Skip to content

Personal data policy.

How we collect, use and protect your data, and how to exercise your rights as a data subject under Colombian Law 1581 of 2012.

Effective November 8, 2026

  1. 01Data controller

    Zafhiro Color S.A.S., a company domiciled in Bogotá, Colombia, is the controller of the personal data it collects through this website and its customer service channels.

    • Address: Cra. 72F Bis # 38D-45, Bogotá
    • Email: comercial@zafhiro.com
    • Phone and WhatsApp: +57 317 302 3313
    • Website: zafhiro.com
  2. 02Legal framework

    This policy is governed by Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 (incorporated into Decree 1074 of 2015) and any rules that amend or complement them. The Spanish version of this policy prevails.

  3. 03Data we collect

    Only the data you give us when you request a quote through the form, WhatsApp, email or phone:

    • Name.
    • Phone or WhatsApp number.
    • Email address, if you give it to us.
    • The service you're interested in and the description of your project: measurements, materials, quantities and any files you send us.

    We don't ask for sensitive data or data about children or adolescents; please don't include it in your messages.

    To protect the form from automated submissions, the site analyzes technical browser signals, and our hosting provider logs connection data such as the IP address. This data is used only for security, not to identify you or for advertising.

  4. 04How we use your data

    • To answer your request and prepare the quote.
    • To contact you by phone, WhatsApp or email about that request and any job you order.
    • To send you a confirmation that we received your request.
    • To meet legal, accounting and tax obligations if a purchase goes ahead.
    • To protect the site from spam and abuse.

    We don't sell or share your data, and we don't send you advertising without your prior authorization.

  5. 05Your authorization

    By ticking the authorization box on the form, or by writing to us through our channels, you give us your prior, express and informed authorization to process your data for the purposes above. We keep a record of that authorization.

  6. 06Providers that help us process your data

    To run the site and email we use providers that process data on our behalf (processors) and whose servers may be outside Colombia:

    • Vercel Inc. (United States): website hosting and bot protection.
    • Resend (United States): delivery of the form emails.
    • Microsoft 365: corporate email inboxes.

    These providers may only use the data to provide their service to us and apply recognized security measures. If you choose to write to us on WhatsApp, that conversation is also governed by WhatsApp's terms.

  7. 07Your rights

    As the data subject you can:

    • Know, update and correct your data.
    • Request proof of the authorization you gave us.
    • Find out how we have used your data.
    • Revoke your authorization or ask us to delete your data, when there is no legal or contractual duty to keep it.
    • Access your data free of charge.
    • File complaints with Colombia's Superintendency of Industry and Commerce after submitting your query or claim to us.
  8. 08How to exercise your rights

    Email us at comercial@zafhiro.com with the subject "Personal data", including your name, a detail that lets us identify you, what you're requesting and a way to reply to you. The sales department of Zafhiro Color S.A.S. handles these requests.

    • Queries: we reply within 10 business days at most. If that's not possible, we tell you why and give you a new date, no more than 5 business days later.
    • Claims (correction, update, deletion or revocation): we reply within 15 business days at most. If that's not possible, we tell you why and give you a new date, no more than 8 business days later. If the claim is missing information, we ask you to complete it within the next 5 days; if 2 months pass without a reply, the claim is considered withdrawn.
  9. 09Security and retention

    We apply reasonable technical and administrative measures to protect your data against loss, unauthorized access or misuse. We keep it while it's needed for the purposes described and to meet legal obligations; after that we delete it.

  10. 10Effective date and changes

    This policy is effective from November 8, 2026. If we change it substantially, we'll publish the new version on this page with its date.