Privacy policy.

Who is responsible for your data

The controller of the personal data you send us through this website is Paulo Manuel Bahamon Diaz, based in Ibagué, Tolima, Colombia, trading as Marlstead & Co (“we”). For anything related to your data, you can write to hola@marlsteadandco.com or call +57 302 428 5114.

What data we collect

What you type into the project form: name, company, email, current website (if you provide it), the service you are interested in, when you want to launch, and your message.

Like any website, when you visit we also receive technical data about your connection (IP address, browser, date and page visited), which we use only to serve the site and protect it from abuse.

To count visits we use Cloudflare Web Analytics, which uses no cookies and identifies no one: it only gives aggregate figures (pages viewed, country, device type and the site people came from). This website does not use tracking cookies.

What we use it for

To reply to your request, prepare a proposal and, if you decide to work with us, manage the project. Technical data keeps the site running, protects the form from abusive submissions and lets us count visits anonymously to improve the site. We do not use your data for advertising and we do not sell it to third parties.

Legal basis

We process form data with your authorisation, which you give by submitting the form after reading this policy, and because it is necessary to handle your request. You can withdraw it at any time. We process technical data and anonymous statistics on the basis of our legitimate interest in keeping the site secure and improving it.

Who else receives it

This website and its form run on Cloudflare, which receives your submission and forwards it to us by email without storing it in any database. That inbox is managed by Google (Gmail). Both act as data processors, only on our instructions, and may handle your data on servers outside Colombia and the European Union, with the safeguards the law requires for such transfers. We do not share your data with anyone else unless required by law.

How we protect it

The site only works over an encrypted connection (HTTPS). The form does not store your data in any database: it reaches us directly by email, and the server checks every submission, rejects automated ones and limits repeated sends. Only we read the requests.

How long we keep it

Form data, for as long as the conversation about your project lasts and, at most, two years after the last contact. If we work together, for as long as the business relationship and the law require. Technical data is deleted within seven days at most.

Your rights and how to exercise them

You can access, update, correct and delete your data, ask for proof of your authorisation, find out how we have used it and withdraw your authorisation, under Colombian Law 1581 of 2012. If you are in the European Union, you also have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR.

To exercise them, write to hola@marlsteadandco.com with your name, the email address you used to contact us and what you are asking for. If it is a complaint (for example, because you think some data is wrong or that we have not followed this policy), also tell us what happened and how you would like us to reply.

We answer queries within ten business days and complaints within fifteen. If we need more time, we will tell you why before the deadline: at most, five more business days for a query and eight for a complaint.

If you are not satisfied with our answer, you can file a complaint with Colombia’s Superintendence of Industry and Commerce (sic.gov.co) or, if you are in the European Union, with the data protection authority in your country.

Effective date and changes

This policy has been in effect since 24 September 2026 and remains in force for as long as we process personal data. If we change it, we will publish the new version on this page with its date.