Personal data processing policy
Last updated:
Who is responsible
The data controller for the personal data received through this site is Nicolás Maldonado Jacobsen, an individual operating under the trade name Mavecure, at Carrera 11A # 93-67, Bogotá, Colombia. Everything related to your data is handled at nicolas@mavecure.co.
This policy explains what data we collect, what we use it for, who we share it with and how you exercise your rights. It complies with Colombian Law 1581 of 2012, Decree 1377 of 2013 (now part of Decree 1074 of 2015) and the other Colombian personal data protection rules.
This English version is provided for convenience. If it differs from the Spanish version, the Spanish version prevails.
What data we collect
Diagnostic form: name, work email, company, role, the topics you're interested in, your timeline and whatever you tell us about how your company runs.
Scheduling: when you pick a time, Calendly receives your name, your email, the meeting date and the answers you gave us in the form.
Newsletter: if you subscribe, your email address, which is stored directly by Substack.
Technical data: to serve the site and protect it from abuse, Cloudflare processes connection data such as your IP address and browser type. Cloudflare Turnstile checks that the person sending the form is human.
We don't ask for sensitive data or for data about children or adolescents. Please don't include it in the free-text fields.
This site doesn't use its own advertising or analytics cookies. Embedded third-party services, such as Calendly and Turnstile, may use the cookies they need to work, under their own policies.
What we use your data for
To answer your request and prepare the diagnostic conversation.
To schedule, confirm or reschedule meetings with you.
To send you information and proposals related to what you asked us for.
To send you the newsletter, only if you subscribed.
To protect the site against spam and misuse.
To meet legal obligations and respond to requests from competent authorities.
We don't sell your data or hand it to third parties for their own purposes.
Your authorization
By ticking the authorization box and sending the form, or by subscribing to the newsletter, you give us your prior, express and informed authorization to process your data for the purposes in this policy. We keep proof of that authorization.
You can revoke it at any time, unless you have a legal or contractual duty to remain in our databases.
Your rights
As the owner of the data, you have the right to:
Know, update and correct your personal data.
Request proof of the authorization you gave us.
Be told, on request, how we have used your data.
Revoke your authorization and ask us to delete your data.
Access your personal data free of charge.
File complaints with Colombia's Superintendence of Industry and Commerce (SIC) for breaches of the law, after first sending your inquiry or claim to us.
How to exercise your rights
Write to nicolas@mavecure.co with your full name, your ID number, a clear description of your request and the email or address where you want to receive the answer. If you're acting on someone else's behalf, attach the document that authorizes you.
Inquiries: we answer within 10 business days of receiving your request. If we can't meet that deadline, we'll tell you why and answer within the following 5 business days.
Claims, to correct, update or delete data, revoke your authorization or report a breach: we answer within 15 business days, counted from the day after we receive it. If we can't meet that deadline, we'll tell you why and answer within the following 8 business days.
If your claim is missing information, we'll ask for it within 5 days of receiving it. If two months go by after our request without a reply, we'll consider the claim withdrawn.
Who we share your data with
We use providers that process data on our behalf and only to deliver their service to us:
Cloudflare, which hosts the site and verifies forms with Turnstile.
Calendly, to schedule meetings.
Substack, which runs the newsletter.
The email providers we use to receive what you send through the form and to reply to you.
Some of these providers are outside Colombia, mainly in the United States. By giving us your authorization, you accept that your data is transmitted to them for these purposes. We share only what's necessary and work with providers that have security and confidentiality measures in place.
We may also hand data to an authority that requests it in the exercise of its legal duties.
Security and retention
We use reasonable technical and administrative measures to protect your data: encrypted connections, access limited to the people on our team who need it, and providers with security controls.
We keep your data as long as it's needed for the purposes in this policy or until you ask us to delete it, unless the law requires us to keep it longer. You can unsubscribe from the newsletter at any time with the link in every email.
Effective date and changes
This policy is effective as of October 20, 2026. If we make significant changes, we'll post them on this page before applying them and, where the law requires it, ask for your authorization again.