Privacy notice

Who controls the data

The controller of your personal data is Carlos Alberto Cardona B., based in Bogotá, Colombia.

You can write to me at carlos@cardonaseo.com or on LinkedIn.

What I collect

I collect what you send through the diagnostic form: your name, your email address, the URL of your site, the platform it runs on, your message and your authorization. Along with them I keep the page of this site you came to the form from, to learn which pages are useful; it isn't data about you.

If you hire me to design a website, I also collect the order details (the plan, the amount, the slot date and your billing details), the record that you accepted the terms and, if you checked it, the immediate start, with their date and time, the version of the terms and the browser you used (not your IP), and what you tell me in the questionnaire about yourself, your business, your services, your clients and your story. While you fill in the questionnaire, a draft is saved only in your browser so you don't lose what you wrote; it's deleted when you send it, and I don't receive it until you do.

If you book a session with me, I collect the details you leave in the booking. Your card or account details go to the payment processor, not to me.

Sensitive data

The questionnaire doesn't ask for sensitive data, such as health, origin, beliefs or orientation. If you choose to include any of it when you tell your story, you do so voluntarily.

What I use it for

I use your data to answer the diagnostic request and to follow up on that conversation. I don't use it for advertising.

If you hire me for a website, I also use it to provide the service you hired, to build your site from what you tell me in the questionnaire, to record that you accepted the terms and the immediate start before paying, to invoice and handle your complaints, and to schedule our sessions.

It's stored in the database of Base44, the platform that hosts this site, and a copy may reach me by email. Beyond those services, which hold it so I can read it, I don't share it with anyone.

If you hire me for a website or book a session, these services also take part, each with what it needs for its part:

• Base44, which stores the questionnaire and the record of your acceptance.

• Cloudflare, which publishes this site.

• Bold, Wise and PayPal, which process payments.

• Cal.com, which processes session bookings.

• Anthropic, the artificial intelligence provider that helps me draft your site from what you tell me in the questionnaire.

How long I keep it

Only as long as it takes to answer your request and follow up on that conversation. Once it no longer serves that purpose, I delete it.

Order and questionnaire data follow the same criterion: I keep them while they serve to provide the service, invoice it and handle a complaint. Once they no longer serve that purpose, I delete them.

Your rights

You can access, update, correct and delete your personal data, and withdraw the authorization you gave. These rights are set out in Colombia's Ley 1581 de 2012 and Decreto 1377 de 2013.

How to exercise them

Write to me at carlos@cardonaseo.com or on LinkedIn. I'll confirm your identity and make the correction or the deletion within a reasonable period.

Cookies

This site sets no advertising cookies. It only uses Google Analytics cookies, and only if you accept them in the notice. You can change your decision at any time with the «Cookies» link in the footer.

What this site measures

Two measurements run without cookies, and a third one only with your permission (since October 16, 2026). I describe them with the technical detail I was able to verify.

The first is Cloudflare Web Analytics. Cloudflare's network injects it into the HTML of every page: a script hosted on static.cloudflareinsights.com that sends the measurement to /cdn-cgi/rum on this same domain. It measures page views and browser performance metrics.

The second is the internal analytics of Base44, the platform this site is built on. It's a POST request to /api/app-logs/…/log-user-in-app/… on every page change, plus the platform's own /api/apps/analytics/track/batch endpoint. It records which pages get visited inside the application.

The third is Google Analytics 4, by Google. It only loads if you click «Accept» in the cookie notice. If you decline or don't answer, your browser downloads nothing from Google Analytics.

With your permission, it records which pages you visit, where you came from, how far you scroll, downloads, and clicks on the form, WhatsApp and email. I don't send your name, your email or what you type in the form. The data is kept for 14 months.

I don't use it for advertising: Google Signals is off and advertising permissions are denied. It uses the _ga cookie and _ga_ followed by the property ID; if you withdraw permission, the site deletes them. There's no Google Tag Manager and no social network pixels.