Personal Data Processing and Privacy Policy

1. Data controller

Prismond is a digital solutions agency that develops custom software for small and medium-sized businesses, including web systems, automations, AI assistants, online stores, websites, landing pages and other technology solutions.

For purposes of this Policy, the data controller is:

• Controller: Prismond, a business brand based in Colombia.
• Privacy contact email: contact@prismond.com

The controller’s full identification details will be provided to any data subject who requests them through this email address.

This Policy is primarily based on Colombia’s Ley 1581 de 2012, Decreto 1377 de 2013, incorporated into Decreto 1074 de 2015, and applicable guidance issued by the Superintendencia de Industria y Comercio (SIC).

2. Scope and information we may receive

The Prismond website is primarily informational. It currently does not provide user accounts, an on-site registration database, online payments, a newsletter, behavioral advertising, Google Analytics, advertising pixels, third-party chat tools, or first-party analytics cookies.

When a person chooses to contact Prismond, the contact form may involve:

• Name.
• Type of business.
• Information about what they want to solve.
• WhatsApp number, if WhatsApp is selected as the preferred response channel.
• Email address, if email is selected.
• Any additional information the person voluntarily includes in their message.

The form is not intended to collect sensitive personal data. If someone voluntarily includes sensitive information in a message, Prismond will process it only to the extent necessary and as permitted by applicable law.

3. How the contact form works

The contact form does not send the submitted information to a Prismond server. Instead, the browser builds a message and opens WhatsApp or the user’s email client, depending on the available channel.

The information therefore reaches Prismond only if the person chooses to send the generated message. Once sent, it may be stored in email or WhatsApp, depending on the channel used.

The website hosting provider may generate and retain technical logs required for operation and security, such as IP address, browser information, date and time of access. The provider processes those records under its own terms and privacy policies.

4. Purposes of processing

When Prismond receives personal data, it may use it to:

1. Respond to the person’s request.
2. Prepare and send a proposal or quotation, where applicable.
3. Follow up commercially on the request received.

Prismond does not sell or assign personal data for third-party purposes.

Prismond currently does not use the information for automated decision-making or profiling.

Any later use for marketing, advertising or commercial communications beyond follow-up on an existing request will require a separate and appropriate authorization when legally required. Such marketing is not part of the current purposes described in this Policy.

5. Legal basis and processing principles

Prismond processes personal data in accordance with the principles of legality, purpose limitation, freedom, accuracy or data quality, transparency, restricted access and circulation, security and confidentiality established by applicable Colombian law.

Individuals remain in control of the information they choose to provide. Where consent is legally required, it will be requested in a prior, express and informed manner.

6. Data subject rights

Under Colombian data protection law, individuals may:

• Know the personal data Prismond holds about them.
• Request that inaccurate, incomplete or outdated information be updated or corrected.
• Request evidence of consent where consent is required.
• Be informed about the use made of their personal data.
• Request deletion of their data where legally applicable.
• Withdraw consent where legally possible.
• File a complaint with the Superintendencia de Industria y Comercio when they believe applicable data protection rules have been breached.

These rights are subject to legal and contractual exceptions that may require certain information to be retained.

7. Contact channel and request procedure

Requests concerning personal data may be sent to:

Email: contact@prismond.com
Suggested subject: Personal Data Request

The request should identify the data subject and clearly explain what information they wish to access, update, correct or delete, or whether they are requesting withdrawal of consent. Prismond may request additional information reasonably necessary to verify the identity or authority of the requester.

Access requests (consultas) will be handled within ten (10) business days from receipt. If it is not possible to respond within that period, Prismond will provide timely notice explaining the reason and the applicable extension, which may not exceed five (5) additional business days.

Complaints or requests for correction, deletion or withdrawal (reclamos) will be handled within fifteen (15) business days from the day following receipt. Where a response cannot be provided within that period, Prismond will explain the reason for the delay and provide the response date within the limits established by applicable law.

If a data subject believes their request has not been properly addressed, they may contact the Superintendencia de Industria y Comercio within its legal authority.

8. Data retention

As a general rule, Prismond will retain personal data received through commercial inquiries for as long as reasonably necessary to handle the inquiry and, where no subsequent business relationship exists, for up to two (2) years, unless a legal or contractual obligation requires a longer retention period.

Technical hosting logs may be retained for the period established by the hosting provider based on security, operational and legal requirements.

9. Processors, third parties and international transfers

To operate its digital channels, Prismond may use technology providers that act as processors or other third parties for certain processing activities. These may include:

• Hosting provider: Cloudflare, Inc.
• Email provider: Hostinger.
• WhatsApp, when the user chooses that channel.

Some providers may store or process information on servers located outside Colombia. Where applicable, Colombian rules concerning international transfers or transmissions of personal data will apply, together with the safeguards required according to the provider and the relevant processing activity.

Social media links available on the website lead to independent third-party services. When a person leaves Prismond’s website to use a social network, that person’s activity is subject to the third party’s own terms and privacy policies.

10. Security

Prismond will adopt reasonable technical, organizational and administrative security measures appropriate to the nature of the data and the risks involved, seeking to prevent loss, alteration, unauthorized access, use or disclosure.

Because the current contact form generates messages locally in the browser, part of the subsequent processing depends on the security mechanisms of the email and WhatsApp services selected by the individual.

11. Children and teenagers

The Prismond website is not directed to children or teenagers and does not intentionally seek to collect their personal data.

If Prismond becomes aware that it has received information concerning a minor without the legally required conditions, it will take the measures required under applicable law and the best interests of the minor.

12. Cookies and similar technologies

The website currently does not use first-party analytics cookies, advertising pixels, Google Analytics or behavioral tracking tools.

The hosting provider may use technical mechanisms required for security, operation, abuse prevention or service delivery. Prismond does not use these mechanisms for analytics or advertising.

13. Visitors outside Colombia

Prismond provides its services from Colombia, and this Policy is primarily structured around Colombian law. Individuals located in other countries may have additional rights under the laws applicable to them.

Where applicable, Prismond will seek to address legally applicable rights; however, this Policy does not constitute a representation of full compliance with the GDPR or any other foreign data protection regime.

14. Effective date and changes

This Policy is effective as of September 29, 2026 and remains in effect while Prismond conducts personal data processing subject to it.

Prismond may update this Policy when its processes, services, providers or applicable laws change. The version published on this website will be the current version.

15. Legal framework

This Policy is primarily based on Ley 1581 de 2012, Decreto 1377 de 2013 as incorporated into Decreto 1074 de 2015, and applicable guidance from the Superintendencia de Industria y Comercio.