Privacy Policy

Last updated: October 26, 2026

Who we are

This website, strategyandstack.com, belongs to Eddie Bello (NIT 80875889), Diagonal 75C # 2A - 46, Medellín, Colombia, who offers his services under the name Strategy & Stack. He is the data controller for the personal data described here; "we" in this policy means him. For anything about your data, write to [email protected].

What we collect, and when

• When you book a call through our scheduling tool (Cal.com): your name, email, the answers you choose to give, your time zone, and the page or campaign that brought you to us (UTM tags), so we know which of our content is useful.
• When you write to us by email or with the contact form: your name, email, your message and, if you tell us, how you found us.
• Visit measurement without cookies, before and without your consent: Google Analytics (loaded through Google Tag Manager, in consent mode) receives a signal for each page view and click without setting cookies or any ID that links your visits. Microsoft Clarity runs in its no-cookie mode, with a new ID on every page view, and masks the text on our pages and anything you type, so it shows clicks and scrolling but not what you write.
• Analytics cookies, only if you accept: Google Analytics sets its cookies so it can link your visits and record the pages you view, your device and browser, your approximate location and how you reached the site.
• Session recordings, only if you accept: Microsoft Clarity sets its cookies so it can follow your visit across pages and replay it, with the same text masking, plus heatmaps of where people click and how far they read. Microsoft handles this data under the Microsoft Privacy Statement.
• Without cookies, for everyone: Cloudflare Web Analytics counts visits, pages, referring sites and countries. It does not use cookies. Cloudflare also processes IP addresses to deliver the site and protect it from attacks.

We do not sell personal data. This site does not currently use advertising cookies; if that changes, this policy and the cookie choice will say so first.

Why we use it

• To run the calls you book and answer your messages (your request, and steps before a possible contract).
• To understand which pages help visitors: without cookies by default (our legitimate interest in running a useful site), and with cookies only with your consent.
• To keep the site secure and working (our legitimate interest in protecting it).

Under Colombian law (Ley 1581 de 2012 and Decreto 1377 de 2013) we process your data with your prior authorization, which you give when you book, write to us or accept cookies. Visitors from the European Union have the rights the GDPR grants them.

Who helps us process it

• Cloudflare: hosting, security and cookieless statistics.
• Google: Tag Manager and Analytics, without cookies unless you accept.
• Microsoft: Clarity heatmaps and session recordings, without cookies unless you accept.
• Cal.com: scheduling.
• Cloudflare Email Routing and Google Gmail: email and contact-form messages we receive are delivered through Cloudflare and stored in Gmail.

Some of these providers store data outside Colombia, mainly in the United States and the European Union, under their own security and privacy commitments.

Cookies and your choice

One small record of your cookie choice is kept in your browser so we don't ask again. Analytics cookies (Google's _ga) and session-recording cookies (Clarity's _clck and _clsk) are set only if you accept; "Only necessary" keeps measurement cookie-free. If you withdraw consent, we delete those cookies. You can change your choice at any time with Cookie settings, also in the footer of every page.

How long we keep it

• Messages and inquiries: up to 3 years after your last contact.
• Bookings: if you become a client, while we work together plus 10 years; otherwise up to 3 years after your last contact.
• Contracts, invoices, accounting and tax records: 10 years from the last related document (Ley 962 de 2005, art. 28).
• Proof of your consent: while we use your data, plus 10 years (Ley 1581 de 2012, art. 17).
• Google Analytics: up to 14 months.
• Microsoft Clarity: session recordings 30 days; heatmaps 13 months.
• Cookies: expire within 13 months.
• Marketing emails: until you unsubscribe; we then keep only your address on a do-not-contact list so we never email you again.

We delete any of it sooner if you ask, unless the law requires us to keep it.

Your rights

You can ask to know, update, correct or delete your data, ask what we used it for, and withdraw your authorization. Write to [email protected]. We answer within the time Colombian law sets: currently 10 business days for questions and 15 business days for requests to correct or delete. If you are not satisfied, you can complain to Colombia's Superintendencia de Industria y Comercio or to your local data protection authority.

Children

This site is for businesses and is not directed at anyone under 18.

Changes

If we change this policy, we update the date at the top. If we add new kinds of cookies, the banner will ask for your choice again.