Privacy Notice

1. Who we are

DEKTRIA ("we", "us") is responsible for the personal data collected through dektria.com and in our work with clients. Our founders work from Colombia and the United States, and we serve clients in the United States, Canada and Colombia. We have designated a Privacy Officer who is accountable for how we handle personal data.

2. What personal data we collect

We collect only what you give us through our forms or by email, plus basic technical data needed to run the website.

We do not use advertising or tracking cookies. If we add website analytics in the future, we will update this notice before doing so.

3. Why we use it

We use your data only for these purposes:

1. Respond to your enquiry and arrange a conversation.
2. Send you the Growth Diagnostic overview and its download link.
3. Follow up about the Growth Diagnostic and related DEKTRIA services. You can opt out at any time.
4. Prepare proposals and manage our relationship if you become a client.
5. Keep the website secure, prevent spam and abuse, and fix technical problems.
6. Meet our legal obligations and respond to lawful requests from authorities.

We do not sell or rent your personal data, and we do not use it to make automated decisions about you.

4. Your consent

We process your data with your consent (called "authorization" under Colombian law), which you give by ticking the consent box on our forms. The box is never pre-ticked, and it states what you are agreeing to. When you email us directly, you consent to us using your details to reply.

We keep a record of each consent — what you agreed to, and when — so we can show it if asked. You can withdraw your consent at any time by writing to privacy@dektria.com or using the unsubscribe option in any email we send. Withdrawal does not affect processing that took place before it.

5. Who processes it with us

A small number of service providers run our website and email on our behalf. They process your data only on our instructions.

Cross-border processing. Your data is stored mainly in the United States, where these providers operate, and is accessed by our founders in the United States and Colombia. It may therefore be processed outside the country where you live, and authorities in those countries may be able to access it under their laws. By giving your consent, you accept this. We use providers that offer contractual and security safeguards, and we apply this notice wherever your data is handled.

Our website links to LinkedIn. When you visit LinkedIn, its own privacy policy applies.

6. How long we keep it

We keep your data only as long as the purpose requires, then delete it.

7. How we protect it

• All connections to dektria.com are encrypted (HTTPS).
• The Growth Diagnostic file is not publicly accessible. It is delivered only through personal, signed links that expire after 7 days.
• Access to the hello@dektria.com mailbox is limited to DEKTRIA's founders.
• Our forms include spam and abuse controls.

No system is completely secure. If a security incident affects your data, we will notify you and the relevant authority as the law requires: the Superintendencia de Industria y Comercio (SIC) in Colombia, the Office of the Privacy Commissioner of Canada (or the Commission d'accès à l'information in Quebec), and the notices required by state law in the United States.

8. Your rights

Wherever you live, you can:

• Access the personal data we hold about you, free of charge.
• Correct or update it.
• Ask us to delete it, unless a legal or contractual duty requires us to keep it.
• Withdraw your consent or unsubscribe from our emails at any time.
• Exercise these rights without being treated differently for doing so.

Depending on where you live, the law also gives you these rights:

9. How to exercise your rights

Email privacy@dektria.com with the subject "Privacy request". Include your name, the email address you used with us, where you live, and what you are asking for. We may ask you to confirm your identity before acting. Our Privacy Officer handles every request, and we always apply the shortest deadline that the law sets for you.

In Colombia, if a claim is missing information, we will ask for it within 5 business days; if we do not receive it within 2 months, the claim is treated as withdrawn. If you are not satisfied with our answer, you can complain to the authority listed for your country in section 8.

10. Marketing emails

We send follow-up emails about our services only to people who have consented to receive them. Every such email:

• Identifies DEKTRIA as the sender and includes our postal address.
• Includes a simple way to unsubscribe, such as a link or replying "unsubscribe".

We process unsubscribe requests within 10 business days, and you will not need to log in or pay anything to unsubscribe. Messages directly related to a request you made, such as your download link, are not marketing emails.

11. Children, sensitive data and changes

Children. Our website and services are intended for businesses. We do not knowingly collect data from anyone under 18.

Sensitive data. We do not ask for sensitive data, such as health, biometric or political information. Please do not include it in your messages.

Changes. If we update this notice, we will publish the new version here with its effective date. If a change affects the purposes you authorized, we will ask for your authorization again.