Privacy notice

Version of October 22, 2026. This notice is also SIMYL Research’s personal data processing policy under Colombian Statutory Law 1581 of 2012 and Decree 1074 of 2015, which compiles Decree 1377 of 2013. It is written to be understood without a lawyer; if anything is unclear, ask us.

Data controller

SIMYL RESEARCH S.A.S., Tax ID (NIT) 901945779-2. For anything related to your data, write to contact@simylresearch.com; the company’s management handles queries and claims.

What data we process and why

  • When you write to us through the form or by email: your name, your email, your phone number if you provide it (it is optional) and the content of your message. We use them to reply, to prepare a proposal if you ask for one and to follow up on a possible business relationship. We do not use them for advertising or hand them to third parties for their own purposes.
  • When we work together: the contact and billing details needed for the contract, the electronic invoice and our accounting and tax obligations.
  • When you visit the site: your theme preference and your analytics choice, stored in your browser; Google Analytics data only if you accept optional analytics; Cloudflare Web Analytics’ cookie-less measurement; and the hosting provider’s technical logs. We explain this under “Preferences and measurement”.

We do not ask for sensitive data or data about minors. Do not include passwords, credentials or personal data of your clients or users in your messages: to exchange confidential information we sign a non-disclosure agreement and use the channel we agree on.

Your authorization

When you submit the form, you tick a box authorizing this processing. The date, the time and the version of the notice you accepted are recorded with the submission; you can ask us for that proof. If you write to us by email or book a call, we take it that you authorize the processing needed to attend to you, as Decree 1074 of 2015 allows for unequivocal conduct. You can withdraw your authorization at any time (see “Your rights”); the withdrawal does not affect what was already processed or data we must keep under a contract or the law.

Who else processes data

These providers process data on our behalf, under their data processing agreements and privacy policies:

In addition, jsDelivr (Volentio JSD Limited, United Kingdom) serves the diagrams of some articles on its own account: when you open them, your browser requests the files from it and sends it your IP address. jsDelivr’s privacy policy.

This means transferring data outside Colombia, mainly to the United States, a country the Colombian Superintendence of Industry and Commerce recognizes as offering an adequate level of protection (External Circular 005 of 2017). Your authorization expressly covers that processing inside or outside Colombia, and each provider is bound by its data processing agreement. We do not share your data with other third parties unless an authority requires it by law.

Preferences and measurement

We store your light or dark theme preference and your analytics choice in your browser. You can clear them through your browser’s storage settings.

Google Analytics, through Google Tag Manager, loads only if you accept optional analytics. It measures visits and interaction with pages. You can decline without losing access to the site or the form, and change your choice through “Analytics preferences” in the footer. Withdrawing it reloads the page and removes the first-party Google Analytics cookies accessible from this site; data already sent is not deleted by that change.

Hosting uses Cloudflare, which processes technical requests to deliver and protect the site and includes Cloudflare Web Analytics to measure visits and performance without analytics cookies. This measurement is independent of the Google Analytics preference.

How long we keep data

  • Contact messages and conversations: while the conversation or the business relationship is active and up to two years after the last contact; then we delete them from our email and remove the copy Formspree keeps, from its dashboard. You can ask for deletion earlier.
  • Contract and invoice data: for the period required by Colombian accounting and tax rules.
  • Preferences in your browser: until you clear them.
  • Measurement data: it is aggregated or pseudonymous and each provider keeps it under its own policy.

We keep contact data only for as long as it is needed to handle the relationship or to meet a legal obligation. We review the database periodically and delete or anonymize records with no current purpose, subject to legal retention periods.

Security

Connections to the site and the form are encrypted; email transport is encrypted when the mail server at the other end supports it. Only the people who need your data to attend to you have access to it, and each provider applies its own measures. No system is infallible: if an incident affected your data, we would inform you and report it to the Superintendence of Industry and Commerce, as the law requires.

Your rights

As the data subject you can:

  • know, update and correct your data;
  • ask for proof of the authorization you gave us;
  • learn what use we have made of it;
  • withdraw your authorization or ask us to delete the data, unless a contract or a legal obligation requires us to keep it;
  • access it free of charge;
  • file a complaint with the Superintendence of Industry and Commerce if you believe we breach the law, after first raising the claim with us.

How to exercise them

Write to contact@simylresearch.com with your name, an address for notifications (postal or email), what you request and, for a claim, the facts and the documents that support it. If you act on behalf of someone else, show proof of representation.

  • Queries (what data we hold and what we use it for): we answer within ten business days of receipt. If that is not possible, we tell you before the deadline and answer within the following five business days.
  • Claims (correction, update, deletion or breach of the law): if information is missing, we ask for it within five days; if you do not complete it within two months, we take the claim as withdrawn. We answer within fifteen business days of receiving the complete claim; if that is not possible, we tell you and answer within the following eight business days. Meanwhile, the record is marked “claim in progress”.

These deadlines are those of articles 14 and 15 of Law 1581 of 2012.

If you are in the European Union, the European Economic Area or the United Kingdom

We work with clients in that region, so the General Data Protection Regulation (GDPR) or its UK equivalent may apply to your data. The legal bases for the processing are your consent, the steps prior to a contract that you request from us and our legitimate interest in replying and keeping a record of the relationship. In addition to the rights above, you have the right to restriction of processing, to portability, to object and to withdraw consent without affecting prior processing, and you can lodge a complaint with the supervisory authority of your country. If you write to us from that region, your data is processed in Colombia, where the company is established, and by the providers listed in this notice; each of them states in its policy and its agreements the safeguards under which it transfers data from that region, such as standard contractual clauses or certification under the EU-U.S. Data Privacy Framework.

Changes to this notice

We will publish each version here with its date. The version you accepted when submitting the form is recorded with your submission.