TIMEPARCHE POLICIES
Privacy and personal data policy
How we collect, use and protect personal data and handle data rights.
Operational version: 2026-10-25 · Legal review required before the first real charge.
Controller and scope
The controller is the provider identified at the top of this policy. It covers event forms, claims, subscriptions, administration, purchases and TimeParche communications.
Data and purposes
- Identity and contact data for requests, payments, claims and support.
- Event and organizer data for review, publication, promotion, fraud prevention and safety.
- Minimal technical data, including a temporary HMAC connection fingerprint for abuse prevention; raw IP is not stored in that table.
- Consent versions and traceability for operational evidence.
- Marketing email or phone only with separate authorization; accepting terms is not marketing consent.
Consent and sensitive data
Consent must be prior, express and informed and is never preselected. We do not request sensitive data or minors’ data to create an event. Future uses will require specific consent and stronger safeguards.
Processors and transfers
We may use Vercel, Supabase and Mercado Pago to provide the service. Data may be processed outside Colombia with appropriate contractual and technical safeguards. We do not sell personal data.
Retention and security
We retain requests, payments, consents and claims as needed to provide services, meet legal obligations and resolve disputes, then delete or anonymize them where appropriate. We use access controls, encryption in transit and server-only secrets, but no system eliminates all risk.
Rights and procedure
- Access, update and correct personal data.
- Request proof and information about consent use.
- Withdraw consent or request deletion where applicable.
- Complain to Colombia’s Superintendence of Industry and Commerce after first contacting TimeParche.
- Use the data-rights form. TimeParche verifies identity, suppresses marketing, reviews legal retention duties, deletes or anonymizes eligible data and keeps minimal non-sensitive audit evidence.
- Access consultations target 10 business days; correction and deletion complaints target 15 business days, subject to notified statutory extensions.
Cookies and local storage
The site uses essential local storage for theme, PWA and the demo cart. Behavioural advertising is not active. Non-essential analytics or cookies will require notice and a choice before activation.

