Loading...
Loading…Your applicable legislation: Colombia
Colombian consumer law (Ley 1480 de 2011, Estatuto del Consumidor) and data protection law (Ley 1581 de 2012). Data protection authority: SIC — www.sic.gov.co.
Right to Know
Know what data we hold and how it is used
Right to Update & Rectify
Correct inaccurate or outdated information
Right to Delete
Request removal of your data (supresión)
Right to Revoke
Revoke authorization for data processing
1.1. Purpose. This Privacy Policy explains how Zaryx Studios ("we", "us", "our") collects, uses, discloses, and protects personal data when you interact with our website and services.
1.2. Controller. Zaryx Studios is a company based in the Republic of Colombia and is the data controller for the processing described in this Policy. We apply Colombian data protection law — primarily Law 1581 of 2012 (Protección de Datos Personales) — as our baseline, and we respect the data protection legislation of your country of residence whenever it grants you more protections.
1.3. Definitions:
Personal Data — any information relating to an identified or identifiable natural person.
Processing — any operation performed on Personal Data, including collection, storage, use, and deletion.
Data Subject — you, the person whose Personal Data is processed.
Service Providers — third parties that process Personal Data on our behalf (e.g., payment processors and hosting providers).
1.4. By using our services, you consent to the collection, use, and storage of your Personal Data as described in this Policy, and you acknowledge the legal bases set out in section 2.
2.1. Account data. When you use third-party login services or create an account on our website, we collect:
• Account ID (from third-party login services such as Discord, GitHub, Google, etc.)
• Email address
• User profile information (such as profile picture/avatar, guilds, etc.)
• Internet Protocol (IP) address
• Country of residence (selected at registration) — used to apply the consumer legislation most favorable to you
• Payment data (processed by our payment processor Paddle; we do not store full payment card numbers or sensitive financial data on our servers)
2.2. Technical data. We may also collect automatically when you visit our website:
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent
• Device type and screen resolution
2.3. Authorization. In accordance with Law 1581 of 2012, Personal Data is collected with your prior, express, and informed authorization (autorización previa, expresa e informada), which you grant by accepting this Privacy Policy when creating an account or using our services.
2.4. Login services. We use login services through platforms such as Discord, GitHub, Google, and Twitter. These platforms provide basic information via their respective APIs. Please refer to their privacy policies for further details on how they handle your data.
3.1. Legal basis (Colombia). Under Law 1581 of 2012, the processing of Personal Data requires your prior, express, and informed authorization, which we obtain when you create an account, log in, or make a purchase. The purposes of the processing are always informed to you before or at the time the data is collected.
3.2. When you log in and create an account, your Personal Data is securely collected and stored in our database.
3.3. Payment data is only collected when a purchase is made on our website. All payments are processed by our payment processor Paddle; we do not store full payment card numbers or sensitive financial data on our servers.
3.4. We use secure HTTPS connections for all data transmission to protect your information during transit.
3.5. International users. Where the data protection law of your country of residence requires a different legal basis (for example, legitimate interest, contractual necessity, or legal obligation), we rely on that basis to the extent applicable.
4.1. We use the information we collect for the following purposes:
• Managing your account and providing related services
• Processing your purchases and delivering digital products
• Maintaining administrative records, including payment history and receipts
• Communicating with you about your account, orders, and support requests
• Sending important service updates, security notices, and policy changes
• Collecting aggregated, non-identifying data for advertising and performance analysis
• Detecting and preventing fraudulent or unauthorized activity
• Applying the consumer legislation most favorable to you based on your country of residence
• Complying with legal obligations and enforcing our Terms of Service
4.2. We do not use your Personal Data for purposes incompatible with those listed above without informing you and, where required, obtaining a new authorization or consent.
6.1. We implement appropriate technical, human, and administrative measures, in accordance with Article 12 of Law 1581 of 2012, including:
• Industry-standard encryption (SSL/TLS) for data transmission
• Secure session management
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements for personnel
• Secure data storage with encryption of sensitive information
6.2. Your password is hashed and never stored in plain text. We follow industry best practices for password storage and authentication.
6.3. While we strive to protect your Personal Data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we will notify you and the competent authorities of any data breach as required by applicable law.
7.1. We retain your Personal Data for as long as necessary to fulfill the purposes outlined in this Policy, or as required or permitted by law.
7.2. Account data is retained for the duration of your account activity plus a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements.
7.3. Payment records are retained for the period required by tax and financial regulations; commercial records related to electronic transactions are kept for the term required by Decree 1074 of 2015.
7.4. When data is no longer needed, we securely delete or anonymize it.
9.1. Our website may contain links to third-party websites or services, including Discord, GitHub, payment processors, and other platforms.
9.2. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit.
9.3. Any information you provide to third parties is subject to their respective privacy policies and practices.
10.1. Under Law 1581 of 2012, as a data subject located in Colombia you have the following rights (habeas data):
10.2. To exercise any of these rights, contact us at support@zaryxstudios.org. We respond within fifteen (15) business days, extendable in accordance with Law 1581 of 2012, and may ask you to verify your identity first.
10.3. You may also manage certain information directly through your account settings on our website.
10.4. If we do not respond within the legal term, or if the response is not satisfactory, you may file a complaint with the SIC:
11.1. Our website is available worldwide. For users located outside Colombia, this Policy applies together with the data protection law of their country of residence.
11.2. Where the law of your country grants you additional rights (for example, under the GDPR: data portability, objection, restriction of processing, and automated decision-making protections; or under the CCPA/CPRA: the right to opt out of sale or sharing), we will honor those rights to the extent applicable.
11.3. We do not sell Personal Data and do not use it for cross-context behavioral advertising without your consent.
11.4. If you believe your data protection rights have been violated, you may contact us first, and you may also complain to the supervisory authority of your country of residence.
12.1. We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations.
12.2. Significant changes will be communicated by posting a prominent notice on our website, via email, or through other appropriate communication methods; where the applicable law requires a new authorization or consent, we will obtain it.
12.3. We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your information.
12.4. Continued use of our services after changes to this Policy constitutes acceptance of the updated terms, except where the applicable law requires an express consent.
12.5. Contact. For any question, request, or complaint about your Personal Data, write to support@zaryxstudios.org or use our support system. We respond within two (2) business days.
Questions About Your Privacy?
If you have any questions or concerns regarding your personal information or this Privacy Policy, please contact us at support@zaryxstudios.org or join our Discord server for assistance. Colombian users may also contact the Superintendencia de Industria y Comercio at 01 8000 910165 or www.sic.gov.co.