We are committed to protecting your personal information and being transparent about how we collect, use and safeguard your data.
We share information only with service providers and authorities as needed to deliver our services, comply with legal obligations or protect our rights.
PointOne is a technology services business operated by an individual in Bogotá, Colombia. We provide website design, development, hosting, maintenance and technical support services, primarily to businesses and independent professionals in the United States. This Privacy Policy explains how PointOne collects, uses, discloses, retains and protects personal information when individuals visit our website, request quotations, purchase services or communicate with us.
This Policy principally covers information PointOne handles for its own business purposes. When PointOne handles information on behalf of a customer through that customer's website or systems, the relevant customer agreement and applicable data processing terms may also apply. This notice does not replace any separate authorization or notice required by law.
PointOne is the commercial name used by an individual business operator. For personal information processed for PointOne's own business purposes, the data controller is:
PointOne Privacy Support, reachable at the email address above, is responsible for receiving and coordinating privacy inquiries, consultations and complaints.
Depending on the interaction, we may collect the following types of information:
Contact and business information, including name, email, telephone number, company name and project details.
Customer and service information, including selected plan, service requirements, account correspondence, billing information, payment status and transaction references.
Technical information, including IP address, approximate location, device and browser information, website interactions, cookie identifiers and analytics or advertising events.
Communications sent through email, WhatsApp, website forms or a rule-based chatbot.
Please do not send sensitive personal information through general inquiry channels unless specifically requested through an appropriate secure process. Our website and services are not intended for children.
We obtain information directly when you submit a form, request a quotation, purchase a service, contact support or communicate through WhatsApp or our chatbot. We may also receive limited payment, technical or operational information from service providers. Website forms are intended to deliver submissions to our business email rather than to a separate customer database; email systems, logs and backups may nevertheless store copies.
Our planned chatbot uses predefined responses, not generative AI. We do not intend to retain chatbot transcripts for customer profiling; essential technical logs may still be generated by the relevant systems.
We process information to respond to inquiries; prepare proposals; establish and perform service agreements; administer subscriptions, payments and invoices; deliver development, hosting, maintenance and support; communicate operational, security or billing information; protect our systems; measure website use and advertising performance; comply with applicable legal, tax and accounting obligations; and address disputes or legal claims.
Where Colombian data protection rules require prior, informed authorization, we will request and document that authorization unless a legal exception applies. Where other applicable laws require consent, notice, an opt-out or another legal basis, we will follow the relevant requirement. Providing this Policy alone does not constitute consent. We do not currently offer a newsletter or general promotional mailing list; service communications are intended to be transactional and operational.
Online payments are processed through PayPal. Customers are redirected to PayPal to enter payment credentials in PayPal's environment, subject to PayPal's own privacy practices. PointOne may receive and maintain the customer or billing name, purchased plan, payment status, transaction identifier and records reasonably necessary to administer subscriptions and meet legal obligations. PointOne does not intentionally receive or store full card numbers entered directly into PayPal. The actual information exchanged depends on the payment integration and must be consistent with its configuration.
Our website may use essential cookies and, when deployed, Google Analytics and Meta Pixel or similar technologies to understand site use and measure advertising. These technologies may collect identifiers, device data and interactions, and their providers may process information under their own policies.
Where required by applicable law, we will obtain consent before activating non-essential technologies. Our intended cookie controls allow visitors to accept optional technologies, reject non-essential technologies or customize their choices, and to revisit their preferences. These statements describe the controls that must be implemented when the relevant tracking technologies are enabled; they must not be interpreted as confirmation that a particular tool is currently active.
Browser settings may also restrict cookies. Further information about specific cookies, providers and retention settings may be provided through a Cookie Policy or preference panel. We will provide any additional opt-out rights required by applicable US state privacy laws where those laws apply.
PointOne uses third parties for business functions, including Hostinger (website hosting), PayPal (payments), Google Analytics (analytics if enabled), Meta Pixel (advertising measurement if enabled), WhatsApp (communications), and email or technical service providers. The selected Hostinger website server is located in Brazil. The services actually enabled and their technical configurations determine which information each provider receives. We seek to limit disclosures to information appropriate for the relevant purpose and apply contractual or other safeguards when required.
We may disclose information to service providers supporting hosting, payments, communications, analytics, security and support; to professional advisers where appropriate; to competent authorities when lawfully required; and as reasonably necessary to address security incidents, enforce rights or manage lawful business transitions. We do not operate a business of selling customer contact lists.
