Personal Data Processing Policy

Version 2.0 · Last updated: November 11, 2026

This policy applies to the processing of personal data that we carry out from Colombia or about people located in Colombia, in accordance with Law 1581 of 2012 and its regulations. If you are in the United States, please also read our Privacy Policy: the two complement each other.

1. Who is responsible for the processing

• Legal name: Katalyst Digital LLC
• Trade name: MiNegocio.PRO
• Address: 30 N Gould St, STE R, Sheridan, WY 82801, United States
• Customer service: from Bogotá, Colombia, and in Florida, United States
• General email: optimiza@minegocio.pro
• Email for personal data matters: privacidad@minegocio.pro
• WhatsApp: +57 313 335 8753
• Florida phone: +1 (689) 220-1141

In this policy, “MiNegocio.PRO”, “we”, “us”, or “the Controller” refers to Katalyst Digital LLC.

2. Legal framework

• Article 15 of the Colombian Constitution, which recognizes the right to know, update, and correct the information collected about you in databases.
• Statutory Law 1581 of 2012, which establishes the general personal data protection regime.
• Decree 1074 of 2015 (the Single Regulatory Decree for the Commerce, Industry and Tourism Sector), which compiles Decree 1377 of 2013 on authorization, processing policies, and demonstrated accountability.
• Any rules that amend, regulate, or replace the above, and the instructions of the Superintendence of Industry and Commerce (SIC).

The data protection authority in Colombia is the SIC, through its Delegate Office for Personal Data Protection (www.sic.gov.co).

3. Definitions

• Authorization: the prior, express, and informed consent of the data subject to process their personal data.
• Privacy notice: a communication that informs the data subject about this policy, how to access it, and the purposes for which their data is processed.
• Database: an organized set of personal data subject to processing.
• Personal data: information that identifies a natural person or makes them identifiable.
• Sensitive data: data that affects the data subject’s privacy or whose misuse may lead to discrimination, such as health, biometric, racial or ethnic origin, political orientation, religious beliefs, sex life, or union membership data.
• Processor: a person who processes personal data on behalf of the Controller.
• Controller: the person who decides on the database and the processing of the data.
• Data subject: the natural person whose data is processed.
• Processing: any operation on personal data, such as collection, storage, use, circulation, or deletion.
• Transfer: sending data to a recipient, inside or outside the country, that is itself a Controller.
• Transmission: communicating data to a Processor, inside or outside the country, so that it processes them on behalf of the Controller.

4. Principles we apply

• Legality: we process data in accordance with the law and this policy.
• Purpose: we use data only for the purposes we have told you about.
• Freedom: we process your data with your prior authorization, except where the law provides otherwise.
• Truthfulness or quality: we strive to keep data accurate, complete, correct, and up to date.
• Transparency: you can find out at any time what data of yours we hold.
• Restricted access and circulation: only authorized people who need your data for their work can access it.
• Security: we protect data with reasonable technical, human, and administrative measures.
• Confidentiality: everyone involved in the processing keeps the data confidential, even after their relationship with us ends.

5. Data we collect

Data you give us

• Name, email address, and phone or WhatsApp number.
• Your business name, city, industry, and the information you tell us about your presence on Google and your goals.
• The content of your messages, requests, and answers.
• Contracting and billing data when you hire us: company name, tax ID, address, and billing contact details.
• Access or administration permissions on your accounts (for example, Google Business Profile, Google Ads, website, or social media), only when needed to provide the service and, wherever available, through each platform’s delegated access mechanisms.

Data generated when you visit the site

• Technical logs from the web hosting server: IP address, browser and device type, pages visited, and date and time of the visit.
• Your light or dark mode preference, which is saved only in your browser.

This site does not use analytics or advertising cookies. Details are in our Cookie Policy.

What you type into our free tools

The 3-minute audit, the ROAS and ROI calculator, the WhatsApp link generator, and the password generator work in your browser. What you type into them is not sent to our servers or saved. It only reaches us if you choose to send us the result via WhatsApp.

If you give us data about other people, such as your business’s customers, you declare that you have the authorization to do so.

6. Sensitive data and data of minors

We do not request sensitive data. You have the right not to answer questions about it. If your business handles health information or other sensitive data about your customers or patients, we ask you not to share it with us; if we receive it by mistake, we delete it.

Our services are for businesses and professionals who are of legal age. We do not intentionally collect data from anyone under 18. Processing data of children and adolescents requires respecting their best interests and having the authorization of their legal representative. If you believe a minor has sent us data, write to us and we will delete it.

7. What we use your data for (purposes)

• Respond to your messages and requests.
• Prepare and send you audits, diagnostics, and proposals.
• Provide and manage the services you hire: Google Business Profile, website, local SEO, Google Ads, content, and automations.
• Manage contracts, invoicing, collections, and accounting and tax obligations.
• Send you service reports.
• Send you commercial information, news, and useful content, only with your authorization and with the option to withdraw it whenever you wish.
• Improve the site and our services using aggregated information.
• Comply with legal obligations and respond to requests from competent authorities.
• Prevent fraud and protect the security of the site and our systems.

