Privacy policy

Who handles your data

The data controller is Verttical S.A.S., domiciled in Barranquilla, Colombia. For anything concerning your data, you can write to service@verttical.co.

What we collect

From the diagnostic request form: name, job title, company, work email, and the description of the process you want to improve. Those are the form's five fields, and we collect no others. Please do not include other people's personal data in that description.

If you tick the authorization box and leave the page without sending the form, we keep what you had typed, with a note that the submission was not completed. It is saved after a few seconds without typing and when you leave the page, always in a single record that is updated. Without the box ticked, we keep nothing of what you type. If you want us to delete what was saved, write to service@verttical.co.

Automatically, your IP address, which is used only to limit repeated submissions from the same origin, for the form and for browsing events, and to prevent automated use. It is not stored with the rest of the data.

If you arrive from an ad or from another site, we also keep the campaign parameters in the address (utm_source, utm_medium, utm_campaign, and utm_content), the click identifier that Google or Meta add, and the domain of the page you came from. They tell us which campaign works, and on their own they do not identify you. They are held in your browser for the session, without cookies. They go with your record when you send the form, or when you leave it unfinished with the box ticked; the campaign parameters and the referring domain, without the click identifier, also go with each browsing event.

We also record, without personal data, the browsing events of each visit: each page of the site you open, clicks on the action buttons and on the scheduling link, starting and sending the form, and visits to the booking confirmation page. With each event we store the date, the page, the language, the button clicked and its destination, the campaign parameters, the referring domain, and a random identifier created for each visit. That identifier is held in your browser for the session, without cookies, and is never stored with your form record. With the events we do not store your IP address or your browser's details.

Aggregate statistics through Vercel Web Analytics: page views, traffic sources, and the same browsing events. They use no cookies and cannot identify you.

What we use it for

The form data, to reply to your request, schedule the diagnostic, and send you confirmation of what we received. If you ticked the box and did not end up sending the form, what you typed is used for the same thing: to reply to you and offer you the diagnostic. Nothing else.

The browsing events, to learn which campaigns bring visits, at which step the request process stops, and how to improve it.

We will not send you unsolicited marketing or pass your data to third parties for advertising.

On what basis

The prior, express, and informed authorization you give by ticking the authorization box on the form, under Colombian Law 1581 of 2012 and Decree 1377 of 2013.

If you write to us from the European Economic Area, the legal basis is your consent under Article 6(1)(a) of the General Data Protection Regulation.

Who else processes it

To provide the service, we rely on three providers acting as data processors:

Google LLC, where form records and browsing events are stored in spreadsheets. Vercel Inc., which hosts the site and provides the aggregate statistics. Resend, which delivers the internal notice of each request and the confirmation email you receive.

All three process data outside Colombia, mainly in the United States and the European Union.

How long we keep it

We keep the data for two years from the last contact, or until you ask us to delete it. After that, it is deleted from the spreadsheet and from email.

Your rights

Under Colombian Law 1581 of 2012, you can access, update, and correct your data; request proof of the authorization you gave; be told how we have used it; revoke the authorization or request its deletion; access it at no cost; and file a complaint with the Superintendency of Industry and Commerce, Colombia's data protection authority, once you have first raised a query or a claim with us.

To exercise them, write to service@verttical.co. Queries (consultas), to find out what data of yours we hold and how we use it, are answered within 10 business days of receipt, under Article 14 of Law 1581. If that is not possible, we tell you the reason and the new date beforehand, no more than 5 business days later.

Claims (reclamos), to correct, update, or delete your data, revoke the authorization, or report a breach of the law, are answered within 15 business days from the day after receipt, under Article 15 of Law 1581. If that is not possible, we tell you the reason and the new date beforehand, no more than 8 business days later. If a claim arrives incomplete, we ask you for what is missing within 5 days of receipt; if two months pass after that request without an answer, the claim is considered withdrawn.

Changes to this policy

If we change how we handle your data, we will update this page and the date shown above.