Personal data privacy policy

This policy is governed by Article 15 of the Colombian Political Constitution, Statutory Law 1581 of 2012, Decree 1074 of 2015 (which compiles Decree 1377 of 2013) and the guidance of the Superintendence of Industry and Commerce (SIC).

It applies to all personal data Key Lab collects through the keylab.tech website, its forms, its AI assistant and any communications arising from them.

• Personal data: any information linked or that can be associated with an identified or identifiable natural person.
• Data subject: the natural person whose personal data is processed.
• Processing: any operation on personal data, such as collection, storage, use, circulation or deletion.
• Data controller: whoever decides on the database and/or the processing. In this case, KEY LAB TECHNOLOGY S.A.S. (Key Lab).
• Data processor: whoever processes data on behalf of the controller (for example, a hosting or email provider).
• Authorization: the data subject's prior, express and informed consent to the processing.

We only collect the data you voluntarily give us and the minimum technical data needed for the site to work securely:

• Contact form: name, email address, project type and the message you write.
• Meeting booking: name, email address, chosen date and time, time zone, project type and optional message.
• Newsletter: email address.
• AI assistant (chat): the questions you type in the chat and the recent conversation history.
• Technical data: IP address and browser data, used to prevent abuse and verify you are not a bot. For the chat's daily question limit we only store a one-way hash derived from your IP, deleted automatically after 24 hours.

We do not request sensitive data (health, racial or ethnic origin, political opinions, religious beliefs, biometric data, among others). Please do not include it in your messages. The site is not directed at people under 18 and we do not knowingly collect data from children or adolescents.

Your data is used exclusively to:

• Reply to your messages, information requests and quote requests.
• Schedule, confirm, remind and manage meetings, including sending the video call link.
• Send you the newsletter with Key Lab articles and news, if you subscribed. You can unsubscribe at any time.
• Answer the questions you ask the AI assistant.
• Protect the site against spam, fraud and abuse.
• Keep a record of communications and comply with legal obligations.

We do not sell, rent or transfer your personal data to third parties for commercial or advertising purposes.

Under Article 8 of Law 1581 of 2012, as a data subject you have the right to:

• Know, update and correct your personal data.
• Request proof of the authorization you granted us.
• Be informed, upon request, about how your data has been used.
• File complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law, after first submitting an inquiry or complaint to Key Lab.
• Revoke your authorization and/or request deletion of your data when principles, rights and legal guarantees are not respected, provided there is no legal or contractual duty to keep it.
• Access your personal data free of charge.

You can submit inquiries and complaints by writing to contacto@keylab.tech, stating your name, the email address associated with your data, a description of your request and any supporting documents. The Key Lab team handles these requests through that address.

• Inquiries: answered within a maximum of ten (10) business days from receipt. If that is not possible, we will explain why and give you a new date, no later than five (5) additional business days.
• Complaints (correction, update, deletion or breach): handled within a maximum of fifteen (15) business days from the day after receipt, extendable by up to eight (8) additional business days with an explanation. If a complaint is incomplete, we will ask you to complete it within five (5) days; if two (2) months pass without a response, it will be considered withdrawn.

To unsubscribe from the newsletter, use the unsubscribe link included in every email or write to us.

To run the site we rely on technology providers acting as data processors. Some of them host their servers outside Colombia, mainly in the United States, so your data may be transmitted internationally:

• Railway (servers in the United States): hosting of the website, the database where bookings and newsletter subscriptions are stored, and the AI assistant.
• Resend: sending confirmation and notification emails.
• Cloudflare Turnstile: anti-bot verification on forms.
• Artificial intelligence model providers: processing questions sent to the AI assistant.
• Google Meet: hosting scheduled video calls.

These providers only process data to deliver their services to us and maintain security measures and confidentiality commitments in line with international standards. By accepting this policy you expressly authorize this transmission, under Article 26 of Law 1581 of 2012 and Decree 1074 of 2015.

We only use technical cookies that are necessary for the site to work:

• NEXT_LOCALE: remembers the language you chose (Spanish or English).
• Cloudflare Turnstile cookies: protect forms against bots and abuse.

We do not use analytics, advertising or third-party tracking cookies. You can block or delete cookies in your browser settings, although some site features may stop working properly. If we add other kinds of cookies in the future, we will update this section and ask for your consent where required.

We apply reasonable technical, human and administrative measures to protect your data against unauthorized access, loss, alteration or fraudulent use: encrypted connections (HTTPS), restricted access to admin panels and providers with recognized security standards.

We keep your data only for as long as reasonably necessary to fulfil the purposes described and applicable legal obligations. Newsletter data is kept until you unsubscribe. Once the purpose is fulfilled or you request deletion, we will delete it unless there is a legal or contractual duty to keep it.

By ticking the acceptance box on our forms, or by voluntarily sending us your data through any channel, you give us your prior, express and informed authorization to process it under this policy. We keep proof of that authorization.

By using the AI assistant you agree that your messages are processed to generate a response. We recommend not including personal data or confidential information in the chat.

This policy is effective as of September 27, 2026. Databases will remain in force for as long as the purposes described remain. If we make material changes, we will publish them on this page with a new update date and, where appropriate, notify you by email before they take effect.