Privacy policy
What this site collects, what it is for, who else sees it and how to have it deleted. Written to be read, not to cover us.
Key takeaways
The only personal data that reaches Quarl is what you type: your email and whatever you describe when booking the call or writing to hello@quarl.co.
The site measures with Google Analytics 4 and Google Ads, with the IP address anonymized. That is the only third party: the typeface, the calendar and every other asset are served from Quarl domains.
You can ask to see, correct or delete your data by writing to hello@quarl.co. Colombian law gives 10 business days to answer a query and 15 for a formal complaint.
Quarl does not sell personal data, does not use it to train models and does no profiling beyond aggregate measurement of which pages get read.
Who handles the data
The data controller is Quarl, operating from Medellín, Antioquia, Colombia. The channel for anything related to personal data — access requests, complaints, corrections or deletion — is hello@quarl.co.
This policy is governed by Ley 1581 of 2012 and Decreto 1074 of 2015, Colombia’s personal data protection framework. The supervisory authority is the Superintendencia de Industria y Comercio.
In effect since 30 August 2026. If it changes, the date changes with it, and the previous version stops applying from the moment the new one is published.
What is collected, what for, and who else sees it
| Data | What for | Who else sees it |
|---|---|---|
| Pages viewed, language, traffic source and anonymized IP address | Knowing what gets read and what does not, so we write better, and measuring whether advertising brings anyone | Google (Analytics 4 and Ads) |
| Clicks on booking, on the email address, on FAQ entries, and reading depth | Understanding what objection someone has before hiring, and which page produces bookings | Google (Analytics 4 and Ads) |
| Name, email and whatever you write when booking the call | Scheduling the meeting and preparing for it | Nobody else. The calendar is self-hosted on a Quarl domain |
| Whatever you send to hello@quarl.co | Replying to you | The email provider, as with any email |
No sensitive data is collected — health, ethnicity, political opinion, biometrics — and this site has no reason to ask for any. If it appears in an email you send us, it is treated with the same discretion as everything else and used for nothing other than replying to you.
What you can demand, and how long it takes
All of it is exercised by writing to hello@quarl.co. There is no form and no procedure: an email is enough, and you do not have to justify the request.
- What data about you exists and where it came from. Response time: 10 business days, extendable by 5 more with notice.
- Correct anything wrong or incomplete. Response time: 15 business days, extendable by 8 more.
- Have it erased, except anything a live legal or contractual obligation requires keeping.
- At any time, with no explanation required.
- To the Superintendencia de Industria y Comercio, after trying to resolve it with us first.
What the browser stores
This site uses the Google Analytics 4 cookies and the Google Ads tag, and nothing else. They do two things: count visits without counting you twice, and tell whether an ad click ended in a booking. The IP address is sent anonymized.
The cookie notice at the bottom is informative, not a consent wall: measurement loads along with the page. We say so plainly because the alternative — a banner implying a choice that does not exist — is worse. When you dismiss the notice the browser stores a local flag (quarl.cookies) so it does not reappear; that flag lives on your device and is never sent anywhere.
If you would rather not be measured, any tracker blocker or your browser’s private mode disables Analytics without breaking anything here. Every part of the site still works: the typeface, the smooth scrolling and the gradient are all served from quarl.co, not from a third-party CDN.
Who else is in the chain
Google Ireland Limited / Google LLC processes the Analytics and Ads measurement data, on servers outside Colombia. Using the site accepts that international transfer, covered by Google’s standard contractual clauses. Their terms are at policies.google.com/privacy.
The booking calendar is self-hosted on a quarl.co subdomain. What you type when booking does not pass through a third-party platform: it reaches Quarl directly.
Once a project starts and your customers’ data comes into play, that is governed by the contract and the NDA signed beforehand, not by this policy. For diagnostics we work on anonymized samples wherever that is possible.
We do not sell or transfer personal data to anyone. We do not use it to train language models, ours or anyone else’s. We do no individual profiling: measurement is read in aggregate, and knowing that the rescue page outreads the chatbot page does not require knowing who read it.
This site is not directed at minors and does not knowingly collect data from them.
Frequently asked questions
What happens to what I write when booking the call?
It stays in the calendar, which is self-hosted on a quarl.co subdomain, and it is used to prepare the meeting. It is not shared with third parties and it is not added to any mailing list. If there is no project after the call, you can ask for it to be deleted by writing to hello@quarl.co and it gets deleted.
Will you send me marketing email?
No. Booking a call subscribes you to nothing, because there is no newsletter to subscribe to. The email address you leave is used for that conversation and for project follow-up if there is a project.
How do I ask you to delete my data?
An email to hello@quarl.co saying what you want deleted. No format and no justification needed. If a legal obligation or a live contract requires keeping something, you are told exactly what and why; everything else is erased.
Is this site GDPR compliant?
The policy is written against Colombian law, which is where Quarl operates and where the traffic comes from. GDPR requires prior consent before measurement cookies load, and this site does not implement that: the notice informs, it does not block. If European traffic ever becomes a regular part of the audience, this has to become prior consent, and that will happen before rather than after.
Do you use site data to train AI models?
No. It is a fair question for a company in this business, and the answer is no: measurement is used to decide what to write, and what arrives by email is used to reply. The public content of the site is open for models to read and cite — robots.txt says so explicitly — but that is text we published, not anybody’s data.
Where do I complain if you do not respond?
To the Superintendencia de Industria y Comercio, Colombia’s data protection authority. The law asks you to try the controller first, so step one is hello@quarl.co; if the deadlines above pass with no answer, the SIC is the route.
Book 15 minutes
Tell us what you are building, or what stopped working. You leave the call with a concrete answer: it can be fixed, it can be built, or it isn't worth it.