beleafdesign ("we") is the controller of the personal data you send us through this site. This policy explains what we collect, what we use it for, who we share it with, how long we keep it, and how you can exercise your rights. It follows Colombian data protection law (Ley 1581 de 2012 and Decreto 1074 de 2015).
We only collect what you type into the contact form or the quote builder: name, email, phone (optional), company (optional), the services you select, estimated budget and timeline if you provide them, and your project message. Alongside the submission we store the date, the page language, the form it came from, and a hashed (SHA-256) version of your IP address. Your IP is never stored in the clear.
We use your data solely to answer your request, prepare the proposal you asked for, and follow up on that conversation. The hashed IP is used only to rate-limit form abuse. We do not use your data for third-party advertising, we do not sell it, and we make no automated decisions about you.
The basis is your prior, express and informed authorization: the checkbox you tick before submitting. We store the record of that authorization and its timestamp together with your request. You can withdraw it at any time by writing to us.
Your data is stored in MongoDB Atlas, our database provider, and forwarded to the internal tool our team uses to handle the request (email, CRM or automation, depending on the case). Those providers act as processors and may only use the data to provide us that service. We share it with no one else, except when legally required by a competent authority.
We keep contact requests for 24 months from our last contact with you, a reasonable window for commercial follow-up. If you ask for deletion sooner, we delete it and confirm. Rate-limiting records (hashed IP) are deleted automatically after one hour.
You may access, update and correct your data; request proof of your authorization; be informed about how we use it; file complaints with the Colombian Superintendence of Industry and Commerce; and withdraw your authorization or request deletion where no legal duty requires us to keep it. To exercise them, write to hola@beleafdesign.co with the subject "Personal data". We reply within the legal terms: 10 business days for queries, 15 business days for claims.
This site sets no advertising or third-party tracking cookies. Only the technical storage needed to remember your language choice is used.
The site is served over HTTPS, data travels encrypted, and database access is restricted to the team handling requests. No control is infallible: if we detect an incident affecting your data we will inform you and notify the authority as required by law.
beleafdesign — Medellín, Colombia. Data protection contact: hola@beleafdesign.co.