decifra · BROTHER ASSOCIATES S.A.S.
Privacy policy
This Personal Data Processing Policy is adopted under Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and related regulations.
1. Data controller
BROTHER ASSOCIATES S.A.S., Colombian tax ID (NIT) 901881221-9, operating the decifra brand.
Address: Medellín, Antioquia, Colombia
Email: contact@decifragroup.com · WhatsApp/phone: +57 300 128 5753 · Website: decifragroup.com
2. Data we process
- Data you give us: name, company, job title, email, phone or WhatsApp, country and anything you write in our forms, calculator (only if you choose to send us your result), email or WhatsApp.
- Client business information: during an engagement we may access your company's financial, accounting, commercial or operational information. It is treated as confidential under the applicable agreement and, where it contains personal data (for example about your employees or customers), we act as a processor on your company's behalf.
- Browsing data: approximate IP address, device and browser type, pages visited and referral source, through cookies and analytics (Google Analytics), for statistical purposes only.
The calculator on this site runs in your browser: the numbers you enter are not sent or stored unless you choose to send us your result.
We do not request sensitive data (health, racial origin, political or religious views, biometrics, etc.) or data about children. Please do not include it in your messages.
3. Purposes
- Answer requests, schedule meetings and send proposals.
- Enter into, perform and manage service agreements; invoice, collect and meet accounting, tax and legal obligations.
- With your consent, send information about our services, events and finance and operations content. You can opt out at any time.
- Measure and improve this website and our tools.
- Prevent fraud, screen against restricted-party and sanctions lists (including OFAC and UN lists) and respond to lawful requests from authorities.
- Defend our rights in judicial, arbitral or administrative proceedings.
4. Consent
We process your data with your prior, express and informed consent, given by ticking the box in our forms, by contacting us by WhatsApp or email, or by unequivocal conduct. Consent is not required in the cases listed in Article 10 of Law 1581 of 2012 (for example, public data or requests from authorities).
5. Your rights
You may: (a) access, update and correct your data; (b) request proof of your consent; (c) be informed about how your data is used; (d) file complaints with Colombia's Superintendence of Industry and Commerce (SIC) after first contacting us; (e) withdraw consent and/or request deletion when there is no legal or contractual duty to keep the data; and (f) access your data free of charge.
6. How to exercise your rights
Email contact@decifragroup.com with the subject “Personal data”, including your name, a way to identify you, your specific request and how you want us to reply.
- Inquiries are answered within 10 business days, extendable by 5 business days with notice.
- Claims (correction, update, deletion or non-compliance) are answered within 15 business days, extendable by 8 business days with notice.
7. Service providers and international transfers
We use technology providers that may store data outside Colombia, mainly in the United States: web hosting and email (GoDaddy, Microsoft 365), messaging (WhatsApp/Meta), analytics (Google) and, when enabled, forms, CRM or scheduling tools (such as Formspree, HubSpot or Calendly) and artificial-intelligence tools used in our services. They act as processors under their own contractual and security terms. By accepting this policy, you authorize these transfers under Article 26 of Law 1581 of 2012.
We do not sell, rent or share personal information for cross-context behavioral advertising.
8. Security and retention
We apply reasonable technical, human and administrative safeguards (restricted access, strong passwords, two-factor authentication, encryption in transit). No system is infallible; if an incident affects your data, we will notify you and the authorities as required by law.
We keep sales-contact data for up to 2 years after the last contact unless you ask us to delete it sooner. Client data is kept for the duration of the relationship and for the period required by accounting, tax and commercial rules (up to 10 years) or to handle claims.
9. Cookies
We use strictly necessary storage to run the site (for example, to remember your currency and your cookie choice), which does not identify you. Google Analytics cookies (_ga and similar) are only activated if you accept them in the cookie notice; they collect pseudonymized browsing data (truncated IP address, device, pages visited and referral source) to measure and improve the site. You can change your choice at any time via “Cookie preferences” at the bottom of every page, or block cookies in your browser.
10. Marketing communications
We only send marketing messages to people who have agreed to receive them, through the channels they authorized, and always with an easy way to unsubscribe.
11. Users outside Colombia
If you are outside Colombia, your data is processed in Colombia and by the providers listed above. We will also honor access, correction, portability, objection or deletion requests granted by the law of your jurisdiction (for example, the EU General Data Protection Regulation or US state privacy laws), to the extent they apply. California residents may request to know or delete their personal information by emailing us.
12. Changes
Material changes will be posted on this page with a new effective date and, where appropriate, communicated before they apply.