Legal

Privacy policy

Effective October 11, 2026

1. Who's responsible for your data

Andrea Rojas, an individual doing business as AndreCrea Creative Studio.

Based in: Medellín, Colombia
Address: Calle 6 # 25-112, Medellín
Email: hola@andrecrea.com
Phone: +57 316 253 6082

This policy covers the personal data I collect through andrecrea.com, its forms, email and the other channels I use to work with clients. It follows Colombia's data protection law (Ley 1581 de 2012) and its regulations, compiled in Decreto 1074 de 2015.

2. What I collect

I collect what you give me when you write through the contact form or by email: your name, last name, email, phone number, the service you're interested in and what you tell me about your project. If we end up working together, I may also ask for what I need for the proposal, the contract and invoicing.

The site also uses cookies. You'll find the details in the cookie policy.

I don't ask for sensitive data. If I ever need any, I'll tell you first and answering will be optional.

3. How I use it

I use your data to reply to your message, prepare and send quotes and proposals, plan and run the project if you hire me, invoice and meet my legal and accounting obligations, and understand, in aggregate, how people use the site so I can improve it.

I'll only send you news about my services if you explicitly agree to it, and you can ask me to stop at any time.

4. Who else handles it

I don't sell or rent your data. To run the site and the studio I use tech providers that handle data on my behalf, like the website platform (Squarespace) and email and cloud storage tools. Some of them store information on servers outside Colombia, for example in the United States. By giving your consent you agree to that transfer, which I only make to providers with adequate security measures.

I may also share data when a competent authority requests it as part of its duties.

5. Your rights

You have the right to know, update and correct your data; ask for proof of the consent you gave me; know how I've used it; withdraw your consent or ask me to delete it, unless a legal or contractual duty requires me to keep it; file a complaint with Colombia's Superintendencia de Industria y Comercio after first contacting me; and access your data for free.

6. How to use your rights

Email me at hola@andrecrea.com with the subject "Personal data". Include your name, what you need and a way to reach you. I handle these requests myself.

I'll answer questions within ten business days. If I can't, I'll tell you why and answer within five more business days.

I'll answer claims (to correct, update or delete data, or if you think I didn't follow this policy) within fifteen business days. If I can't, I'll tell you why and answer within eight more business days. If your claim is missing information, I'll ask for it within five days; if two months go by without a reply, the claim is considered withdrawn.

7. How long I keep it

I keep contact data while we're talking or working together, plus whatever extra time my legal, accounting and tax obligations require. If we don't end up working together, you can ask me to delete it whenever you want.

8. Security

I take reasonable steps to protect your data: restricted access to my accounts, strong passwords and providers with recognized security standards.

9. If you're in the European Union

If you're writing from the EU, you also have the rights the General Data Protection Regulation (GDPR) gives you, like data portability or objecting to processing. I rely on your consent and, if we work together, on our contract. You can use those rights through the same email.

10. Changes

If I make important changes to this policy, I'll post the new version here with its effective date.

This is a translation. If there's any difference, the Spanish version prevails.