Privacy Policy
1.Definitions
- Account:the unique account created to access the private area of the Service.
- The Company:Universal Knowledge QS, operator of cuqs.org. For GDPR purposes, the Company is the Data Controller. For Colombian Law 1581 purposes, the Company is the Controller of Personal Data.
- Country of Reference:Colombia, where the Company maintains its principal operations.
- Personal Data:any information that identifies or can identify a natural person, within the broadest definition under GDPR, CCPA/CPRA, and Colombian Law 1581.
- Service:the cuqs.org website, its localized versions, and the private user area accessible via registration.
- User / Data Subject:the individual who accesses or registers on the Service ("Data Subject" under GDPR; "Titular" under Colombian Law 1581).
- Cookies, Usage Data, Device, Service Provider, Third-Party Social Media:retain the technical and legal meanings set forth in this policy and the Cookie Policy.
2.Data We Collect
2.1 Data You Provide Directly
- Email address:mandatory to create your account and receive the passwordless magic link or OTP access code.
- Full name:for personal identification and customized communication within the platform.
- Country, State/Department, and City/Municipality:mandatory in your profile to determine your geographic location, allocate the appropriate language version, and connect you with the nearest instructor or center for guidance.
- Phone number / WhatsApp:mandatory in your profile for direct communication, instructor guidance, and store order confirmations.
- Delivery physical address, neighborhood, and delivery notes:required only when you order merchandise from the official Store.
2.2 Usage Data (Automatic)
IP address, browser type and version, pages visited, time and duration of visit, unique device identifiers, and diagnostic performance data.
2.3 Private User Area Data
When using the private area (/auth/login and the tracking dashboard at /perfil), we collect:
- Curriculum progress:Phase A, Phase B, Practices, and Reflections lectures viewed, order and completion dates, essential for the educational progression system.
- Session data:temporary passwordless magic link/OTP authentication tokens, last login timestamp, and device used.
- Preferences:selected language and account settings.
This data is used exclusively to operate the educational tracking system and is never shared with third parties for commercial or advertising purposes.
2.4 Store Data
When placing an order in /tienda: item(s) selected, size, color, delivery address, and contact number for coordination via WhatsApp. We do not store financial data or credit card numbers on our servers.
2.5 Session Technologies and Cookies
Primary access is secured via email authentication (Magic Link / OTP). We utilize technical necessary cookies and performance analytics detailed in our Cookie Policy.
3.How We Use Your Data
- Provide and maintain the Service, including lecture progress and self-observation features.
- Administer your account and authenticate sessions via magic links or OTP codes.
- Determine geographic location to assign appropriate language settings and facilitate direct connection with the nearest Universal Knowledge Q.S. instructor or physical center.
- Process, dispatch, and coordinate official Store orders.
- Communicate with you (educational guidance, order updates, account notices, and Service updates).
- Fulfill legal and security requirements (fraud prevention and abuse mitigation).
- Perform internal analytics to optimize platform performance and reliability.
Where processing is based on consent (e.g., in the European Union), you may withdraw it at any time without affecting prior lawful processing.
4.With Whom We Share Data
- Service Providers:hosting infrastructure, self-hosted database systems (Supabase), and transactional email delivery for magic links, under strict confidentiality and data processing agreements.
- Competent Authorities:solely where required by enforceable legal or judicial mandate.
- Institutional Transactions:in the event of organizational restructuring, prior notice will be provided before any data transfer.
We do not sell or monetize personal data in exchange for financial consideration.
5.Data Retention and Deletion
We retain personal data only for as long as necessary for the described purposes or while your account remains active. Upon requesting account deletion via the Profile dashboard:
- Profile and contact information is permanently erased from our active databases.
- Educational progression records may be retained in an entirely anonymized and aggregated form for platform statistics.
- Residual data may be kept solely where required by enforceable statutory or accounting obligations.
6.International Data Transfers
Your data may be processed on infrastructure servers located outside your country of residence. When transferring data of European Union / United Kingdom users outside the European Economic Area, we utilize GDPR-recognized mechanisms (such as Standard Contractual Clauses). For users in Colombia and across Latin America, equivalent technical security standards are applied in accordance with applicable regional laws.
7.Data Security
We implement robust technical and organizational safeguards (TLS/SSL encryption in transit, passwordless authentication, and database Row-Level Security policies). However, no Internet transmission or digital storage method is 100% impenetrable, and absolute immunity from unauthorized third-party interference cannot be guaranteed.
8.Your Rights by Jurisdiction
8.1 Colombia — Law 1581 of 2012 and Decree 1377 of 2013 (Habeas Data)
If you reside in Colombia, you have the right to:
- Access, update, and rectify your personal information.
- Request proof of the authorization granted.
- Be informed regarding how your personal data is utilized.
- File complaints with the Superintendency of Industry and Commerce (SIC).
- Revoke authorization and/or request deletion of your data at any time.
- Access your processed personal data free of charge.
PQR Contact Channel: contact[at]email.cuqs.org. Inquiries will be answered within 10 business days and claims within 15 business days, pursuant to Colombian law.
8.2 European Union / United Kingdom — GDPR / UK GDPR
Rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability (JSON export available in Profile), objection, and the right to lodge a complaint with your supervisory authority.
8.3 California, United States — CCPA / CPRA
Right to notice, right to know and access collected data, right to delete, right to correct, and right to opt out of data sale or sharing.
8.4 Brazil (LGPD), Argentina (Law 25.326), Mexico (LFPDPPP)
We guarantee the full exercise of access, rectification, cancellation, opposition (ARCO), and portability rights under regional Latin American laws via written request to contact[at]email.cuqs.org.
9.Minors
The Service and account registration are strictly intended for individuals aged 18 or older (or the age of legal majority in your country). We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us for immediate deletion.
10.Cookies and "Do Not Track" (DNT)
We use technical and performance cookies necessary to deliver the Service (refer to our Cookie Policy). The Service does not currently respond to automated "Do Not Track" (DNT) browser signals.
11.Links to Third-Party Websites
The Service may contain links to third-party websites not operated by us. We assume no responsibility for the privacy practices or content of external third parties.
12.Changes to this Policy
Any material update will be notified by updating the revision date and version number on this page, or through prominent notice on the platform prior to implementation.
13.Contact
For inquiries, data protection requests, or exercising your privacy rights, please reach out to:
- Email:contact[at]email.cuqs.org