We do not sell your personal data.

8. Authorization

We process your data with your prior, express, and informed authorization. You give it, for example, when you write to us via WhatsApp or email to request information after learning about this policy and the notice on the site, when you accept a proposal or sign a contract, or when you voluntarily give us your data to receive the service. We keep proof of your authorization, such as the message or email you sent us.

We do not need your authorization in the cases the law exempts, such as information requested by an authority in the exercise of its functions, data of a public nature, cases of medical or health emergency, and processing authorized by law for historical, statistical, or scientific purposes.

9. Your rights as a data subject

• Know, update, and correct your personal data.
• Request proof of the authorization you gave us, except where the law does not require it.
• Be informed, upon request, about how we have used your data.
• File complaints with the Superintendence of Industry and Commerce for violations of the law.
• Revoke your authorization and request the deletion of your data when the principles, rights, and guarantees are not respected. This does not apply if you have a legal or contractual duty to remain in our database.
• Access, free of charge, the personal data that has been processed.

10. How to exercise your rights

Contact channels

Write to us at privacidad@minegocio.pro or via WhatsApp at +57 313 335 8753, with the subject “Personal data”. Include your full name and ID number, a contact method, a clear description of what you are requesting, and any documents you want to rely on. If you are acting on behalf of someone else, attach the power of attorney or proof of authority.

Inquiries

We respond to inquiries within a maximum of ten (10) business days from the day after we receive them. If we cannot do so within that time, we will tell you the reasons and the new date, which will not exceed five (5) additional business days.

Claims

If you believe your data should be corrected, updated, or deleted, or that we have breached the law, you can file a claim with your identification, a description of the facts, your address or contact method, and any documents you wish to attach. If the claim is incomplete, we will ask you to correct it within five (5) days of receiving it; if you do not do so within two (2) months, we will understand that you have withdrawn it.

We resolve the complete claim within a maximum of fifteen (15) business days from the day after we receive it. If that is not possible, we will tell you the reasons and the new date, which will not exceed eight (8) additional business days. If we are not competent to resolve it, we forward it to the right party within a maximum of two (2) business days and let you know. While it is being resolved, we add the note “claim in process” to the database.

Before going to the authority

You can only file a complaint with the Superintendence of Industry and Commerce after you have exhausted the inquiry or claim process with us.

11. Who we share your data with, and transfers outside Colombia

We share your data only when necessary to provide the service, with providers who process it on our behalf, or when a competent authority requires it. Examples of providers include web hosting, email, messaging (such as WhatsApp), Google tools, invoicing, and cloud storage. We do not sell or rent your data.

Katalyst Digital LLC is organized in the United States and uses technology services with international reach. For that reason, your data may be stored or processed outside Colombia, mainly in the United States. By giving us your authorization, you expressly and unequivocally authorize that transfer or transmission. We require our providers to apply adequate security and confidentiality measures.

12. When we process data on behalf of our clients

When we manage a client’s Google Business Profile, website, ads, or content, we may have access to data about the people who contact them, such as calls, messages, or forms. In that case we act as Processors: we use that data only to provide the service and following the client’s instructions, since the client is the Controller and must have those people’s authorization.

13. Information security

• Access to data is limited to those who need it for their work.
• Encrypted connection (HTTPS) on this site.
• Protected passwords and access, and permissions reviewed when a working relationship ends.
• Regular backups and system updates.
• Confidentiality agreements with the people and providers involved in the processing.

No system is completely secure. If an incident affecting your data occurs, we will manage it, inform you when appropriate, and report it to the Superintendence of Industry and Commerce in the cases and within the deadlines it sets.

14. How long we keep your data

We keep your data for as long as it is necessary for the purposes of this policy, for as long as the contractual relationship lasts, and for the time required by legal, accounting, and tax rules. If you only asked us for information and did not hire us, we keep it for up to twenty-four (24) months after your last contact, unless you ask us to delete it sooner. After that, we delete or anonymize it.

15. Commercial communications

We only send you commercial messages with your authorization. We respect the contact hours and limits set by current Colombian regulations, such as Law 2300 of 2023. You can ask us to stop writing to you at any time by replying “no more messages” or writing to privacidad@minegocio.pro, and we will honor it at no cost.

16. National Database Registry

When the law requires it, we will register our databases in the National Database Registry (RNBD) administered by the Superintendence of Industry and Commerce, and we will keep that registration up to date.

17. Effective date and changes to this policy

This policy is effective from its publication on this site. Each database remains in force for as long as its purpose lasts. If we make substantial changes, we will publish them here and, when the law requires it, communicate them to you by an effective means before applying them. If the purposes change substantially, we will ask for your new authorization.

18. Contact

For any questions about this policy or your data, write to us at privacidad@minegocio.pro. You can also go to the Superintendence of Industry and Commerce (www.sic.gov.co), once you have exhausted the process with us.