This Privacy and Personal Data Processing Policy explains how Earth and Food S.A.S. handles personal information received through earthandfoodmeals.com, our contact form and business correspondence.

Controller and contact

Earth and Food S.A.S. (NIT 901.246.391-1) is the controller of the personal data described here. Our address is Cra 68 B # 10 A 18, Bogotá D.C., Colombia. For privacy questions or to exercise your rights, email partnerships@earthandfoodmeals.com. The person responsible for handling privacy requests is our team at this address.

Data we collect

Business enquiries

Our contact form asks for your full name, company or organisation, email address, country, project type and product line. A phone number is optional. If you contact us by email, we also process the information you include in your message and subsequent correspondence. We do not currently offer customer accounts, online purchases or a newsletter through this website.

Website use

Our hosting and security tools may process technical information such as IP address, browser and device information, requested pages, dates and times. With your consent, Google Analytics measures site visits and interactions. Our contact form uses Google reCAPTCHA v2 to reduce spam; using it may involve Google receiving technical and interaction data. The site requests typefaces from Google Fonts, which may disclose your IP address and browser information to Google. Our cookie preference tool records your choice so we can respect it.

Why we use your data

We use enquiry data to respond to your request, assess a potential supply or manufacturing project, prepare proposals, communicate about an ongoing business relationship and comply with applicable legal, accounting and export requirements. Technical data helps us operate and protect the website. We use consent-based analytics to understand and improve site use.

We do not sell personal data, use the contact form to sign you up to a newsletter, or use your enquiry for unrelated advertising. We do not make decisions about you solely through automated processing.

Legal grounds and authorisation

Under Colombia’s personal data rules, we request prior, informed authorisation for the purposes described in this policy when required. The contact form includes an unchecked authorisation box and a link to this policy. You may request evidence of the authorisation you gave, and may withdraw it where the law permits.

Where the EU GDPR or UK GDPR applies, we use your request to take steps before a potential contract or to communicate with your organisation, as applicable; legal obligations for required records; legitimate interests in operating and securing the website, subject to your rights; and consent for non-essential analytics and other technologies that require it. You can withdraw consent at any time without affecting earlier lawful processing.

Service providers and disclosures

Authorised staff and service providers may access data as needed to operate our business, including website hosting and WordPress services, the SureForms contact form, email delivery and support providers, Google reCAPTCHA and, if you consent, Google Analytics. We may also share relevant information with professional advisers, logistics or export partners when a project requires it, or with authorities when legally required. We select providers with appropriate privacy and security protections for the services they supply.

International processing

Because we work internationally and use technology providers, personal data may be processed outside Colombia and outside your country, including in the United States. Such processing is subject to applicable transfer rules and safeguards. You may ask us for more information about a particular transfer using the privacy contact above.

How long we keep data

We keep business enquiries while we assess and respond to them and, where a relationship develops, for its duration and any period required for legal, tax, accounting, export or dispute records. We review enquiries that do not progress and delete or anonymise them when they are no longer needed for these purposes. Consent records and technical security logs are retained only as needed to demonstrate choices, operate the service or meet legal obligations. You may ask about the period applicable to your data.

Cookies and your choices

Essential technologies support the website and remember your privacy choice. We request consent before using Google Analytics for statistics. Google reCAPTCHA protects the contact form and is loaded after you enable the Marketing category; without it, the form cannot be submitted. You can accept, reject non-essential technologies or change your choice using the site’s cookie preferences control. Our Cookie Policy provides more detail about the technologies used.

Your rights in Colombia

You may know, access, update and correct your personal data; request proof of authorisation; be informed about its use; complain to the Superintendencia de Industria y Comercio (SIC) after first submitting the applicable request to us; and request deletion or revocation of authorisation where legally available. Providing sensitive personal data is optional, and we do not ask for it through this site.

Send a request to partnerships@earthandfoodmeals.com with your name, contact details, a description of your request and information sufficient to identify the record. We may ask for proof of identity or authority to protect your data. We answer access consultations within ten business days of receipt; if an extension is needed, we will explain it before the deadline and respond within the following five business days. We answer correction, deletion and other claims within fifteen business days from the day after receipt; if an extension is needed, we will explain it and respond within the following eight business days. Incomplete claims may require additional information under the procedure in Law 1581 of 2012.

Additional rights where GDPR applies

Where applicable, you may request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent. You may also lodge a complaint with the data protection authority in your place of residence, work or the alleged infringement. Contact us first at the email above so we can address the issue.

Security and children

We use reasonable organisational and technical measures, including HTTPS and access controls, to protect personal data. No internet transmission is completely secure. This B2B website is not intended for children, and we do not knowingly seek their data.

Changes and effective date

This policy takes effect on 30 September 2026. We will update the date above when it changes and provide any additional notice required by law.