Personal data
Personal Data Processing Policy
In force since November 9, 2026. Last updated: November 11, 2026. This is a translation; the Spanish version governs.
1. Data controller
Nicolas Velasquez Lopez, a sole trader in Colombia, doing business as VELO inc.
- Registered domicile: Soacha, Cundinamarca, Colombia
- Personal data inquiries: privacidad@velasquezlopez.com
- Phone and WhatsApp: +57 320 408 1631
- Website: velasquezlopez.com
The data controller handles all personal data inquiries and claims directly, at the email and phone number above.
2. Legal framework
This policy complies with Colombian Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Decree 1074 of 2015), which govern personal data protection in Colombia.
3. What data we process and why
| Whose | What data | Purpose |
|---|---|---|
| Businesses and traders we offer the machine to | Business name, contact person's name when the business publishes it, email, phone, address, website and social media. We take it from what the business itself publishes (its website, social media, business directories) or from public registries. | Introducing the Magia Roja CNC and offering a demonstration. |
| People who contact us by WhatsApp, email or the website | Name, phone, email and whatever they tell us in their message. | Replying, quoting and scheduling demonstrations. |
| Customers | Name or company name, ID or tax number, delivery address, billing and contact details, and the machine's service history. | Invoicing, delivery, warranty, the maintenance plan and support. |
| Website visitors | Third-party analytics (Google Analytics and Meta), only if the visitor accepts it: pages viewed, traffic source and clicks on the WhatsApp buttons. In addition, our own visit log, described in section 5. | Learning which content leads to an inquiry. We never see the content of WhatsApp conversations. |
We do not request sensitive data (health, ethnic origin, political opinions, biometrics or similar) or data about minors.
4. How we contact businesses
- If the address belongs to a company (for example, sales@company.com), every message states who is writing, why, and how to ask us not to write again.
- If the address belongs to an individual (for example, the owner's Gmail), we send a single message to introduce ourselves and ask whether they want to receive information. If they do not reply or say no, we do not write again. If they say yes, we keep that reply as proof of consent.
- Anyone can ask us to stop contacting them by replying “no” or using the unsubscribe link. We act on it the same day and add them to an exclusion list so we never write again.
5. Website visit log
Besides third-party analytics, which only runs if the visitor accepts it, the website keeps its own visit log.
- What is recorded: the IP address, pages visited, time on the page, sections viewed, clicks, device and browser type, the referring page and, if the link came from one of our emails, the company that email was sent to.
- Where it is stored: VELO inc stores it on its own server. It uses no cookies and is not shared with third parties.
- Purpose: learning which content is useful and following up with those who contacted us.
- How long: the IP address is deleted after 180 days. The rest is kept without the IP, in aggregate form.
- How to object: write to privacidad@velasquezlopez.com.
6. Your rights
Anyone whose data we process may, free of charge:
- Access, update and correct their data.
- Request proof of the consent they gave, except where the law does not require it.
- Be told, on request, how their data has been used.
- Revoke consent or ask us to delete their data, unless a legal or contractual duty requires us to keep it.
- Consult their data free of charge.
- File a complaint with Colombia's Superintendence of Industry and Commerce (SIC), after first submitting the inquiry or claim to us.
7. How to exercise your rights
Write to privacidad@velasquezlopez.com or contact us on WhatsApp. Include your name, how to identify you, what you are requesting and, for a claim, the facts and any documents you wish to provide.
- Inquiries (what data we hold): we reply within 10 business days. If we cannot, we tell you why and reply within 5 more business days.
- Claims (correct, update, delete or revoke): we reply within 15 business days from the day after we receive the claim. If we cannot, we tell you why and reply within 8 more business days. If a claim is incomplete, we ask for the missing information within 5 days. If it is not provided within 2 months, the claim is considered withdrawn.
8. Service providers that process data on our behalf
We use providers that store or process data on our behalf (data processors). Some are located outside Colombia:
| Provider | Purpose | Country |
|---|---|---|
| Google (Google Workspace) | Email and documents | United States |
| Hostinger | Website server | United States |
| Meta (WhatsApp) | Conversations with customers and prospects | United States |
| Google Analytics and Meta | Web analytics, only with consent | United States |
The United States is among the countries the SIC recognizes as providing an adequate level of data protection. If we add a new provider, we will add it to this list.
9. Security
Data is stored in protected accounts and on a server with restricted access. Only VELO inc staff who need it for their work can access it.
10. How long we keep data
- Prospects who do not reply: deleted 12 months after the last contact.
- Exclusion list: kept indefinitely, since it is what ensures we never write again.
- Customers: for the duration of the business relationship, warranty and maintenance, and afterwards for as long as accounting, tax and commercial rules require.
- Third-party analytics: as long as each tool retains it, according to its settings.
- Our own visit log: the IP address, 180 days; the rest, without the IP and in aggregate form.
11. Changes to this policy
If we make a significant change, we will publish it on this page and notify data subjects before it takes effect.