Privacy policy

01.Data controller

Your personal data is controlled by Malena Rodas, working under the OnlyRodas™ brand, an independent professional (individual) based in Bogotá, Colombia.

• Email: [email protected]
• Form: onlyrodas.com/contact/

This is also my personal data processing policy under Colombia’s Law 1581 of 2012 and Decree 1377 of 2013 (now compiled in Decree 1074 of 2015).

02.What data I collect

If you use the contact form: your name, email, project type, budget (if you give one) and your message. Along with them I store the page language, the approximate country you write from (Cloudflare infers it from your IP address; the IP itself isn’t stored), the date and time, and a record that you accepted this policy.

If you email me: your address and whatever you tell me.

If you book a call: the details Google Calendar asks for, such as your name and email.

If you accept analytics cookies: Google Analytics records how you use the site (pages viewed, visit length, device and browser type, approximate country or city, and where you came from) and ties it to a random ID stored in a cookie, not to your name. Google Analytics 4 doesn’t log or store your IP address. If you don’t accept, it doesn’t load.

Cloudflare Web Analytics: counts visits in aggregate: the page you view, where you came from, your country, your browser and device type, and how long the page takes to load. It doesn’t use cookies or store anything in your browser, and it doesn’t identify you. If you visit from the European Union, the UK or Switzerland, it only loads if you accept analytics. From any other country, it loads unless you reject analytics or your browser sends a Global Privacy Control signal.

If you use Tilde, the demo at onlyrodas.com/tilde/: to show you the sky where you are, the site uses your approximate location: the city and coordinates Cloudflare infers from your IP address. They’re rounded to about 1 km and only used to fetch the forecast at that moment; they aren’t stored or tied to you. If you tap “Use my exact location”, your browser asks for permission; if you give it, the coordinates are rounded to about 1 km in your own browser before they’re sent, and they aren’t stored either. What you type in the chat never leaves your browser: Tilde follows a script and has no AI model behind it. If you accepted analytics, Google Analytics records which steps of the demo you go through, never what you type.

On every page visit: Cloudflare, which hosts the site, processes your IP address and technical connection data to deliver the pages and protect them from attacks.

I don’t ask for sensitive data (health, racial or ethnic origin, political opinions, biometrics, etc.). Please don’t include it in your message.

03.What I use it for

• Answering your inquiry and preparing a quote.
• Following up on that conversation and, if we work together, managing the project, invoicing and our relationship.
• Measuring site usage in aggregate, to improve it. Google Analytics only runs if you accept it. Cloudflare Web Analytics, which doesn’t use cookies, runs unless you reject analytics (in the European Union, the UK and Switzerland, only if you accept analytics).
• Showing you, in Tilde, the weather where you are.
• Keeping the site and the form secure and free of spam.

I don’t sell, rent or share your data for advertising. I won’t send you newsletters without asking for separate permission, and I don’t make automated decisions that affect you.

04.Consent and legal basis

In Colombia, I process your data with the prior, express and informed authorization you give by ticking the box on the form or by writing to me on your own initiative. I keep a record of that authorization. In Tilde, your approximate location isn’t stored and doesn’t identify you, and your exact location is only used if you allow it in your browser.

In the European Union and Spain (General Data Protection Regulation, GDPR, and Organic Law 3/2018): I answer your inquiry as a pre-contractual step you request (Art. 6(1)(b) GDPR); analytics rely on your consent (Art. 6(1)(a)), which you can withdraw at any time; and site security relies on my legitimate interest in protecting it (Art. 6(1)(f)). In Tilde, your approximate location relies on my legitimate interest in showing you the demo you opened (Art. 6(1)(f)), and your exact location on the permission you give in your browser (Art. 6(1)(a)).

05.Who I share it with

Only with providers that deliver a service to me and process the data on my behalf:

• Cloudflare, Inc.: hosts the site, processes form submissions and counts visits without cookies (Cloudflare Web Analytics).
• Google LLC: stores form submissions in Google Sheets (through Google Apps Script), runs call booking (Google Calendar) and, if you accept it, analytics (Google Analytics).
• My email provider, to receive and answer your messages.

Also, when you use Tilde, my server (not your browser) asks the Norwegian Meteorological Institute (MET Norway) for the forecast with the coordinates rounded to about 1 km. MET Norway doesn’t receive your IP address or anything that identifies you (api.met.no/doc/TermsOfService ↗).

I could also disclose data to an authority if a law or court order requires it.

06.International transfers

I work from Colombia, so your data is processed there. These providers may also store it on servers in the United States and other countries, under the data processing agreements they have with their customers. If you live in the European Union: Google and Cloudflare participate in the EU-U.S. Data Privacy Framework and use the standard contractual clauses approved by the European Commission.

07.How long I keep it

• Inquiries and quotes that don’t go ahead: up to 2 years after our last contact; then I delete them.
• If we work together: for as long as the relationship lasts and then as long as accounting and tax rules require (in Colombia, up to 10 years for accounting records).
• Analytics: Google Analytics keeps data tied to your ID for 14 months at most.
• Cloudflare statistics: they carry no identifiers. Cloudflare keeps the detail for 7 days and then a reduced sample; I can look back 6 months.
• Tilde’s weather: I don’t store your location. The forecast sits in Cloudflare’s cache per cell of about 1 km, for up to 6 hours, with no link to you.
• Your cookie choice: 12 months, in your own browser.

My databases remain in use for as long as the purposes described in this policy exist.

08.Your rights

Under Colombian law, you can:

• know, update and correct your data;
• ask for proof of the authorization you gave me;
• find out how I’ve used it;
• revoke your authorization or ask me to delete it, unless I must keep it by law or contract;
• access it free of charge;
• file a complaint with the Superintendence of Industry and Commerce (SIC) after first raising it with me.

09.How to exercise them

Email [email protected] with the subject “Personal data”, telling me your name, the email you wrote from and what you need. If necessary, I’ll ask for something to confirm it’s you. It’s free.

• Inquiries (what data I hold): I reply within 10 business days at most, extendable by 5 if I tell you why.
• Claims (correct, update, delete or revoke): I reply within 15 business days at most, extendable by 8 if I tell you why.

If you’re not satisfied, you can go to the SIC: www.sic.gov.co ↗.

10.If you live outside Colombia

• European Union and Spain: you can also ask me to restrict processing, to port your data, or object to processing. I reply within one month, extendable by two more in complex cases. You can complain to the Spanish Data Protection Agency (www.aepd.es ↗) or the authority in your country.
• Mexico, Brazil, Argentina, Chile, Peru and the rest of Latin America: you have the rights your country’s law gives you (for example, ARCO rights in Mexico or LGPD rights in Brazil), and you exercise them through the same email.
• United States: I don’t sell or share your personal data for advertising. If your browser sends a Global Privacy Control signal, analytics stay off unless you turn them on yourself. You can ask me what data I hold about you, and to correct or delete it.
• Canada: you can access and correct your data, and complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information. Technologies that can identify or profile you, such as Google Analytics, are off by default.
• Australia: you can ask for access to and correction of your data, and complain to the Office of the Australian Information Commissioner (OAIC).

11.Security

I use an encrypted connection (HTTPS), validate what comes in through the form, filter spam and limit access to the data to my own accounts. No system is foolproof: if an incident affects your data, I’ll tell you and report it to the authority when the law requires it.

12.Minors

This site is meant for businesses and adults. If you’re under 18, please don’t send me your data; if it reached me by mistake, I’ll delete it.

13.Changes and effective date

This policy is effective as of October 28, 2026. If I change it materially, I’ll say so on this page and update the date. Please also read the Cookie policy.