Legal information

Privacy Policy

Last updated: July 21, 2026

1. Who we are

Viñedo Umaña Dajud (“we”, “our”, or “the Vineyard”) is the controller of personal data processed through www.umanadajud.com and reservas.umana-dajud.com. We are located at Kilómetro 2 vía Sáchica–Sutamarchán, Boyacá, Colombia. For any question about this policy, reach us at reservas@umana-dajud.com.

2. What data we collect

  • Booking data: name, email, phone, selected tour, date and time, group size, special requests, and billing details where applicable.
  • Payment data: processed through external gateways (PayPal and ePayco). Full card numbers and CVV are not stored on our servers.
  • Communications: the content of email and WhatsApp messages you exchange with us, including messages sent to the automated bot.
  • Marketing consent: if you opt in to the newsletter or WhatsApp promotions, we record your consent, its date, and age confirmation where applicable.
  • Technical data: IP address, browser type, timestamps, and usage logs needed for security, abuse prevention, and operation of the sites.

3. How we use your data

  • Manage bookings, confirmations, reminders, and customer support.
  • Process payments and issue electronic invoices as required by Colombian regulations.
  • Send transactional email and WhatsApp messages related to your booking.
  • Send marketing communications only when you have given explicit consent.
  • Improve the service and prevent abuse.
  • Meet legal, accounting, and tax obligations.

4. Who we share data with

We share data only with providers necessary to deliver the service. None of them use it for purposes other than those described in their respective policies:

  • PayPal and ePayco: payment processing.
  • Amazon Web Services (SES): transactional and marketing email delivery.
  • Meta Platforms (WhatsApp Business Platform): sending and receiving WhatsApp messages.
  • OpenAI: generating automated WhatsApp bot replies with the gpt-4o-mini model. Only necessary conversation context is transmitted; we do not train models on your data.
  • Infrastructure providers: hosting for the sites and database.

We may also disclose data when required by law or a competent authority, or when necessary to protect our rights.

5. International transfers

Some providers (PayPal, AWS, Meta, and OpenAI) store or process data outside Colombia, including in the United States and the European Union. These transfers rely on the contractual clauses and protection mechanisms each provider implements.

6. How long we keep data

  • Bookings and invoicing: at least 5 years, under the Colombian Commercial Code and tax regulations.
  • Marketing data: until you withdraw consent.
  • Technical logs: typically 90 days, except where longer retention is legally required.

7. Your rights

Under Colombian Law 1581 of 2012 (Habeas Data) and other applicable laws, you have the right to:

  • Access, update, and rectify your data.
  • Request proof of the consent you granted.
  • Request deletion when there is no legal or contractual obligation to keep the information.
  • Withdraw consent or file a complaint with the Superintendencia de Industria y Comercio.
  • If you are in the European Union, also exercise GDPR rights: access, portability, objection, and restriction.

To exercise these rights, write to reservas@umana-dajud.com. We will respond within the timeframes set by law.

8. WhatsApp and marketing

You will receive transactional messages, such as confirmations and reminders, when you make a booking. Marketing messages are sent only if you explicitly opted in and confirmed you are 18 or older, in line with Meta’s alcohol-content policy. You can opt out at any time by replying STOP or BAJA to any message.

9. Cookies and local storage

The booking system may use browser local storage to remember your language and maintain your session when needed. The main informational website does not use third-party advertising tracking cookies.

10. Children

Booking services and promotional communications are intended for adults. Wine tasting requires guests to be 18 or older. We do not knowingly collect data from children under 14 without verifiable consent from a parent or legal guardian.

11. Changes to this policy

We may update this policy. The current version will be posted on this page with its update date; if changes are substantive, we will notify you through the usual channels.

12. Contact

For any question about this policy or our handling of your data, write to reservas@umana-dajud.com.