Privacy Policy

1. Data Controller

IMPULSUS Strategic Growth Architecture, headquartered in Pereira, Colombia, is the controller of the personal data collected through the website https://wp.impulsus.io and its contact channels.

Controller email: hello@wp.impulsus.io

2. Data We Collect

IMPULSUS collects only the data necessary to provide its services and improve the user experience. The data we may collect includes:

• Full name
• Email address
• Phone number or WhatsApp (when voluntarily provided)
• Company or organization name
• Information provided through the strategic diagnosis or contact forms
• Browsing data: IP address, browser type, pages visited, session duration (via cookies and analytics tools)

3. Purpose of Processing

The data collected is used exclusively for the following purposes:

• Responding to contact, diagnosis, or service information requests
• Managing the commercial relationship with current and prospective clients
• Sending communications related to the status of a contracted intervention
• Sending strategic content or IMPULSUS updates (only with prior consent)
• Improving website functionality and user experience through analytics
• Fulfilling legal and contractual obligations

4. Legal Basis for Processing

The processing of personal data by IMPULSUS is based on one of the following legal grounds:

• Consent: when the user completes a form, initiates the diagnosis, or voluntarily subscribes to communications.
• Contract performance: when processing is necessary to provide the contracted services.
• Legitimate interest: for commercial follow-up of received inquiries, provided the user's interests do not prevail.
• Legal obligation: when Colombian or applicable law requires the processing.

5. Cookies and Analytics Tools

This site uses technically necessary cookies for its operation, and may use web analytics tools such as Google Analytics to understand visitor behavior in an aggregated and anonymous manner.

Analytics cookies are only activated with the user's consent. You can manage your cookie preferences through your browser settings or via the site's cookie notice.

For more information on how Google manages Analytics data, see the Google Privacy Policy.

6. Data Retention

Personal data is retained for the time strictly necessary to fulfill the purpose for which it was collected:

• Contact and diagnosis data without subsequent engagement: maximum 24 months from the last interaction.
• Client data with an active or completed intervention: for the duration of the commercial relationship and up to 5 years after, due to legal and accounting obligations.
• Browsing and analytics data: as configured by the tool used, generally no more than 14 months.

7. International Data Transfers

IMPULSUS may use tools and service providers that process data outside Colombia, including providers in the European Union and the United States (such as Google Workspace and email marketing platforms).

In all cases, IMPULSUS verifies that such providers have adequate data protection guarantees in accordance with the GDPR (standard contractual clauses, certifications, or adequacy decisions) and Colombian Law 1581 of 2012.

8. Your Rights

As a data subject, you have the following rights, exercisable at any time:

To exercise any of these rights, write to us at hello@wp.impulsus.io stating your name, the right you wish to exercise, and a description of the data in question. We will respond within a maximum of 15 business days.

If you believe that the processing of your data violates applicable regulations, you may file a complaint with the Superintendencia de Industria y Comercio (SIC) in Colombia, or with the data protection authority in your country of residence if you are located in the European Union.

9. Data Security

IMPULSUS implements reasonable technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or disclosure. These measures include the use of encrypted connections (HTTPS), restricted access to data management systems, and backup protocols.

In the event of a security breach affecting your data, IMPULSUS will notify those affected and the relevant authorities within the timeframes established by applicable regulations.

10. Minors

IMPULSUS services are directed exclusively to individuals over 18 years of age. We do not knowingly collect data from minors. If we detect that we have received data from a minor without the consent of their legal representatives, we will proceed to delete it immediately.

11. Updates to This Policy

IMPULSUS may update this Privacy Policy to reflect changes in its practices, services, or applicable regulations. The current version is always the one published on this page, with the last updated date indicated in the header.

For substantial changes affecting active clients, IMPULSUS will provide notice by email at least 30 days in advance.