has access and where data is hosted

Only authorized SUMAR staff handling commercial requests can access the data, with personal accounts and an audit log. Your message is stored encrypted.

Data is hosted on a server contracted with Hostinger in a data center in the United States, and anti-bot verification is provided by Cloudflare, Inc., also in the United States. This involves an international transmission of data to processors, which SUMAR carries out with the safeguards required by Colombian Law 1581 of 2012. We do not share your data with other third parties unless legally required.

07Retention

We keep your request data for up to 24 months from our last interaction with you, and then delete it. If the request leads to a contract, the necessary data becomes subject to that contract's terms. Proof of your authorization is kept for as long as the data is kept and as needed to handle complaints.

Backups are kept for up to 14 days, so deleted data may remain in an earlier backup for up to that period.

08Your rights

Under Colombian Law 1581 of 2012 you may access, update and correct your data; request proof of authorization; be informed about its use; revoke the authorization or request deletion when there is no legal or contractual duty to keep it; access it free of charge; and file complaints with the Superintendence of Industry and Commerce after completing the process with SUMAR.

Write to sumarcap@sumarintegral.com with the subject Personal data – contact form, stating your request and how to reply. Inquiries are answered within ten business days, extendable by up to five; complaints within fifteen business days, extendable by up to eight, stating the reason for the extension.

09Changes

If the purposes or processors change substantially, we will publish a new version of this notice and ask you to accept it in later submissions. Each version is archived so we know which text each person accepted.