Legal information

Privacy policy

Effective from 2 November 2026

This policy explains how I process the personal data I receive through actuariafranca.com, by email and by WhatsApp, and how you can exercise your rights.

1. Data controller

Jessica Katherine Franco Gelvez, a self-employed professional based in Colombia, who provides actuarial consulting, education and technology services under the names Jessica Franco and Actuaría Franca.

• Email: hola@actuariafranca.com
• Phone and WhatsApp: +57 312 833 9719
• Website: actuariafranca.com

2. Legal framework

Colombian Statutory Law 1581 of 2012 and Decree 1377 of 2013 (incorporated into Decree 1074 of 2015). If you are in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) also applies to the processing of your data.

3. Data I collect

• What you enter in the contact forms: name, organisation, email address, type of organisation, service or area of interest and your message, together with the language of the page you write from and a record of your consent.
• What you send me by email or WhatsApp.
• Technical data that the hosting provider records automatically for security: IP address, date and time of the visit, and browser type.

The site uses no cookies and no analytics or advertising tools. Fonts are served from this site, so no data is sent to font providers. Please do not include sensitive data or data about children in your messages.

4. Purposes and legal bases

• Responding to your request and preparing proposals: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Communicating with you while delivering a contracted service: performance of a contract (Art. 6(1)(b) GDPR).
• Meeting legal, accounting and tax obligations: legal obligation (Art. 6(1)(c) GDPR).
• Keeping the site secure (server logs): legitimate interest in the secure operation of the site (Art. 6(1)(f) GDPR).

I do not sell your data or use it to send you advertising without your consent.

5. Authorisation

Because I am based in Colombia, Colombian law requires your prior, express and informed authorisation, which you give by ticking the box in the form. I keep a record of it. If you write to me by email or WhatsApp, sending your message authorises me to use your data to reply. For people in the EU/EEA, the legal basis for handling your request remains Art. 6(1)(b) GDPR. You can withdraw your authorisation at any time by writing to hola@actuariafranca.com; this does not affect processing carried out before the withdrawal.

6. Service providers and international transfers

I am based in Colombia, so your data is processed in Colombia. To run the site and email, I use technology providers that process data on my behalf:

• Netlify, Inc. (United States): website hosting and receipt of the form.
• Google LLC (United States): email.

Both providers are certified under the EU–US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023, and are bound by contractual security and confidentiality obligations. If you write to me via WhatsApp, WhatsApp’s own terms also apply.

7. How long I keep your data

Requests that do not lead to a contract are kept for up to two years after the last contact and then deleted. If we enter into a contract, I keep the data for its duration and for as long as accounting, tax and record-keeping rules require.

8. Your rights

You have the right to:

• Access your data and know how it has been used.
• Have your data corrected or updated.
• Have your data deleted, or its processing restricted, where there is no legal or contractual duty to keep it.
• Receive your data in a portable format.
• Object to processing based on legitimate interest.
• Withdraw your authorisation at any time and obtain proof of the authorisation you gave.
• Lodge a complaint with Colombia’s Superintendence of Industry and Commerce (SIC) or, if you are in the EU/EEA, with the data protection authority of your country of residence.

9. How to exercise your rights

Write to hola@actuariafranca.com with your name, what you are requesting and how you would like to receive the answer. I handle these requests myself and reply within 10 business days (enquiries) or 15 business days (complaints and requests for correction or deletion), and in any case within one month.

10. Providing your data and automated decisions

Providing your data is voluntary, but without your name, email address and message I cannot answer your request. I do not use automated decision-making or profiling.

11. Security

I apply reasonable technical and organisational measures to protect your data, such as encrypted connections (HTTPS) and restricted access to the accounts where messages are received.

12. Changes

This policy is effective from 2 November 2026. If I make substantial changes, I will publish them on this page before they apply.