Personal Data Processing Policy

1. Data controllers

The controllers of your data are Moises Gonzalez and Leonard Lopez, partners who provide services under the trade name MisterFront. MisterFront does not yet have a registered legal entity; once it does, this policy will be updated with its details.

• Contact and data protection email: [email protected]
• Countries we operate from: Colombia, Venezuela and the United States.
• Website: misterfront.com

2. What data we collect

We only collect the data we need:

• Contact form: name, email, phone (optional), the solution you are interested in, your message and your consent to process this data.
• If you hire a project: contact and billing details, and the information, content and access you provide so we can do the work.
• Approximate country to suggest a language: on the English version of the site, if your browser language is not Spanish, French or Turkish, your browser looks up your country from your IP address to suggest another language. We only use the country; we do not store the IP address.
• Analytics, only if you accept it: with Google Analytics we measure, in aggregate, visits, page views, where visitors come from, language and actions such as opening a solution or submitting the form (without the form’s content).
• Server technical data: for security and operation, the service that hosts the site logs data such as the IP address, the browser and the date of each visit.

We do not ask for sensitive data (for example, health, ethnic origin or political opinions) or for data about minors.

3. What we use your data for

• Answering your request and scheduling the discovery and analysis session.
• Preparing and sending you a quote.
• Providing the services you hire, invoicing them and giving you support.
• Meeting legal, accounting and tax obligations.
• Keeping the site secure and running.

We do not sell or rent your data, and we do not use it to send you advertising without your consent.

4. Consent and legal basis

When you submit the contact form you tick a box that gives us your prior, express and informed consent to process your data under this policy, as required by Law 1581 of 2012. We keep proof of that consent.

For visitors in the European Union, processing is based on your consent, on pre-contractual steps you ask us to take (the quote), on the performance of the contract and on our legitimate interest in keeping the site secure.

5. Who we share your data with

We use providers that process data on our behalf (processors) and only for the purposes of this policy:

• Web3Forms: receives the contact form and forwards it to our email.
• Google (Gmail): the email service where we receive and answer your messages.
• Render: hosts the website.
• Google Analytics (Google): measures site usage, only if you accept analytics cookies.
• api.country.is: a service that returns the country of an IP address for the language suggestion.

We may also disclose data to an authority when the law requires it.

6. International transfers

We operate from Colombia, Venezuela and the United States, and our providers have servers in the United States and other countries. Your data may therefore be transferred and stored outside your country. We choose providers with appropriate security measures and, by giving your consent, you accept these transfers.

7. Cookies and browser storage

We use Google Analytics 4 to understand how the site is used. Its cookies are only enabled if you accept them in the cookie notice; until then nothing from Google is loaded. We do not use advertising cookies and we turn off Google’s advertising signals.

• _ga: distinguishes visitors anonymously. Lasts 2 years.
• _ga_<ID>: keeps the session state. Lasts 2 years.

The basis for using them is your consent. You can change or withdraw it at any time from “Cookie preferences” in the footer: when you withdraw it, we delete those cookies and stop measuring. Google may process this data in the United States; more information in Google’s privacy policy.

We also store three items in your browser that never leave it: your cookie choice (mf-consent, 12 months), the language you chose (mf-lang, until you clear the site’s data) and the country detected to suggest a language (mf-country, cleared when you close the tab).

8. How long we keep your data

• Requests that do not lead to a project: up to 2 years from the last contact.
• Clients: for as long as the relationship lasts and, afterwards, for the period required by accounting, tax and legal rules.

When we no longer need it, we delete or anonymize it.

9. Your rights

As the data subject you have the right to:

• Know, update and correct your data.
• Request proof of the consent you gave us.
• Be informed about how we use it.
• Withdraw your consent and ask us to delete your data, when there is no legal or contractual duty to keep it.
• Access your data free of charge.
• File complaints with Colombia’s Superintendence of Industry and Commerce (SIC), the data protection authority, after submitting your query or claim to us.

If you are in the European Union or in Turkey you may also object to processing, ask for it to be restricted or for your data to be ported, and contact your local authority. If you live in California, you may know what data we hold, ask us to delete or correct it and not be discriminated against for exercising these rights; we do not sell or share data for advertising purposes.

10. How to exercise your rights: queries and claims

Write to us at [email protected] with your name, a way to contact you and what you need. We may ask for details to confirm your identity.

• Queries (what data we hold and how we use it): we answer within 10 business days at most. If that is not possible, we will tell you why and answer within up to 5 additional business days.
• Claims (correction, update, deletion, withdrawal of consent or a possible breach): include a description of the facts and any documents you wish to provide. We answer within 15 business days at most, extendable by up to 8 more business days with prior notice. If the claim is incomplete, we will ask you to complete it within the following 5 days; if 2 months pass without a reply, the claim is considered withdrawn.

11. Security

We apply reasonable technical and organizational measures to protect your data against loss, unauthorized access or misuse: encrypted connections (HTTPS), access restricted to the people who need it and providers with recognized security standards. No system is infallible; if an incident affects your data, we will inform you and notify the authority where applicable.

12. Minors

Our services are aimed at businesses and adults. We do not knowingly collect data from minors. If you believe a minor has sent us their data, write to us and we will delete it.

13. Changes to this policy

We may update this policy, for example when we add new services or tools. We will publish the new version here with its date and, if the change is significant, we will let you know through an appropriate channel.