This Privacy Policy explains in general terms how nanoHexalia handles personal information across its ecosystem. It applies to the main website, subdomains, applications, software products, APIs, forms, support and contact channels, professional services, research, development and innovation activities, and education or training programs that refer to this policy.
Effective date: 2026-09-27 · Version: 2026-09-27.1
1. Who handles the information
nanoHexalia acts as data controller when it determines the purposes and means of processing. In some business services, it may also act as a data processor on behalf of a customer, in which case the processing scope is additionally governed by the applicable contract, data processing agreement or documented instructions.
For privacy and data protection matters, you may write to [email protected]. For general inquiries, you may use [email protected] or +57 3023057715.
2. Who this may apply to
- Visitors to our websites and subdomains.
- Users of nanoHexalia products, applications, platforms, APIs or tools.
- Customers, prospects, business contacts and people requesting support, diagnostics, consulting or information.
- Participants, instructors or contacts involved in education and training.
- Participants, collaborators, partners or contacts involved in research, development and innovation.
- Suppliers, contractors and partners where a legitimate relationship with nanoHexalia exists.
3. Information we may process
Depending on the interaction, we may process identification and contact data, company and role information, city and country, commercial or contractual information, scheduling preferences, support requests, interaction records, technical security and usage information, and content a user chooses to provide to a solution.
When a product allows files, documents, messages, prompts, images, audio, video or other data to be uploaded, the user must have sufficient authorization or lawful grounds to provide them and should avoid including unnecessary information, secrets, credentials or sensitive data that are not required for the service purpose.
4. How we use information
- Provide, operate, configure, maintain and support products, solutions and services.
- Respond to requests and manage scheduling, contact, support and commercial or operational follow-up.
- Manage accounts, authentication, security, abuse prevention, auditing and traceability.
- Perform contractual obligations, billing, payments, compliance and handle warranties or claims where applicable.
- Perform analytics, performance measurement and quality improvement, using minimization, aggregation or anonymization where the purpose allows.
- Conduct research, development and innovation where there is a compatible purpose, authorization, contract or other applicable lawful basis.
- Manage education and training activities, including registration, participation, assessment or certification where the program provides for it.
5. Artificial intelligence and automation
Some solutions may use artificial intelligence, machine-learning models, rules, recommendation systems or automation. Their use does not remove applicable obligations concerning privacy, security, purpose limitation, necessity, reasonableness, proportionality and accountability in personal-data processing.
Automated outputs may require human review depending on context and risk. nanoHexalia does not assume that all data provided by a user may be freely reused for training or research: any additional use must respect the stated purpose, authorization, contract and applicable law.
6. Research, development and innovation
As a Research Center and Software Factory, nanoHexalia may conduct studies, prototypes, tests, evaluations, controlled experiments and technology-development activities. Where these activities involve personal data, they must have a defined purpose and apply measures appropriate to the nature and risk of the information.
7. Education and training
As an Education and Training Center, nanoHexalia may process data needed for registration, access, communications, attendance, learning activities, assessments, records or certificates, and program follow-up. Specific program terms may supplement this policy.
8. Providers, processors and transfers
We may use providers for infrastructure, cloud services, email, communications, analytics, security, storage, support, payments, automation or artificial intelligence. When a third party processes data on behalf of nanoHexalia, processing will be limited to the authorized purpose and appropriate confidentiality, security and processing conditions will be sought.
Some providers may operate outside Colombia. International transfers or processing arrangements will be managed in accordance with applicable rules and nanoHexalia's role in each processing activity.
9. Cookies, analytics and technical data
Our websites and products may use cookies, local storage, technical logs and analytics tools for security, operation, measurement and improvement. Where a technology requires consent or another specific condition, the appropriate mechanism will apply.
10. Security and retention
We apply reasonable and proportionate organizational, access, traceability and security measures to reduce risks of loss, unauthorized access, alteration, disclosure or misuse. Information is retained while needed for the stated purpose, service delivery, contractual or legal obligations, defense of rights, security or traceability, and is later deleted, anonymized or restricted where appropriate.
11. Sensitive data and minors
We do not request sensitive data or data relating to children or adolescents as a general contact requirement. If a specific activity legitimately requires such information, enhanced safeguards will apply, including appropriate authorization where required and protection of the child's best interests.
12. Rights and contact
Individuals may know, access, update and correct their data and, where applicable, request deletion, withdraw authorizations, request evidence of authorization, and submit inquiries or complaints. The primary channel is [email protected].
The formal procedure and applicable response times are described in the Personal Data Processing Policy.
13. Changes and related documents
We may update this policy to reflect legal, technological, organizational, product or service changes. The current version and effective date will be published on this page. This policy is supplemented by the Personal Data Processing Policy and the General Terms and Conditions, as well as any product- or service-specific terms.