Privacy Policy & Data Protection

Last updated: July 31, 2026 | Effective: Immediately

Marcas BPO ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website marcasbpo.com. We comply with the GDPR (EU), CCPA/CPRA (California, USA), LGPD (Brazil), and Ley 1581 de 2012 (Colombia).

1. Information We Collect

1.1 Information You Provide

When you fill out forms on our Site (contact forms, Build Your Team configurator, newsletter subscription), we collect: name, email address, company name, phone number, and any additional information you voluntarily provide.

1.2 Automatically Collected Information

When you access the Site and accept cookies, we automatically collect:

• Device Information: device type (desktop, tablet, mobile), operating system, browser type and version, screen resolution.
• Location Data: country, city, and region derived from your IP address (anonymized via SHA-256 hashing).
• Usage Data: pages visited, time spent on each page, referrer URL, click interactions, language preference.
• Session Data: session duration, entry and exit pages, visit timestamp.

We DO NOT collect: your precise GPS location, your name from automated tracking, your gender or age, your personal identity documents, or any sensitive personal data under GDPR Article 9.

2. How We Use Your Information

All collected data is used exclusively to:

• Improve website performance and user experience.
• Analyze traffic patterns and content engagement.
• Personalize content recommendations.
• Respond to your inquiries and provide BPO service quotes.
• Send occasional relevant content (only if you subscribe).
• Comply with legal obligations.

We NEVER: sell your data to third parties, use your data for automated decision-making with legal effects, or share your data with advertisers.

3. Cookies Policy

We use only first-party cookies (set by marcasbpo.com, not third parties). These are:

• Essential: Session cookie (PHPSESSID) — required for site functionality. Expires when you close your browser.
• Preferences: cookie_consent — remembers your cookie preferences. Expires after 1 year.
• Analytics: mbpo_visit, mbpo_source, mbpo_sid — anonymous session tracking for site improvement. Expires after 30 days.

No cookies are set until you click "Accept & Personalize" on the cookie banner. You can delete cookies at any time through your browser settings.

4. Legal Basis (GDPR Article 6)

We process your data under the following legal bases:

• Consent (Art. 6.1.a): You explicitly accept cookies via the cookie banner.
• Legitimate Interest (Art. 6.1.f): Anonymous analytics to improve our services.
• Contractual Necessity (Art. 6.1.b): Processing your contact form submissions to respond to you.

5. Data Retention

• Analytics data: 90 days (automatically purged).
• Contact form submissions: 2 years (for business continuity).
• Cookie consent: 1 year.

6. Your Rights

Depending on your jurisdiction, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Limit how we process your data.
• Portability: Receive your data in a structured format.
• Objection: Object to processing based on legitimate interest.
• CCPA: California residents have the right to know what personal information is collected and to opt out of its sale (we don't sell data).
• LGPD: Brazilian residents may contact our DPO for data requests.
• Colombia: Under Ley 1581 de 2012, you may consult, update, or request deletion of your data.

To exercise any of these rights, contact us at privacy@marcasbpo.com. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organizational measures including: SSL/TLS encryption, database encryption for sensitive fields, access controls, and regular security audits.

8. International Data Transfers

Your data is stored on servers located in the United States and Colombia. For EU residents, we ensure adequate safeguards through Standard Contractual Clauses (SCCs).

9. Children's Privacy

Our Site is not intended for individuals under 16. We do not knowingly collect data from children.

10. Contact

Data Protection Officer: privacy@marcasbpo.com
USA: Intsolcom LLC, Delaware, USA
Colombia: Intsolcom SAS, Colombia
Phone: +1 (786) 386-1515