Personal data processing policy

1. Identification and scope

This policy covers LogiXY's commercial website and processing associated with requests and service provision. The controller's identification remains to be completed: legal or individual name, tax ID (NIT), domicile, address and telephone number. Intended data protection channel: contacto@logixy.co. The effective date must be set when the final version is approved.

LogiXY determines how its business contact data is processed. When it processes recipients', drivers' or customers' data on a logistics operator's instructions, it acts as a processor; the operator determines the purposes of its operations and must inform data subjects and manage the required authorizations.

2. Data and purposes

To handle business requests, we may receive a name, company, email, approximate delivery volume and the message sent. These are used to respond, prepare a proposal, arrange a trial and follow up on that request. Campaigns unrelated to the request require separate authorization where applicable.

Contracted services may involve account, contact and billing details, shipping addresses, driver location during service and proof of delivery. Use is limited to enabling the requested operations, tracking, support, security and compliance with applicable obligations. Do not include third parties' personal information in a business request unless necessary.

3. How this site works

Demo and contact buttons open a form for name, company, email, delivery volume, plan or service of interest and an optional message. Continuing includes these details in a link that opens WhatsApp at +57 320 222 2695. You decide whether to send the message in WhatsApp; communication is handled through that service and its policies. This landing page does not save requests in a database or send messages automatically.

Xiyo uses predefined questions and answers. Its conversation remains in memory during the visit, is not sent to an AI provider and is not stored as persistent history. The button to talk to the team opens the contact form; it does not include the conversation history.

The selector stores country and language preferences in browser local storage. Each visit uses the language of the page address: Spanish, English or Portuguese; switching opens the equivalent version. Without a saved preference, the Spanish version shows Colombia and the other versions show the international catalog. The selected country is retained independently; geolocation is not used. You can erase preferences by deleting site data. The portal currently includes no advertising, third-party analytics or tracking cookies in its code. Access transmits the technical data needed to serve the site; hosting and security logs must be managed under this policy. Changes to forms, analytics or chat must be reflected here before new collection methods are activated.

4. Authorization and special data

Where authorization is required, it must be requested in advance, be informed, be available for consultation and describe the purposes. Visiting the site does not by itself authorize marketing campaigns. The contact form does not request sensitive data or minors' data. If an operation requires sensitive data, its optional nature must be disclosed and the corresponding legal requirements met.

5. Your rights

You may know, update and rectify your data; request proof of authorization and information about its use; access it free of charge; and request deletion or revoke authorization where applicable. You may also lodge complaints with Colombia's Superintendence of Industry and Commerce, first completing the consultation or complaint procedure with the controller or processor where required.

6. Inquiries and complaints

Write to contacto@logixy.co with the subject 'Personal data', your name, request and preferred reply channel. Provide only what is necessary to verify your identity and handle the case; if acting for someone else, provide proof of representation.

Inquiries are answered within ten business days, extendable by five more with prior explanation. Complete complaints are answered within fifteen business days starting the day after receipt, extendable by eight more with explanation. If incomplete, correction is requested within five days; without a response for two months, the complaint is deemed withdrawn. If another competent party must handle it, it is forwarded within two business days and the interested party is informed. Deletion may be limited by legal or contractual retention obligations.

7. Providers and information sharing

Providers needed for hosting, email, support or contracted services must process only the required data under appropriate instructions and commitments. Any international transmission or transfer of personal data must have the legal basis and safeguards required by applicable law. No list of providers or storage locations not yet confirmed for deployment is presented.

8. Retention and security

Information is retained for the time needed for the disclosed purpose and the relevant legal or contractual obligations. It must then be appropriately deleted or anonymized. Specific retention periods for contacts, technical logs and operational data must be defined before each processing activity is enabled.

Management must include access controls, credential protection and incident handling proportionate to the risks. These measures reduce risks without offering an absolute security guarantee. Any incident may be reported through the contact channel.

9. Legal framework and updates

Reference: Law 1581 of 2012 and Decree 1074 of 2015, data protection provisions. Material changes will be communicated before they take effect; new purposes require the relevant authorization.

Contact

For questions about this document, write to contacto@logixy.co.