Privacy Policy and Personal Data Treatment

Learn how SEPPSA S.A.S. collects, uses, stores and protects the personal data of its customers and business contacts, in compliance with Colombian Law 1581 of 2012 (Habeas Data) and Decree 1377 of 2013.

Last updated: May 20, 2026

1. Introduction

SEPPSA S.A.S. (hereinafter, "SEPPSA", "we" or "the company"), commercially known as Seppsa Fumispecial, is a Colombian company dedicated to integrated pest management, industrial hygiene and environmental protection services. In the course of its commercial activity, SEPPSA collects and processes personal data from customers, prospects and business contacts.

This Privacy Policy describes the personal data we collect through our service channels —WhatsApp, web chat and contact forms—, the purposes for which it is used, the retention period, the security measures applied and the rights granted to data subjects under Law 1581 of 2012, Decree 1377 of 2013 and other related regulations in force in Colombia.

By communicating with SEPPSA through any of these channels and providing personal information, the data subject expressly accepts the terms described in this policy.

2. Data Controller

For the purposes of this policy, the party responsible for the treatment of personal data is:

Legal name: SEPPSA S.A.S.
Commercial name: Seppsa Fumispecial
Tax ID (NIT): 802.014.694
Address: Calle 69 # 46-39, Barranquilla, Colombia
Email: info@seppsa.com
Phones: +57 317 368 7483 · +57 310 340 2361 · +57 310 236 3884
Website: www.seppsa.com

3. Data we collect

SEPPSA only collects personal data that the data subject voluntarily provides when interacting with our service channels. We do not collect sensitive information without prior and express consent. The data may include:

WhatsApp (WhatsApp Business API)

When a customer contacts us through WhatsApp, either in writing or via multimedia messages, SEPPSA may store the following information:

First and last name of the data subject.
Mobile phone number used for the communication.
Content of the exchanged messages (text, images, audio, documents and locations when shared).
Dates and times of messages and of the services provided.
Address or location where the service is required, when shared by the customer.
Information about the establishment or company for which the service is requested.

Website chat

When a visitor starts a conversation through the chat available at seppsa.com, we may collect:

Name provided when starting the conversation.
Email address or phone number, if provided.
Content of the messages and inquiries.
Date and time of the interaction.

Contact and scheduling forms

When a customer fills out forms available on the website or in digital quotes, we collect:

First and last name.
Email address.
Phone number.
Company or establishment name, when applicable.
City and service address.
Description of the requested service or inquiry.

4. Purpose of the treatment

The personal data collected is used by SEPPSA exclusively for commercial and/or operational purposes related to the provision of our services. In particular, data may be processed to:

Respond to quote requests, advisory and scheduling of technical visits.
Manage, execute and follow up on pest management, industrial hygiene, environmental protection and other contracted services.
Send reminders for scheduled visits, technical reports, certificates and operational communications associated with the services.
Provide support, customer service and management of complaints, claims or requests.
Carry out invoicing, collection and compliance with contractual and legal obligations.
Inform the data subject about news, promotions, new services or content related to SEPPSA's activity, provided the data subject has not opted out.
Comply with legal and regulatory obligations and requirements from competent authorities.

5. Exclusive use of the information

Personal data collected through WhatsApp, web chat and forms is for the exclusive use of SEPPSA S.A.S. and is used only for commercial and/or operational purposes of the company.

SEPPSA does not sell, rent, transfer or share its customers' personal data with third parties for commercial purposes unrelated to its activity. Information may only be shared with technology providers acting as data processors (for example, messaging platforms, cloud services and business management tools), under confidentiality agreements and solely to support the provision of SEPPSA's services.

Data may also be disclosed to competent authorities when there is a formal request based on the law.

6. Use of the WhatsApp Business API

SEPPSA uses the official WhatsApp Business API (WhatsApp Business Platform), provided by Meta Platforms, Inc., as the main channel for customer service, scheduling and operational notifications.

The use of this channel implies that the content of the messages, the associated metadata (date, time, source number) and the shared files are processed through the infrastructure of WhatsApp / Meta, under its own privacy policies and terms of service, which can be reviewed at whatsapp.com and meta.com.

SEPPSA uses this channel exclusively for operation-related communications: service requests, visit confirmations, report delivery, support and commercial notifications. The customer may at any time request to be excluded from commercial communications by writing to info@seppsa.com or by replying directly in the chat.

7. Data retention period

SEPPSA retains personal data only for the time necessary to fulfill the purposes described in this policy and the applicable legal obligations.

As a general reference, data of active customers is kept for the entire duration of the commercial relationship and, once it ends, for an additional period of up to ten (10) years, in accordance with the prescription, accounting, tax and commercial archiving terms established by Colombian law.

Data of prospects or contacts that do not become customers may be kept for a maximum of five (5) years from the last contact, unless the data subject requests its deletion before that term.

Once the legal and commercial periods have expired, the data will be securely deleted from our systems.

8. Rights of the data subject (Law 1581 of 2012)

Pursuant to Law 1581 of 2012 and Decree 1377 of 2013 of the Republic of Colombia, every personal data subject has the right to:

Know, update and rectify their personal data held by SEPPSA.
Request proof of the authorization granted for the treatment of their data.
Be informed, upon request, about the use given to their personal data.
Submit complaints to the Superintendence of Industry and Commerce (SIC) for violations of current regulations.
Revoke the authorization and/or request the deletion (erasure) of their data when the treatment does not respect the principles, rights and legal guarantees.
Freely access their personal data that has been subject to treatment.

To exercise any of these rights —including data deletion requests—, the data subject may send a communication to info@seppsa.com indicating their full name, identification number, a clear description of the request and contact details. SEPPSA will address the request within the terms established by law.

9. Information security

SEPPSA adopts reasonable technical, human and administrative measures to protect personal data against unauthorized access, loss, alteration or misuse.

Access to the data is restricted to authorized personnel who require it to perform their duties, and is carried out under confidentiality obligations.

10. Contact and exercise of rights

For inquiries, claims or exercise of the rights described, the data subject may contact the SEPPSA personal data treatment area through the following channels:

Controller: SEPPSA S.A.S. — Seppsa Fumispecial
Email: info@seppsa.com
Address: Calle 69 # 46-39, Barranquilla, Colombia
Phones: +57 317 368 7483 · +57 310 340 2361 · +57 310 236 3884

11. Changes to this policy

SEPPSA may update this Privacy Policy to reflect changes in its operations, services or applicable legislation. The current version will be published on this same page, indicating the date of the last update.

We recommend that the data subject periodically review this policy. Continued use of our channels after an update implies acceptance of the changes made.