Privacy Policy and Personal Data Processing

Fernando Sánchez, who operates commercially under the Lyrvanta name, acts as Data Controller for personal data collected through this website and Lyrvanta-owned channels that refer to this policy. He is domiciled in Bogotá, Colombia and can be contacted at privacidad@lyrvanta.com or +57 311 663 1966.

This policy explains how Lyrvanta processes personal data and the purposes, safeguards and rights associated with that processing.

Processing is governed principally by Article 15 of the Political Constitution of Colombia, Law 1581 of 2012, Decree 1074 of 2015 and applicable instructions of the Superintendence of Industry and Commerce.

We may process identification, contact and business data, information voluntarily included in inquiries, and technical records required for operation, security or diagnostics. Please do not submit passwords, confidential financial information, unnecessary sensitive data or third-party personal data.

We may use data to respond to requests, establish contact, understand business needs, coordinate meetings, manage commercial or contractual relationships, operate and secure the site, and comply with applicable obligations. Materially different purposes will require prior information and authorization when applicable.

When authorization is required, Lyrvanta will request prior, express and informed consent and retain appropriate evidence. Silence is not authorization, and the contact form uses a separate unchecked consent box.

Data subjects may know, update and rectify their data; request proof of authorization; learn how data is used; submit inquiries or claims; request deletion when appropriate; revoke authorization when legally possible; and complain to the competent authority after the applicable prior procedure.

Privacy requests may be sent to privacidad@lyrvanta.com and should identify the data subject and describe the request. Additional information may be requested when necessary to verify identity or standing.

Access inquiries will be handled within a maximum of ten (10) business days from receipt. If it is not possible to respond within that period, we will inform the reason for the delay and the new response date, which may not exceed five (5) additional business days, as provided by law.

Claims concerning correction, updating, deletion, revocation or alleged non-compliance will be handled within a maximum of fifteen (15) business days counted from the day following complete receipt. If it is not possible to resolve the claim within that period, we will inform the reason for the delay and the new response date, which may not exceed eight (8) additional business days, as provided by law.

Lyrvanta will apply reasonable technical, administrative and organizational measures according to the nature of the information and the associated risk. No technological control can guarantee zero risk.

Lyrvanta may use providers for hosting, infrastructure, security, email, scheduling, videoconferencing, forms, storage, backups and related functions, under appropriate processing instructions and safeguards when applicable.

Some providers may operate outside Colombia. International transmissions or transfers will be handled under the mechanisms required by Colombian law according to the nature of the operation.

The site uses Cloudflare Web Analytics for aggregate traffic and performance metrics. According to the service documentation, Cloudflare Web Analytics does not collect or use visitors’ personal data. Google Analytics 4 is optional and loads only after the visitor allows analytics. It may use analytics identifiers and cookies to measure visits and aggregate commercial events. Lyrvanta does not send names, email addresses, phone numbers, company names, or free-text form or assessment content to Google Analytics as event parameters. The analytics preference is stored locally in the browser and can be changed at any time through the Analytics preferences control.

Data will be retained only for the period necessary for the stated purpose and for additional legal, contractual, evidentiary or rights-defense obligations, after which it will be deleted, anonymized or otherwise handled as required by law.

Lyrvanta does not generally request sensitive data through the public contact form. Any necessary processing of sensitive data will follow the special legal requirements and explicit authorization rules that apply.

Lyrvanta's general commercial channels are directed to companies and adults. We do not intentionally seek personal data from children or adolescents through the commercial form.

Links to third-party services are subject to the terms and privacy practices of those third parties, which are independent from Lyrvanta.

Lyrvanta may update this policy when legislation, services, purposes, technology, collection mechanisms or processing practices change. Material changes will update the effective date and be communicated when required.

This policy enters into effect on 2026-09-04.

For questions about this policy, you can write to privacidad@lyrvanta.com.