Back to home

Privacy Policy and Personal Data Processing

Last updated: June 2026

1. Data Controller

SOCOBOX SAS ("SOCOBOX"), located at Cra 43A # 1 -50 Of 652, Medellín, Colombia, email box@socobox.co, is responsible for processing the personal data you provide us, in accordance with Colombian Law 1581 of 2012 (Personal Data Protection Act) and applicable international standards.

2. Personal Data We Collect

We collect only the data necessary to provide our services:

  • Contact data: name, email address, phone or WhatsApp number, job title, and company name.
  • Browsing data: IP address, browser type, and pages visited, collected in aggregate and anonymous form.
  • Business information: process descriptions, challenges, and goals that you voluntarily share during our consulting engagement.

We do not collect sensitive data (health, racial origin, religious beliefs, biometric data, etc.).

3. Purposes of Processing

Your personal data will be processed for the following purposes:

  • Responding to your contact and commercial inquiries.
  • Delivering contracted consulting, automation, and AI services.
  • Sending service-related communications, always with your prior consent.
  • Complying with legal and contractual obligations.
  • Improving our service quality and user experience on this site.

4. Legal Basis for Processing

Processing of your data is based on: (i) your free and informed consent; (ii) performance of a contract to which you are a party; or (iii) compliance with legal obligations applicable to SOCOBOX.

5. International Data Transfers

SOCOBOX provides services in Colombia, Latin America, and the United States. Where your data is transferred to third countries, we ensure an equivalent level of protection through standard contractual clauses or by verifying that the recipient country offers adequate protection levels under Colombian and applicable international regulations.

6. Data Retention

We retain your data for as long as necessary to fulfill the purposes for which it was collected and, thereafter, for applicable legal prescription periods. When data is no longer needed, it will be securely deleted or anonymized.

7. Your Rights

As a data subject, you have the right to:

  • Know what personal data we hold about you.
  • Update and correct inaccurate or incomplete information.
  • Request deletion of your data where there is no legal obligation to retain it.
  • Revoke consent where consent is the legal basis for processing.
  • Access your data free of charge at least once per month.
  • Lodge a complaint with Colombia's Superintendencia de Industria y Comercio (SIC) if you believe your rights have been violated.

8. How to Exercise Your Rights

To exercise any of your rights, contact us via:

We will respond to your request within the deadlines established by Colombian Law 1581 of 2012 (10 business days for queries, 15 business days for claims).

9. Information Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure, in line with the enterprise security standards we apply across all our projects.

10. Cookies and Tracking Technologies

This website uses only essential cookies required for its operation. We do not use advertising tracking cookies or share browsing data with third parties for commercial purposes.

11. Changes to This Policy

SOCOBOX may update this policy at any time. Significant changes will be communicated through our website. We recommend reviewing it periodically.

12. Supervisory Authority

In Colombia, the competent authority for personal data protection is the Superintendencia de Industria y Comercio (SIC), with whom you may file complaints if you believe your rights have been violated.