Data protection
Privacy policy
At El Poder de Aprender we process your personal data transparently and only for the purposes described here, in line with Colombia’s Law 1581 of 2012 and Decree 1377 of 2013.
Data controller
El Poder de Aprender is the controller of the personal data collected through this site and the course platform.
You can reach us through the channels published on the site to exercise your rights or ask about this policy.
We are finalizing the official legal name, tax ID and contact email of El Poder de Aprender. In the meantime, you can reach us on WhatsApp at +57 321 3281693.
Data we collect
We collect only the data needed to provide the service:
- Account and purchase data: buyer’s name, email and phone.
- Payment data: handled directly by the payment gateway (ePayco). The platform does not store card numbers.
- Classroom access IP addresses: we log the IPs used to open each course.
- Messaging data: contacts and conversations when you write to us on WhatsApp or other channels.
- Usage data: aggregate browsing and course-progress metrics.
IP logging and classroom access control
Each purchase grants an individual classroom access. For the legitimate purpose of preventing fraud and unauthorized resale of the courses, we log the IP addresses used to open each classroom and limit the number of distinct networks or devices per access within a moving time window.
By default, the limit is five (5) distinct IP addresses within a thirty (30) day moving window; a course may use a different setting when justified. An IP already seen within the window never counts as new, so normal use from your usual devices (home, work, phone) is not affected.
If a new IP exceeds that limit, access is automatically blocked and we notify you. To reactivate it, simply write to us on WhatsApp at +57 321 3281693 so we can validate that the use is personal.
This processing is essential to protect the educational content; by purchasing a course you accept this access control.
How we use your data
- Process your purchase and grant you access to the course.
- Email you the access link to the classroom and to your course library.
- Prevent fraud and resale through IP-based access control.
- Provide support via WhatsApp, email or phone.
- Issue and publicly verify your course completion certificates.
- Send marketing communications only with your consent (opt-in).
- Improve the platform with aggregate analytics, without unnecessarily identifying individuals.
Data transfer and disclosure to third parties
To operate the platform we share specific data with technology providers acting as data processors, only to the extent necessary for their service. We never sell your personal data.
| Provider | Data received | Purpose |
|---|---|---|
| ePayco (payment gateway) | Transaction and contact data for billing. Never your card number. | Securely process the course payment. |
| WhatsApp Cloud API (Meta) | Phone number and conversation content. | Send your access link, provide support and, with consent, marketing messages. |
| Meta Pixel | Browsing identifiers and conversion events (e.g., purchase completed). | Measure the performance of our advertising campaigns on Meta. |
| Aggregate analytics (Google Analytics and similar) | Aggregate browsing metrics, without name or ID number. | Understand site usage and improve the platform. |
We only share identifiable data with third parties beyond this table when a competent authority requires it by law.
Messaging and WhatsApp
If you write to us or agree to receive messages, we process your contacts and conversations through messaging providers (WhatsApp/Meta) for support and, with your consent, for marketing.
You can opt out at any time by replying with your request on the same channel; we will stop sending you marketing communications.
Payments
Payments are processed through an external gateway (ePayco). We do not store your card data; the gateway handles that information under its own policies and security standards.
Completion certificates and public verification
When you finish a course you can generate a completion certificate. So that a third party (for example, an employer) can confirm its authenticity, we publish a public verification page by unique code showing only the student’s name, the course completed and the completion date.
That verification page never shows your email, phone, ID number or any other sensitive or contact data.
Retention period
We keep your account and purchase data while you have active access to your courses and, afterward, for as long as required by applicable accounting, tax and consumer-protection rules.
The IP log is kept for the moving window described above (30 days by default) and stops counting toward the access limit once that period ends, without prejudice to retaining it longer when needed to investigate fraud already detected.
Information security
We apply reasonable technical, administrative and organizational measures to protect your personal data against loss, unauthorized access, alteration or misuse, and we require equivalent confidentiality and protection commitments from our providers.
Minors
Our courses and platform purchases are aimed at adults. If a minor is going to take a course, the account and purchase must be handled by a parent or guardian, who authorizes the processing of the minor’s data on their behalf as required by law.
Your rights
As the data owner you have the right to know, update and correct your data, request proof of the authorization granted for its processing, be informed about its use, and revoke the authorization or request its deletion when no legal or contractual duty requires us to keep it (Habeas Data, article 8 of Law 1581 of 2012).
How to exercise your rights
You can exercise your rights by writing to us on WhatsApp at +57 321 3281693, stating your name, your request and a contact method. We answer inquiries within ten (10) business days of receipt, claims within fifteen (15) business days, and data update, correction or deletion requests within eight (8) business days, under Law 1581 of 2012 and Decree 1377 of 2013.
Supervisory authority
If you believe we have not addressed your request or have breached the personal data protection regime, you may file a complaint with the Superintendence of Industry and Commerce (SIC), Colombia’s supervisory authority for personal data protection.
Changes to this policy
We may update this policy to reflect changes in the platform or in regulations. The current version will be published on this page.