Privacy policy

1. Data controller

The controller of your personal data is TUMARCAVIRAL.COM LLC, a company registered in the state of Georgia, United States, also operating in Colombia.

• Contact email: available on the contact page
• WhatsApp: +57 316 062 7276
• Address in the United States: 5284 Jimmy Carter Blvd Ste 1C, Norcross, GA 30093

2. What data we collect

We only process the data you voluntarily give us when you decide to contact us. There are no forms on this site: all communication starts because you write or book.

• When you write on WhatsApp: your phone number, your profile name and the content of the messages you send.
• When you book a consultation: the data you enter on the booking platform, usually name, email and chosen time.
• When you write by email: your email address and the content of your message.
• Browsing data: anonymous or pseudonymized technical information about the use of the site, as explained in section 7.

We do not collect sensitive data or data from minors. If you send us information of that kind on your own initiative, we will delete it.

3. For what purpose we use it

• To handle your inquiry and reply to you.
• To prepare and send you a quote or proposal.
• To provide the contracted service and follow up on it.
• To keep the history of the business relationship in our CRM.
• To improve the site and understand how it is used, in aggregate form.

We do not sell your data or hand it over to third parties for advertising purposes.

4. Legal basis for processing

We process your data based on your consent, which you express by voluntarily contacting us through any of our channels, and on the performance of the pre-contractual or contractual relationship arising from that contact. Where there is a legal or accounting obligation requiring us to keep certain information, that will be the applicable basis.

5. Your rights as data subject

In accordance with Colombia's Law 1581 of 2012 and its regulatory decrees, regarding habeas data you have the right to:

• Know and access the personal data we hold about you.
• Update and rectify data that is incomplete, inaccurate or out of date.
• Request the deletion of your data when there is no legal or contractual duty requiring us to keep it.
• Revoke the consent you have given for processing.
• Request proof of the consent given.
• File complaints with Colombia's Superintendence of Industry and Commerce.

6. How to exercise your rights

Write to the contact email stating your request and a detail that allows us to identify you. We handle inquiries within a maximum of ten business days and claims within a maximum of fifteen business days, in accordance with Colombian regulations. If we need more time, we will let you know before the deadline expires, explaining the reason.

7. Cookies and analytics

This site uses Google Tag Manager and the associated analytics tools to understand, in aggregate form, how the site is browsed: page views, time on site and traffic source. That information is not used to identify you personally.

The analytics script loads deferred and you can block cookies from your browser settings. If you block them, the site keeps working normally.

8. Providers and third parties

To provide the service we rely on third-party platforms, including a CRM where the business relationship is recorded, automation tools, messaging platforms and infrastructure and artificial intelligence model providers. These providers process the information solely to provide us the service and under their own privacy policies.

Since we operate between Colombia and the United States, some of these providers may store information outside your country of residence. By contacting us you accept that international transfer under the terms of this policy.

9. Data retention

We keep your data for as long as the business relationship lasts and for the additional time required by applicable legal, accounting or tax obligations. Once that period has passed, we delete or anonymize it.

10. Security

We apply reasonable technical and organizational measures to protect information against unauthorized access, loss or alteration. Our automation infrastructure runs on servers under our control with permanent monitoring.

11. Changes to this policy

We may update this policy when the applicable regulations or the way we operate change. Any change will be published on this same page, with its update date. We recommend reviewing it periodically.

12. Contact

If you have questions about this policy or about the processing of your data, write to us through any of the channels on the contact page.