Privacy Policy

Last updated: September 7, 2026 · Effective: September 7, 2026

1. Scope

This policy covers the personal data AGUACYCLO SAS collects through co.ojawater.com, through our WhatsApp, email and phone support channels, and through our official Instagram and Facebook accounts. It is issued under Colombian data protection law (Law 1581 of 2012 and Decree 1377 of 2013).

2. Data we collect

Data you give us

• Orders: full name, national ID or tax ID, phone number, email address, delivery address and city.
• Bank transfer payments: the payment receipt image you upload so we can verify the transaction.
• Reseller applications: name, WhatsApp number, email, city, department, sales experience and your message.
• Support enquiries: the content of the messages you send us and the account or number you send them from.
• Reviews: name, city and comment, when you choose to leave one.

Data collected automatically

• IP address, device type, browser and language.
• Pages visited, time on site, and referral source (for example, an ad or a search engine).
• Cookie data, as described in section 6.

Data we receive from third-party platforms

When you message us on WhatsApp, Instagram or Facebook, those platforms provide us with your public profile name, your user ID, your profile picture (if public) and the content of your messages. We never receive your password or any account data the platform does not share with us.

We do not collect sensitive data (racial or ethnic origin, political views, religious beliefs, health data, biometric data or data about sexual life), and we do not knowingly collect data from minors.

3. How we use your data

• Process, invoice, ship and track your order.
• Verify payments and keep the accounting records Colombian law requires.
• Answer questions and provide technical, warranty and after-sales support.
• Schedule installation and send filter-replacement reminders.
• Review and manage reseller applications.
• Send marketing messages about products, accessories and promotions — only if you opted in. You can opt out at any time.
• Measure site and advertising performance in aggregate.
• Comply with legal, tax and contractual obligations.

4. Legal basis

We process your data with your prior, express and informed consent, given when you submit a form, place an order or contact us through our support channels. We also process data where it is necessary to perform a contract with you or to comply with a legal obligation. You may withdraw consent at any time by writing to ojawatercol@gmail.com, except where we are legally or contractually required to retain the information.

5. Who we share data with

We do not sell, rent or trade your personal data. We share it only with providers who help us operate, and only the data each one needs:

• Infrastructure and database providers (Supabase), where site records are stored.
• Payment gateway (Bold) and financial institutions (Bancolombia). Full card details are handled directly by the gateway; OJA Water does not store them.
• Shipping and logistics companies, to deliver your order.
• Authorised installation technicians, when you purchase professional installation.
• Messaging and advertising platforms (Meta Platforms — WhatsApp, Instagram, Facebook — and Google), to handle your messages and measure campaigns.
• Competent authorities, where required by court order or law.

Some providers are located outside Colombia, so your data may be transferred internationally. In those cases we require security and confidentiality standards equivalent to those set out in Colombian law.

6. Cookies and measurement

We use first-party cookies to make the site work (for example, remembering your cart and language) and third-party cookies for analytics and advertising, including Google Analytics and the Meta pixel. These tools tell us how many people visit and which ads drive visits; they do not identify you by name. You can block or delete cookies in your browser settings, though some site features may stop working.

7. How long we keep your data

• Order and invoicing data: at least 5 years, as required by Colombian tax and commercial law.
• Warranty and support data: for the warranty period and up to 2 years afterwards.
• Enquiries and reseller applications without a sale: up to 2 years.
• Marketing contact data: until you opt out.

After those periods, data is securely deleted or anonymised.

8. Your rights

Under Law 1581 of 2012 you have the right to access, update and correct your personal data; to request proof of the consent you gave; to be told how your data has been used; to file a complaint with the Colombian Superintendency of Industry and Commerce (SIC); and to withdraw consent and request deletion where no legal or contractual duty requires us to keep the data. Access is free of charge.

To exercise any of these rights, write to ojawatercol@gmail.com with your name, ID number and your specific request. We answer enquiries within 10 business days and formal claims within 15 business days.

9. How to delete your data

10. Security

The site runs over an encrypted connection (HTTPS/SSL). Data is stored on access-controlled servers and only authorised OJA Water staff can view it. No system is perfect, but we maintain reasonable technical, organisational and administrative safeguards against loss, misuse and unauthorised access.

11. Children

Our products and this site are intended for people aged 18 and over. We do not knowingly collect data from minors. If we find that we have received a minor's data without parental consent, we delete it.

12. Changes to this policy

We may update this policy to reflect legal or operational changes. The current version is always published on this page with its update date. If a change is significant, we will notify you through the contact details we hold.

13. Contact

AGUACYCLO SAS · NIT 902.037.692-9
Calle 8 # 43a 89, Medellín, Antioquia, Colombia
ojawatercol@gmail.com · +57 319 296 3363