Privacy policy and personal data processing

This is Casa Trufa’s information processing policy, in accordance with Colombia’s Law 1581 of 2012 on the protection of personal data (habeas data) and its regulations (Decree 1377 of 2013, compiled in Decree 1074 of 2015, Article 2.2.2.25.3.1).

Data controller

• Responsible party: Casa Trufa, a family kennel in Colombia.
• Domicile: Colombia
• Email: hola@casatrufa.com
• Handling of inquiries and claims about data: the person who runs the kennel, at hola@casatrufa.com

The full name or registered business name of the responsible party and its tax identification will be published on this page. In the meantime you can ask for them in writing at hola@casatrufa.com; you are entitled to that information before any agreement.

What data we process

The public part of this website has no forms. The data we may come to hold is this:

• What you write to us. When you press “Request information” or “Join the waiting list”, a WhatsApp conversation (or an email) opens. We receive your number or your address, your name if you give it, and whatever you tell us: how you live, which breed interests you, your quiz answers if you decide to send them. If you arrived through an ad, the pre-written message ends with a short reference (“ref.” and a code) that identifies the campaign, not you: it tells us which ad brought you. You can delete it before sending.
• The details of the agreement, if there is one. For the contract and the handover of a puppy: name, identity document, address, city and contact details.
• Clicks on the contact buttons. We count how many times each button is pressed: which page it was on, which campaign the visit came from (the utm parameters in the address) and whether it was a phone or a computer. That record does not include your name or your phone number.
• Visits that arrive from an artificial intelligence assistant. If you reach the website from ChatGPT, Perplexity, Copilot or another assistant, we add one to a counter: which assistant, and which section of the website. We do not keep your IP address or anything that identifies you, and we do not count it if your browser sends the “Do Not Track” signal. The totals are kept for thirteen months.
• Your account, if you are a Casa Trufa family. Once a puppy has a family, we open an account for that family in “My account”. There we keep your name, your email, your cell phone and, if you enter them, your identity document, your municipality and your address; your dog’s details and its vaccination record (what we note down and what you note down, with the photos you upload); and the documents and payments we decide to share with you. The photos and documents are not public. Reminders and news are sent only if you authorize them in your profile, where you can also withdraw them, download a copy of your data and ask for it to be corrected or deleted. If you share the vaccination card through its link or QR code, whoever has it sees the dog’s details, its vaccines and your abbreviated name, never your contact details; you can switch it off whenever you like. In “My account” there is no analytics and the session is not recorded.
• Usage analytics, only if you accept them. If you accept the “Analytics” category in the cookie notice, we measure in aggregate how people move through the website. It is explained in the cookie policy.

The quiz on the website does not ask for personal data and its answers are not saved in association with you: they only travel if you decide to send them by WhatsApp. We do not ask for or process sensitive data (health, origin, beliefs, biometric data) from the people who write to us.

What we use it for

• Answering your inquiry and guiding you on the breed and the puppy that fit your life.
• Managing the waiting list and letting you know when a litter is planned.
• Preparing and fulfilling the handover agreement, and supporting you before and after it.
• Handling petitions, complaints and claims, and meeting legal obligations (accounting, tax and consumer protection).
• Knowing which pages and campaigns work, using aggregate data.

We do not sell or pass your data to third parties for commercial purposes, and we will not send you advertising you have not asked for.

Authorization

Processing is based on your prior, express and informed authorization (Article 9 of Law 1581 of 2012). By writing to us, after having had the chance to read this policy, you authorize us to process the data you give us for the purposes above. You can revoke that authorization whenever you like, unless a legal or contractual obligation requires the data to be kept.

Your rights

As the data subject you have the right (Article 8 of Law 1581 of 2012) to:

• Know, update and rectify your data.
• Ask for proof of the authorization you gave us.
• Be informed of the use we have made of it.
• Revoke the authorization and ask for the data to be deleted.
• Access free of charge the data that has been processed.
• File a complaint with the Superintendencia de Industria y Comercio (SIC), Colombia’s Superintendence of Industry and Commerce.

How to exercise them: inquiries and claims

Write to hola@casatrufa.com giving your name, how we identify you (the number or the email you wrote to us from), what you are asking for and which data or conversation you mean.

• Inquiries (consultas) — finding out what data of yours we hold: we reply within a maximum of ten (10) business days from the day we receive it. If that is not possible, we will tell you why and when, without exceeding five (5) more business days (Article 14).
• Claims (reclamos) — correcting, updating or deleting data, or reporting a breach: we reply within a maximum of fifteen (15) business days from the day after we receive it, extendable by eight (8) more business days if we explain the reason to you. If the claim is missing information, we will tell you within the following five (5) days; after two (2) months without a reply from you, it is deemed withdrawn (Article 15).
• Complaint to the SIC: the law requires that this procedure with us be completed first (Article 16). The Superintendencia de Industria y Comercio can be reached at www.sic.gov.co.

How long we keep it

• Conversations and waiting-list data, for as long as the relationship with you lasts and for the time the law requires. Contract data, for the retention period of commercial and accounting documents.
• Click records and usage analytics, ninety (90) days. After that they are deleted automatically.

Where it is and who is involved

If any system where your data is kept were hosted outside Colombia, the transfer would be made in accordance with Article 26 of Law 1581 of 2012, and you can ask us where they are at any time.

WhatsApp is a service of Meta Platforms: the messages you send us that way are also subject to its privacy policy. If third-party measurement tools are switched on in the future, they will be loaded only with your consent and will be listed in the cookie policy.

Security

Access to the system where the data is kept requires a username and password and supports two-step verification; credentials are kept encrypted and changes made by the team are logged.

Minors

This website is aimed at adults. We do not knowingly process data of children or adolescents; if a minor writes to us, we will ask for a responsible adult to continue the conversation.

Term and changes

This policy has been in force since it was published on this page, on the date shown at the foot of the page. The databases are kept for as long as the purposes described exist. If we change anything substantial — who the data controller is or what the data is used for — we will announce it here with its date before applying it.