Last updated: August 13, 2026
At Sherpa Way SEO, we respect your privacy and are committed to processing personal data responsibly, transparently, and securely.
This Privacy and Personal Data Processing Policy explains how we collect, use, store, disclose, and protect personal information when you visit https://sherpawayseo.com/, contact us, request information, become a client, use our services, or otherwise interact with us.
This Policy should be read together with our Legal Notice and Cookie Policy.
1. DATA CONTROLLER
The controller responsible for personal data processed through Sherpa Way SEO is:
Data Controller: Mario Rendón Grisales
Trade name: Sherpa Way SEO
Website: https://sherpawayseo.com/
Address: Carrera 14 No. 97-51, Pereira, Colombia
Email: contact@sherpawayseo.com
Activity: SEO consulting, SEO strategy, content creation, managed SEO services, digital marketing consulting, and related professional services.
Sherpa Way SEO is operated from Colombia.
For purposes of this Policy, references to “Sherpa Way SEO,” “we,” “us,” “our,” or the “Controller” refer to the person identified above.
2. SCOPE OF THIS POLICY
This Policy applies to personal data processed in connection with:
Visits to the Sherpa Way SEO Website.
Contact and inquiry forms.
Requests for proposals or quotations.
Prospective client communications.
Client onboarding.
Provision of SEO, content, consulting, and related services.
Email communications.
Newsletter or marketing subscriptions, where offered.
Client support.
Website accounts, where available.
Comments, where enabled.
Analytics and measurement tools.
Cookies and similar technologies.
Business relationships with clients, suppliers, contractors, and partners.
Access granted to third-party platforms for the delivery of SEO services.
Any other interaction in which personal data is provided to Sherpa Way SEO.
This Policy does not directly govern processing independently carried out by third-party websites or platforms.
3. APPLICABLE DATA PROTECTION LAW
Sherpa Way SEO is operated from Colombia.
Personal data processing subject to Colombian law is governed primarily by:
Statutory Law 1581 of 2012, concerning the protection of personal data.
Decree 1074 of 2015, including the applicable provisions governing personal data processing.
Other laws, regulations, instructions, and decisions issued by competent Colombian authorities, including the Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio — SIC).
Because Sherpa Way SEO may provide services to clients or interact with individuals in other countries, additional privacy legislation may apply where its territorial scope so requires.
Where applicable, this may include Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”).
4. DATA PROTECTION PRINCIPLES
Where Colombian data protection law applies, Sherpa Way SEO processes personal data in accordance with principles including:
Lawfulness
Personal data will be processed in accordance with applicable law.
Purpose
Data will be collected and used for legitimate and disclosed purposes.
Freedom
Where authorization is legally required, processing will be based on the data subject’s prior, express, and informed authorization.
Accuracy and Quality
We seek to maintain personal information that is accurate, complete, understandable, and reasonably up to date.
Transparency
Data subjects may request information about the processing of their personal data.
Restricted Access and Circulation
Personal data will not be made indiscriminately available and will only be accessed by authorized persons or entities.
Security
Reasonable technical, administrative, and organizational safeguards will be used to protect personal data.
Confidentiality
Persons involved in personal data processing must preserve confidentiality where required.
5. PERSONAL DATA WE MAY COLLECT
The information collected depends on your relationship with Sherpa Way SEO.
5.1. Contact and Identification Information
We may collect:
Name.
Surname.
Business or company name.
Job title.
Email address.
Telephone number.
Country or location.
Other information voluntarily provided in an inquiry.
5.2. Prospective Client and Client Information
When you request or contract our services, we may process information such as:
Company information.
Website URLs.
Business objectives.
Target markets.
Marketing objectives.
SEO objectives.
Information about competitors.
Existing marketing or SEO strategies.
Project requirements.
Communications and project history.
Proposals, quotations, contracts, and statements of work.
Billing and transaction-related information where necessary.
5.3. Project and SEO Data
Depending on the services provided, Sherpa Way SEO may receive or access information relating to:
Website performance.
Organic traffic.
Search rankings.
Keyword performance.
Search Console information.
Analytics information.
Conversion data.
Content performance.
Technical SEO information.
Backlink information.
Website structure.
CMS information.
Marketing campaign information.
Other information necessary to perform contracted services.
Some of this information may not constitute personal data. Where it does, it will be handled in accordance with this Policy.
