Privacy Policy

1. Data controller

The controller of personal data is VARDER, domiciled in Colombia. For privacy enquiries: contacto@varder.co.

2. Data we collect

We collect the following types of data:

Data you provide directly

• Full name and email address.
• Phone number (for appointment reminders).
• Business information: name, address, city, tax ID.
• Profile photo or business logo.

Data generated through use

• Booking and appointment history.
• Reviews and ratings.
• Platform usage data (pages visited, actions taken).
• IP address and device data.
• Business signup intent and signup method; with consent, source categories and entry pages, without form contents.

Payment data

Billing and payment method details are collected directly by Lemon Squeezy in its own checkout. VARDER never receives or stores your card number. From your subscription we only keep identifiers and metadata: your Lemon Squeezy customer and subscription IDs, the plan you contracted, its status, the period dates and the link to the invoice they issue.

3. Purposes of processing

We use your data to:

• Provide the appointment and booking management service.
• Send appointment reminders and confirmations.
• Manage your account and profile on the platform.
• Improve the user experience and the service's features.
• Manage your subscription, charges and billing.
• Comply with legal and tax obligations.
• Send you marketing communications (only with your express consent).

4. Legal basis for processing

Processing of your data is based on: (a) performance of the service contract, (b) compliance with legal obligations, and (c) the express consent you give when registering and accepting this policy.

5. Data sharing

We do not sell or rent your personal data. We may share it with:

• Registered businesses: to manage the bookings you make.
• Service providers: infrastructure platforms (hosting, database) and communications (email, WhatsApp) under confidentiality agreements.
• Payment processing (Lemon Squeezy): to manage your subscription. Lemon Squeezy acts as Merchant of Record, which means it is the seller of your subscription and a controller of the transaction data in its own right — not merely a processor handling data on VARDER's behalf. Its own privacy policy governs that processing.
• Competent authorities: when required by Colombian law.
• Optional analytics: Google Analytics and Vercel Analytics/Speed Insights, only when you accept measurement. You can revoke your choice in Privacy preferences.

6. International data transfers

Some of our providers are domiciled outside Colombia, mainly in the United States and the European Union. This means your data may be transferred to and stored outside the country. Under article 26 of Law 1581 of 2012, these transfers are carried out with your express consent and under contractual confidentiality and security obligations with each provider. In the case of Lemon Squeezy (United States), the transfer is necessary to carry out the purchase of your subscription, for which they are the seller of record.

7. Your rights (Habeas Data)

Under Law 1581 of 2012 you have the right to:

• Access the data we hold about you.
• Update your data if it is inaccurate or incomplete.
• Rectify incorrect data.
• Delete your data when it is no longer needed.
• Withdraw the consent you have given.
• File complaints with the Superintendency of Industry and Commerce (SIC).

To exercise these rights, write to us at contacto@varder.co. We will respond within a maximum of 15 business days.

8. Data security

We implement technical and organizational measures to protect your data: encryption in transit (HTTPS/TLS), secure storage on servers with restricted access, hashed passwords and two-factor authentication available for administration accounts.

9. Data retention

We keep your data while your account is active or as long as it is needed to provide the service. After your account is deleted, data is retained for 2 years to comply with legal obligations, after which it is securely deleted.

10. Changes to this policy

We may update this policy from time to time. We will notify you by email of material changes. The version in force will always be available on this page.