Privacy Policy

This Privacy Policy describes how Ellis Velandia ("I", "me", "my") collects, uses, and protects information when you visit ellisvelandia.com (the "Site"). It applies to all visitors, regardless of country of residence, and is written in plain language so you can understand exactly what happens with your data.

Who is responsible for your data

The Site is owned and operated by Ellis Velandia Caicedo, an independent Full Stack Developer based in Bogotá, Colombia. I am the sole data controller for any personal information collected through the Site. You can reach me directly at eyis619@gmail.com.

What information I collect

1. Information you provide voluntarily

When you fill out the contact form, schedule a call, or send an email, you choose to share information such as your name, email address, the company you work for, and the details of your project. I only ask for what is strictly necessary to reply usefully. I do not run a comment section, a newsletter signup with sponsorships, or any account system, so there is no other place on the Site where you would intentionally provide personal data.

2. Information collected automatically

Like most websites, the Site logs basic technical information about each visit: IP address (truncated where possible), user-agent string, the page you visited, the referring page, and timestamps. This is used to detect abuse, fix bugs, and understand what content people actually find useful. None of this is sold or shared with third parties for marketing.

3. Cookies and similar technologies

The Site sets a small number of cookies, all of which are first-party and serve a specific purpose:

• NEXT_LOCALE — remembers whether you prefer the English or Spanish version of the Site. No tracking, no advertising use.
• theme — remembers your light/dark mode preference so the Site does not flash the wrong theme on reload.
• Analytics cookies (PostHog) — used to count unique visits and understand which sections of the Site are working. IP addresses are anonymised before storage and no profile is built across third-party sites.

You can clear these at any time from your browser settings. The Site continues to work without any of them; only your preferences for language and theme will reset.

How I use information

The information described above is used for exactly four things:

1. To reply to the messages and project enquiries you send me.
2. To keep the Site working — detecting bugs, slowing down abuse, and optimising pages that people actually read.
3. To improve content. If a particular article or project page consistently underperforms, I revise or remove it. This is a quality decision, not a tracking decision.
4. To honour my legal obligations, such as keeping invoices and tax records when a project leads to a paid engagement.

I do not use your information for automated decision-making, for profiling, or for advertising. I do not sell, rent, or trade any information collected through this Site.

Third-party services

A small set of trusted vendors helps run the Site. Each one only receives the data it needs:

• Cloudflare — hosting, CDN, and DDoS protection. Cloudflare may process truncated IP addresses on my behalf.
• Supabase — stores blog posts, project metadata, and any contact form submissions until I have replied.
• Resend — delivers transactional emails from the contact form to my inbox.
• PostHog — privacy-respecting product analytics, configured with IP anonymisation and no cross-site profiling.
• Cal.com — schedules calls when you book a meeting through the "Schedule a call" link.

Each vendor is bound by its own GDPR-compliant data processing agreement and international data transfer mechanisms (Standard Contractual Clauses). I review this list periodically and will update this Policy whenever a new processor is added.

How long I keep your data

Contact form messages are kept for as long as it takes to finish the conversation and then for up to 24 months in case you reach out again about the same project. Anonymous analytics events are retained for 12 months. Tax-relevant records (invoices, contracts) are retained for the period required by Colombian and applicable international tax law, after which they are deleted.

Your rights

Regardless of where you live, you can ask me to:

• Confirm whether I hold any data about you.
• Receive a copy of that data in a portable format.
• Correct anything that is wrong.
• Delete your data, unless I am legally required to keep it.
• Opt out of analytics. The Site continues to function without analytics; you can block PostHog by enabling the "Do Not Track" setting in your browser, which the Site honours.

To exercise any of these rights, email eyis619@gmail.com with the subject line "Privacy request". I respond within 14 days.

Children

The Site is not directed at children under 13. I do not knowingly collect personal information from minors. If you believe a minor has provided information, contact me and I will delete it immediately.

International data transfers

Because my vendors are based in the United States and Europe, some processing happens outside Colombia. Where this applies, transfers are protected by Standard Contractual Clauses or equivalent safeguards approved by the European Commission.

Changes to this Policy

When this Policy changes in a way that materially affects your rights, I update the "Last updated" date at the top and add a brief summary of the change here. The latest version is always available at ellisvelandia.com/privacy.

Contact

Privacy is not a checklist for me — it is the baseline I expect from the sites I build for clients and from the Site you are reading. If anything here is unclear or you think something could be done better, please email eyis619@gmail.com.