Skip to content

Data protection

Personal data processing policy

This policy describes how El Poder de Aprender collects, uses, stores and protects the personal data of its users and customers, in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013 and complementary regulations.

Data controller

The controller of your personal data is El Poder de Aprender. You can reach us through the channels published on the site.

We are finalizing the official legal name, tax ID, address and habeas data email. In the meantime, you can reach us on WhatsApp at +57 321 3281693.

Data we process

We process the data you provide when registering, purchasing or communicating with us, and the data generated by your use of the platform:

  • Account and purchase data: name, email and phone.
  • Payment data: handled directly by the payment gateway (ePayco/Wompi); we do not store card numbers.
  • Classroom access IP addresses: the IPs used to open each course, for access control.
  • Messaging data: contacts and conversations when you write to us via WhatsApp, the website chat, email or phone.
  • Usage data: aggregate browsing and course-progress metrics.

IP logging and access control

Each purchase grants an individual classroom access. For the legitimate purpose of preventing fraud and unauthorized resale of the courses, we log the IP addresses used to open each classroom and limit the number of distinct networks or devices per access.

When that limit is exceeded, we temporarily block access and may contact you to validate it. This log is retained for a per-course time window and then stops counting toward the limit.

This processing is essential to protect the educational content; by purchasing a course you accept this access control.

Purposes of processing

We use your personal data to:

  • Process your purchase and grant you access to the course.
  • Email you the access link to the classroom and to your course library.
  • Prevent fraud and resale through IP-based access control.
  • Handle your requests, complaints and suggestions (PQRS) via WhatsApp, email or phone.
  • With your consent (opt-in), send you commercial information about our courses.
  • Improve the platform with aggregate analytics, without unnecessarily identifying individuals.

Messaging and WhatsApp

If you write to us or agree to receive messages, we process your contacts and conversations through messaging providers (WhatsApp/Meta) for support and, with your consent, for marketing.

You can opt out at any time by replying with your request on the same channel; we will stop sending you marketing communications.

Processors and third parties

To operate, we rely on technology providers acting as data processors: the payment gateway (ePayco/Wompi), messaging services (such as WhatsApp), email, platform hosting and analytics. These providers only access the data needed to deliver their service.

We do not sell your personal data. We only share it with third parties when necessary to provide the service or when required by a competent authority.

Rights of the data subject

As the owner of your personal data, you have the right to:

  • Know, update and rectify your data.
  • Request proof of the authorization granted for its processing.
  • Be informed about how it has been used.
  • Revoke your authorization and/or request the deletion of your data, when no legal or contractual duty requires us to keep it.
  • File complaints with the Superintendence of Industry and Commerce (SIC) for breaches of the data protection regime.

Channels and procedure

You may exercise your rights by writing to us on WhatsApp at +57 321 3281693 or through the site’s other contact channels, stating your name, your request and a contact method.

Inquiries are answered within a maximum of ten (10) business days, claims within a maximum of fifteen (15) business days, and data update, correction or deletion requests within a maximum of eight (8) business days, as set out in Law 1581 of 2012 and Decree 1377 of 2013.

Information security

We apply reasonable technical, administrative and organizational measures to protect your data against loss, unauthorized access or misuse, and we require equivalent confidentiality and protection commitments from our providers.

Validity and changes

This policy is effective from its publication on this website. We keep personal data for as long as the purpose of its processing remains or a legal or contractual obligation requires us to keep it.

We may update this policy; any substantial change will be published on this same page.