Last updated: 22 / 11 / 2025

In Orvit Design (https: / / orvit.design) we value and protect your privacy. This Policy explains how we collect, use, store and protect your personal data, according to:

• Law 1581 of 2012 (Habeas Data - Colombia)

• Decree 1377 of 2013

• General Data Protection Regulation (GDPR - European Union)

By using our website or services, you accept the terms and conditions described in this policy.

1. Responsible for the Treatment

• ORVIT DESIGN

• Mail: sales@orvit.design

• WhatsApp: +57 315 103 7777

• Website: https: / / orvit.design

• Address: (Colombia - City)

2. Personal Data We Collect

2.1. Data provided directly by the user

• Name

• Email

• Telephone

• Company

• Position

• Information entered in forms (contact, quote, support, comments)

• Data for access to the customer panel or courses

• Messages sent by WhatsApp Business API

• Files or information you voluntarily share in projects

2.2. Data collected automatically (Cookies and Analytics)

• IP address

• Approximate country / city

• Type of browser and device

• Visited pages and time of navigation

• Unique identifiers

• User Settings

2.3. Data related to payments

Through WooCommerce + PayPal / Strip:

• Name

• Email

• Address

• Method of payment

• Transaction ID
  ⚠ We don't store card numbers. This information is only managed in PayPal or Stripe.

2.4. Data from the Login with Google

Although not yet active, we include:

• Google Profile Name

• Associate mail address

• Profile image

• Google User ID

• Secure authentication Tokens

They shall be used for:

• Community registration

• Access to the customer panel

• Shopping in WooCommerce

• Access to virtual courses

• Remember meetings

2.5. Data obtained by integration with WhatsApp Business API

• Conversations

• Telephone number

• Name (s)

• Files sent

• Date and time of messages

2.6. Data related to newsletters and marketing

(Using Mailchimp)

• Email

• Name

• Email activity (openings, clicks)

2.7. Other services that can access or process data

3. Purpose of treatment

Your data are used for:

3.1. Service delivery

• Web design and development

• Delivery of digital products

• Access to courses and customer panel

• Custom attention by WhatsApp

• Quotations and advice

3.2. Site management and accounts

• Manage your account

• Verify identity

• Authentication with Google

• Technical support

3.3. Marketing

• Newsletters

• Retargeting with Meta Pixel

• Notifications of new products or promotions

3.4. Use analysis

• Improving user experience

• Content optimization

• Internal statistics

4. Legal basis for treatment

According to GDPR:

• Express consent

• Contract performance (services / sales)

• Legitimate interest (safety, crucial analysis)

• Legal obligation (billing)

According to Colombian law:

• Prior, express and informed authorisation

• Legitimate and proportional purpose

5. Cookies Policy (Complete)

COOKIES POLICY

What are cookies?

They are small files stored in your browser that allow you to remember preferences, measure performance and improve experience.

5.1. Types of cookies we use

a. necessary cookies

• WordPress Session

• WooCommerce cart & checkout

• Cloudflare Security cookies

• Authentication with Google

• Anti-bots safety (reCAPTCHA)

b. Analytical cookies

• Google Analytics

• Anonymous use data

c. Marketing Cookies

• Target Pixel

• Google Ads remarketing

• Mailchimp tracking

d. Performance cookies

• Caché LiteSpeed

• VPS server optimization system

5.2. Disable cookies

You can manage cookies in your browser:

• Chrome: Settings → Privacy

• Firefox: Options → Privacy

• Safari: Settings → Privacy

Or from our consent banner.

6. International transfers

Several services process data outside Colombia or the EU:

• Google, Meta, Mailchimp — USA

• Digital Ocean — US / EU

• Cloudflare — Global

All have:

• Type Contractual clauses (SCC)

• GDPR standards

7. Information security

We implement:

• HTTPS + SSL

• Firewall Cloudflare

• DDoS protection

• Backups in VPS

• Authentication by OAuth (Google)

• Restriction of internal access

8. Conservation periods

• User accounts: while active

• Billing data: 5 years (legal obligation)

• Forms: 12-24 months

• Analytics: 26 months

• Cookies: according to user configuration

9. User Rights

Colombia - Law 1581

• Know

• Update

• Rectify

• Delete

• Revocate authorisation

Europe - GDPR

• Access

• Rectification

• Abolition

• Opposition

• Portability

• Limitation

Applications → sales@orvit.design

10. Changes to this Policy

We reserve the right to update this policy when necessary.

11. Contact

To exercise your rights or resolve concerns:

• Email: marketing@orvit.design

• WhatsApp: +57 315 103 7777