Privacy policy
Last updated: October 2026
This policy explains how Decreta Studio collects, uses and protects the personal data of people who visit this site, write to us or subscribe to our resources. Decreta Studio is based in Colombia, so this policy is governed by Law 1581 of 2012, Decree 1377 of 2013 and the other Colombian data protection rules. If the Spanish and English versions differ, the Spanish version prevails.
Data controller
- Controller: Juan Sebastián Ávila Palencia
- Trade name: Decreta Studio
- Address: Bogotá, Colombia.
- Email for personal data matters: juan.avila@decretastudio.com
- Phone: +57 304 384 3121
What we collect
We only collect the data you give us, plus the minimum technical data needed to run the site securely:
- Contact form: name, email, brand or project (optional), the service you are interested in and your message.
- Free workbook downloads: name and email.
- Diagnostic call booking: name, email, brand or project (optional), what you want to solve on the call (optional), your time zone and the time you choose. They are stored in Decreta Studio's calendar, in Google Calendar, which creates the video call on Google Meet.
- Archetype quiz: name and email. They are sent to MailerLite to deliver your result.
- Technical data: your IP address, stored in encrypted form for one hour to limit automated submissions, and the standard logs of the hosting server.
We do not request sensitive data or data from children or teenagers.
How we use it
- To reply to your messages and requests.
- To schedule and hold your diagnostic call.
- To send you the workbook you requested and, when you subscribe, emails from Decreta Studio about content, resources and services.
- To prepare proposals and deliver the services you hire.
- To protect the site against automated submissions and abuse.
- To meet legal obligations.
We never sell or rent your data.
Your consent
We process your data with your prior, express and informed consent. On the contact form you give it by ticking the consent box. On workbook downloads, by submitting the form after reading the notice next to it. We keep a record of that consent.
You can withdraw it at any time, except where a legal or contractual duty requires us to keep the data.
Who we share it with
To run the site we work with providers that process data on our behalf and under our instructions:
- Website and email hosting: Hosting.com. Its servers may be outside Colombia.
- MailerLite, to deliver workbooks and email communications. Its servers are outside Colombia.
- Google, for the diagnostic call booking page. Its servers are outside Colombia.
When a provider processes data outside Colombia, this is an international transfer of data. By accepting this policy you authorize it, and we require those providers to maintain adequate levels of protection.
The Brandifesting Blueprint is purchased through a separate store, which has its own privacy policy.
Your rights
As the owner of your data, you have the right to:
- Access, update and correct your data.
- Request proof of the consent you gave us.
- Be told how your data has been used.
- Withdraw your consent or ask us to delete your data.
- Access your data free of charge.
- File a complaint with Colombia's Superintendence of Industry and Commerce (SIC), once you have completed the inquiry or claim process with us.
How to exercise your rights
Write to the personal data email listed above. Include your name, the email you used with us, your request and, if you are acting for someone else, proof that you may do so.
- Inquiries: we reply within 10 business days. If that is not possible, we tell you why and reply within the following 5 business days.
- Claims (correction, update, deletion or withdrawal of consent): we reply within 15 business days, extendable by up to 8 more with prior notice. If your claim is missing information, we ask for it within 5 days; if 2 months pass without it, the claim is considered withdrawn.
To stop receiving emails, use the unsubscribe link included in every message.
Security and retention
The site runs over an encrypted connection (HTTPS). Forms are validated on the server, and our providers' credentials are never exposed in the browser. Only authorized people at Decreta Studio can access your data.
We keep your data for as long as the purposes above require. If you subscribed, until you unsubscribe.
Changes and effective date
If we make substantial changes to this policy, we will publish them on this page before they take effect and, where required, ask for your consent again.
This policy is effective from October 2026. Our databases will be kept for as long as Decreta Studio operates or as the law requires.