Certain advertising or analytics disclosures may qualify as a “sale,” “sharing” or targeted advertising under particular US state laws even when no money is exchanged. If such a law applies to PointOne, we will provide the required disclosures and mechanisms to exercise applicable rights; we do not claim an exemption or universal applicability without assessing the relevant jurisdiction and thresholds.
PointOne operates from Colombia and serves customers internationally. Our selected Hostinger web server is in Brazil, while other providers, their personnel, systems or backups may process information in additional countries. The location of the primary server is not a guarantee that all information remains in Brazil.
Where Colombian law applies, we will distinguish international transfers to another controller from transmissions to a processor and implement any authorization, agreement, exception or other safeguard required by the applicable regime. Other cross-border requirements will be assessed where relevant.
We retain personal information only for purposes and periods that are justified by the relationship and applicable law. Unconverted website inquiries are ordinarily intended to be removed from active business mailboxes within approximately 15 days of receipt, unless a response remains open, a business relationship develops or lawful retention is necessary. Copies in backups or provider systems may persist for their configured retention cycles.
Routine payment administration records may be reviewed for deletion after approximately three years where permitted. This is not a promise to destroy invoices, accounting, tax, commercial books or other records that must be retained longer under applicable law. Customer and support records may be retained while the relationship is active and thereafter where reasonably required for obligations, disputes or legal compliance. Cookie and log retention depends on the deployed tools and settings. We delete, anonymize or securely dispose of information when appropriate, subject to legal requirements and technical limitations.
We use reasonable organizational and technical measures appropriate to the information and risks involved, which may include restricted access, account safeguards, secure connections, service-provider controls and incident response procedures. No method of transmission or storage is completely secure. If an incident occurs, we will investigate, contain and address it and provide notifications to individuals or authorities where applicable law requires.
Depending on the law applicable to the information and person concerned, rights may include access, knowledge of processing, updating, rectification, deletion or suppression where legally available, revocation of authorization where applicable, and objections or opt-outs for specified uses. Under Colombian Law 1581 of 2012, data subjects may exercise applicable rights and request proof of authorization, subject to statutory exceptions.
Send requests to PointOne Privacy Support at support@pointoneweb.com, stating your name, contact information, the nature of your request and enough detail to identify the information concerned. We may request reasonable identity or representative verification.
For Colombian-law consultations, PointOne will respond within ten (10) business days of receipt; if this is not possible, it will inform the requester of the reason and new date, which may not exceed five (5) additional business days. For Colombian-law claims involving correction, updating, suppression or alleged noncompliance, PointOne will apply the statutory claims process: an incomplete claim may be returned for completion within five (5) business days; if PointOne is not competent, it will transfer the claim to the appropriate party within two (2) business days where applicable and notify the claimant. Once a complete claim is received, PointOne will respond within fifteen (15) business days, with a legally permitted extension of up to eight (8) additional business days after notice. A claim pending resolution will be marked as such in relevant records where required.
Data subjects may approach Colombia's Superintendencia de Industria y Comercio concerning an alleged breach after first exhausting the applicable consultation or claim procedure before PointOne, as required by law. Other applicable jurisdictions may have different procedures and deadlines, which PointOne will follow where legally required. Requests may be limited by legal retention obligations, third-party rights or other lawful exceptions.
PointOne may access or process information in customer websites, hosting environments, forms or support systems when providing contracted services. In those circumstances, the customer may act as the controller and PointOne as a processor or service provider, depending on the facts and applicable law. Customers generally determine their own collection purposes, privacy notices and authorizations. The parties' respective obligations, security measures and instructions should be addressed in their service agreement and, when appropriate, a data processing agreement. This Policy primarily addresses PointOne's own business processing.
Our website and services are intended for businesses and adult professionals and are not directed to children. We do not knowingly seek personal information from children through our general business channels. If we become aware of information collected in circumstances requiring parental authorization or other special protection, we will take steps required by applicable law. A parent or guardian may contact support@pointoneweb.com.
We may revise this Policy as our services, providers or legal obligations change. We will update the effective or last-updated date when a revised version is published. Material changes to the identification of the controller or purposes of processing will be communicated to affected individuals before implementation where Colombian law requires, and new authorization will be obtained when required for a new purpose. Other legally required notices or choices will be provided in applicable jurisdictions.
For privacy questions, requests or complaints, contact:
PointOne — PointOne Privacy Support
This Policy is intended to provide a general notice across our business operations. Additional jurisdiction-specific disclosures and rights will be provided where a law actually applies to PointOne and requires them. This Policy does not waive statutory rights.