1. Data controller
Izkuna S.A.S. (or “in formation” where applicable), domiciled in Bogotá, Colombia. Data protection contact: contact@izkuna.site.
2. Legal framework
Personal data is processed under Colombian Law 1581 of 2012, Decree 1377 of 2013, Decree 886 of 2014, Decree 1074 of 2015, and the guidance of the Superintendence of Industry and Commerce (SIC). Where the GDPR or other international rules apply to a client or data subject, Izkuna will act consistently with those obligations for the relevant processing.
3. Data we collect
- Identification and contact data: name, company, email, phone, country, timezone.
- Account data: password hash, preferred language, preferred display currency, consents.
- Engagement data: authorized scope, technical contacts, change window, findings, and reports.
- Billing data: transaction identifiers and status. Card data may be processed by Wompi (Bancolombia) for payments in Colombia or by Mercado Pago for international card payments; Izkuna never stores it.
- Technical data: IP address, request metadata, cookies, and language preferences.
4. Purposes
- Providing contracted services and managing accounts.
- Billing, payment reconciliation, and tax/accounting obligations.
- Communicating about engagements, deliverables, and meetings.
- Security, fraud prevention, and platform administration.
- Service improvement using aggregated, non-identifying information.
- Marketing only with prior, express, informed authorization, which may be revoked at any time.
5. Authorization
By creating an account and accepting this policy, the data subject authorizes the processing described above. Consent is required for marketing and may be withdrawn without affecting the service.
6. Data subject rights
Data subjects may access, update, rectify, request deletion, oppose specific purposes, and revoke authorization (ARCO rights), and may file a complaint with the SIC when they believe their rights have been violated.
7. How to exercise rights
Send an email to contact@izkuna.site with the subject “ARCO Request — [Access/Rectification/Deletion/Opposition]”, including full name, identification number or NIT, and a description of the request. Consultations and claims are answered within 15 business days, extendable by 8 days with justification. If unresolved, the data subject may contact the SIC at www.sic.gov.co.
8. Transfers and sub-processors
We may share data with providers acting as processors:
| Provider | Purpose | Country |
|---|---|---|
| Render | Hosting and deployment | United States |
| Wompi / Bancolombia | Payments in Colombia | Colombia |
| Mercado Pago | International card payments | Argentina / Colombia |
| Google Workspace | Email and collaboration | United States |
These providers process data only for the agreed purposes and under contractual confidentiality and security obligations. International transfers rely on the data subject's authorization and the applicable contractual safeguards. We do not sell personal data.
9. Security
- HTTPS/TLS encryption in transit.
- Password hashing with bcrypt.
- Restricted administrative access with authentication.
- Least-privilege access and periodic backups.
- No storage of card data on Izkuna systems.
10. Retention
- Client and engagement data: during the relationship and for 5 years for accounting and professional liability purposes.
- Reports: 5 years, unless a longer period is required by law or contract.
- Marketing data: until the data subject objects or withdraws consent.
11. Cookies
We use essential cookies for sessions, language, and display currency. Analytics cookies, if enabled, are used only in aggregate form. You can disable cookies in your browser, but some features may stop working.
12. Minors
Our services are intended for businesses and adults. We do not knowingly collect data from minors under 18. If we detect such data, we will delete it.
13. National Database Registry (RNBD)
When Izkuna meets the thresholds of Decree 886 of 2014 and Decree 1074 of 2015 —in particular, databases whose total assets exceed 100,000 UVT— it will register the relevant databases with the SIC.
14. Changes and contact
We may update this policy and will publish the new version with its effective date. Questions: contact@izkuna.site.