Data Processing Policy / Política de Tratamiento de Datos Personales
Muto Studio — Puerto Rico
Last updated / Última actualización: May 15, 2026
This Data Processing Policy describes how Muto Studio Digital SAS BIC collects, stores, uses, and protects personal data of clients and users in Puerto Rico. It complies with U.S. federal law — including the Federal Trade Commission Act, COPPA, and CAN-SPAM Act — as well as Colombian Law 1581 of 2012 (Habeas Data) and Decree 1377 of 2013, given our dual operational presence.
Esta Política de Tratamiento de Datos describe cómo Muto Studio Digital SAS BIC recopila, almacena, usa y protege los datos personales de clientes y usuarios en Puerto Rico, cumpliendo con la ley federal de EE.UU. y la Ley 1581 de 2012 de Colombia.
1. Data Controller / Responsable del Tratamiento
Company / Empresa:
Muto Studio Digital SAS BIC
NIT (Colombia):
901.628.011-6
Address / Dirección:
Carrera 24B #72-65, Barranquilla, Colombia
Email:
Phone / Teléfono:
+57 302 347 38 38
2. Personal Data Collected / Datos Personales Recopilados
We collect the following categories of personal data:
Identification data:
- Full name, email address, phone number, mailing address
- Company name, job title, business website
Financial data:
- Billing information (processed by PCI-DSS compliant third parties)
- Invoice and payment history
Digital data:
- IP address, browser type, device information
- Website usage data via cookies and Google Analytics
- Social media interactions with our profiles
- Email open rates and click behavior (marketing emails only)
3. Purpose of Data Processing / Finalidad del Tratamiento
Personal data is processed for the following specific purposes:
- Service delivery: Managing client projects, communications, and deliverables
- Billing and payments: Processing invoices and financial transactions in USD
- Legal compliance: Meeting obligations under U.S. federal law and Colombian Law 1581/2012
- Marketing communications: Sending service updates and promotions (with explicit consent, CAN-SPAM compliant)
- Website analytics: Understanding user behavior to improve our digital platforms
- Security: Preventing fraud, unauthorized access, and data breaches
4. Legal Basis for Processing / Base Legal del Tratamiento
We process personal data based on the following legal grounds:
- Contractual necessity — to deliver services you have engaged us for
- Legal obligation — to comply with U.S. federal law and Colombian regulations
- Legitimate interest — to improve our services and prevent fraud
- Consent — for marketing communications and non-essential cookies (freely given, specific, informed, and revocable at any time)
5. Data Transfers / Transferencia de Datos
Given our operations in both Colombia and the United States, personal data may be transferred between these jurisdictions. We ensure adequate protection through:
- Contractual safeguards with all third-party processors
- Use of U.S.-based cloud providers compliant with federal standards
- Data minimization — only necessary data is transferred
- Encryption of data in transit and at rest
Third-party service providers we use include: Google (Analytics, Ads), Meta (Facebook, Instagram), HubSpot (CRM), Stripe/PayPal (payments), and hosting providers. Each is bound by their own privacy and data processing agreements compliant with applicable law.
6. Data Retention / Retención de Datos
We retain personal data for the following periods:
- Client project data: 5 years after project completion (for legal and tax purposes)
- Financial records: 7 years (U.S. federal IRS requirements)
- Marketing data: until you unsubscribe or request deletion
- Website analytics: 26 months (Google Analytics default)
- Communication records: 3 years after last interaction
7. Your Rights / Sus Derechos (Habeas Data + U.S. Federal Rights)
Under Colombian Law 1581/2012 and applicable U.S. federal law, you have the following rights:
- Access (Acceso): Request a copy of all personal data we hold about you
- Correction (Rectificación): Request correction of inaccurate or incomplete data
- Deletion (Supresión): Request deletion of your data, subject to legal retention obligations
- Objection (Oposición): Object to processing of your data for marketing purposes
- Portability: Receive your data in a structured, machine-readable format
- Revoke consent: Withdraw consent for marketing at any time without penalty
- Complaint: File a complaint with Colombia’s SIC (Superintendencia de Industria y Comercio) or the U.S. FTC at ftc.gov/complaint
To exercise any of these rights, contact us at [email protected]. We will respond within 10 business days for U.S. requests and 15 business days for Colombian Habeas Data requests.
8. Security Measures / Medidas de Seguridad
We implement the following security measures to protect your personal data:
- SSL/TLS encryption for all data transmitted through our website
- Access controls — data is accessible only to authorized personnel on a need-to-know basis
- Regular security audits and vulnerability assessments
- PCI-DSS compliant payment processing — we never store credit card data directly
- Two-factor authentication on all internal systems
- Employee training on data privacy and security best practices
- Incident response plan — in case of a data breach, affected users will be notified within 72 hours
9. Children’s Data / Datos de Menores (COPPA)
In full compliance with the Children’s Online Privacy Protection Act (COPPA), our services are not directed to children under 13 years of age. We do not knowingly collect, use, or share personal information from children under 13. If we discover we have inadvertently collected such data, we will delete it immediately. Parents or guardians may contact us at [email protected] to request review or deletion of any data related to a minor.
10. Policy Updates / Actualizaciones de la Política
This Data Processing Policy may be updated to reflect changes in our practices or applicable law. We will notify clients of material changes via email at least 15 days before they take effect. The current version is always available at mutoestudio.com/pr and mutoestudio.com/politicas-de-cumplimiento/
11. Contact for Data Requests / Contacto para Solicitudes de Datos
To exercise your rights or for any data-related inquiry:
Muto Studio Digital SAS BIC
Data Privacy Contact: [email protected]
Phone: +1 (857) 367-3755
Colombia: Carrera 24B #72-65, Barranquilla, Colombia
Web: mutoestudio.com/pr
SIC Colombia: sic.gov.co
FTC United States: ftc.gov/complaint
This policy is effective as of May 15, 2026 and supersedes all previous versions.