Privacy Policy

1. Who we are

Admetriko is a boutique digital architecture studio operating from Medellín, Colombia, serving clients in LATAM, the United States, and Europe.

We act as the data controller for personal data submitted through admetriko.com forms, audits, and email communications.

2. Data we collect

We collect only what we need to deliver our services and operate this site:

• Form data: name, email, business name, phone (optional WhatsApp), country, free-text messages, UTM parameters.
• Analytics: anonymized session data via Google Analytics 4 and Google Tag Manager (page views, referrer, device, country).
• Marketing pixels: Meta Pixel for ad attribution if you arrive from a Meta Ads campaign.
• Server logs: IP address (truncated), user-agent, request timestamps for security and abuse prevention.
• Cookies: see our Cookie Policy for the full list and purposes.

3. Why we use it (legal bases)

• Consent: when you submit a form, request a guide, or opt into WhatsApp follow-up.
• Legitimate interest: to operate the site, prevent abuse, measure aggregate performance, and respond to inquiries.
• Contract: when we deliver services to active clients.
• Legal obligation: when required by tax, audit, or law-enforcement requests.

4. Who we share data with

We do not sell personal data. We share specific data with vetted processors strictly to deliver our services:

• Email: Resend (transactional), our own SMTP for replies.
• CRM: Kommo (kommo.com). Stores lead and conversation data under their security commitments.
• Automation: n8n self-hosted instance at admetriko.com infrastructure.
• Analytics: Google (GA4, GTM), Meta (Pixel). Under their respective DPAs.
• Hosting: Coolify infrastructure operated by Admetriko, LiteSpeed cache layer.
• Booking: LatePoint plugin (data stored on our own database).

5. International transfers

Admetriko operates from Colombia. Some processors (Google, Meta, Resend) host data in the United States or other regions. Where applicable, we rely on Standard Contractual Clauses or equivalent safeguards.

If you are in the EU/EEA, transfers occur on the basis of your consent or our legitimate interest in operating the site.

6. Retention

• Lead data: kept up to 24 months after last interaction, unless you request deletion.
• Client data: kept while the contract is active, plus 5 years for tax and audit purposes (Colombian commercial law).
• Analytics: standard GA4 retention (14 months) for event-level data; aggregate reports retained longer.
• Email logs: 90 days unless flagged for follow-up.

7. Your rights

Depending on your jurisdiction, you have the right to access, rectify, delete, restrict, port, or object to processing of your data, and to withdraw consent at any time.

• Colombia (Ley 1581/2012, Habeas Data): ARCO rights. Access, rectify, cancel, oppose.
• México (LFPDPPP): ARCO rights. Equivalent scope.
• United States (CCPA/CPRA): right to know, delete, correct, opt-out of sale/sharing, non-discrimination.
• EU/EEA (GDPR): all rights under Articles 15-22, including data portability and right to lodge a complaint with your local DPA.
• Unsubscribe: every marketing email includes a one-click unsubscribe link, or visit /unsubscribe.

8. Security

We use HTTPS site-wide, environment-isolated credentials, principle-of-least-privilege access, encrypted database backups, and rate limiting on form endpoints.

No system is 100% secure. If we detect a breach affecting your data, we will notify you within 72 hours in line with GDPR and applicable LATAM laws.

9. Children

Our services target business owners and professionals. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data, contact us and we will delete it.

10. Changes to this policy

We update this policy when our processing changes. The "last updated" date at the top reflects the latest revision. Material changes are announced via email to active clients and prominently on this page for 30 days.