5.4. Access to Third-Party Platforms
Clients may grant Sherpa Way SEO authorized access to platforms necessary to provide the contracted services, which may include:
Google Search Console.
Google Analytics.
Google Business Profile.
Content management systems.
SEO software.
Marketing platforms.
Hosting platforms.
Other digital tools.
Where possible, access should be granted using account permissions, delegated access, or other secure mechanisms rather than by sharing personal passwords.
Access will be used only for authorized business purposes related to the services provided.
5.5. Technical and Browsing Information
When you access the Website, we or our providers may process:
IP address.
Browser type.
Device type.
Operating system.
Referring website.
Pages visited.
Date and time of access.
Approximate interaction duration.
Cookie identifiers.
Technical security information.
Website usage events.
Additional information is available in our Cookie Policy.
5.6. Communications
We may retain communications exchanged with prospective clients, clients, suppliers, partners, or other contacts where reasonably necessary for business, contractual, support, or legal purposes.
6. SENSITIVE PERSONAL DATA
Sherpa Way SEO does not generally require sensitive personal data to provide its services.
Please do not provide information regarding health, biometric data, political opinions, religious beliefs, sexual life, trade union membership, or other sensitive information unless it is genuinely necessary and we have specifically requested it.
Where processing of sensitive data becomes necessary, applicable legal requirements will be observed.
Where Colombian law applies, data subjects will not be required to authorize the processing of sensitive data unless such processing is legally justified.
7. PURPOSES OF PROCESSING
We may process personal data for purposes including:
Responding to Inquiries
To respond to questions, contact requests, and requests for information.
Preparing Proposals
To understand a prospective client’s needs and prepare quotations, proposals, SEO assessments, scopes of work, or recommendations.
Providing Services
To perform SEO strategy, SEO content, managed SEO, consulting, research, analysis, optimization, reporting, and other contracted services.
Client Management
To manage onboarding, communications, project administration, support, deliverables, meetings, and client relationships.
Account and Platform Access
To use authorized access to digital platforms where necessary to perform contracted services.
Billing and Administration
To manage invoices, payments, accounting records, and administrative obligations.
Where payment processing is carried out by a third-party payment provider, that provider may process payment information under its own terms and privacy practices.
Website Operation
To operate, maintain, secure, troubleshoot, and improve the Website.
Analytics
To understand Website usage and improve content, functionality, marketing, and performance.
Marketing Communications
Where permitted, to send information about Sherpa Way SEO services, articles, insights, or other relevant communications.
Where authorization or consent is required, such communications will only be sent in accordance with that authorization or consent.
Security and Fraud Prevention
To identify and respond to security threats, fraud, abuse, spam, unauthorized access, and malicious activity.
Legal Compliance
To comply with applicable legal, regulatory, tax, accounting, judicial, or administrative requirements.
Legal Claims
To establish, exercise, or defend legal or contractual rights.
8. AUTHORIZATION UNDER COLOMBIAN LAW
Where Colombian law requires authorization, Sherpa Way SEO will seek the data subject’s prior, express, and informed authorization before processing personal data.
Authorization may be obtained through appropriate mechanisms including:
Electronic forms.
Checkboxes.
Contractual documentation.
Email communications.
Subscription forms.
Cookie consent tools.
Written or electronic statements.
Other legally valid mechanisms that allow the authorization to be demonstrated.
Authorization is not required in circumstances expressly exempted by applicable law.
9. LEGAL BASES WHERE THE GDPR APPLIES
Where the GDPR applies to a particular processing activity, processing may be based on one or more lawful grounds, including:
The data subject’s consent.
Performance of a contract.
Steps taken at the individual’s request before entering into a contract.
Compliance with legal obligations.
Sherpa Way SEO’s legitimate interests or those of a third party, where such interests are not overridden by the individual’s rights and freedoms.
Other lawful grounds available under applicable law.
Where processing relies on consent, consent may be withdrawn at any time without affecting processing lawfully carried out before withdrawal.
10. CONTACT FORMS AND BUSINESS INQUIRIES
Information submitted through a contact form or email may be used to:
Respond to your inquiry.
Assess your requirements.
Prepare a proposal.
Schedule a conversation.
Follow up on a request initiated by you.
Maintain reasonable business records.
Submitting an inquiry does not automatically subscribe you to marketing communications unless you separately choose to receive them or another lawful basis applies.
11. CLIENT DATA AND CONFIDENTIAL INFORMATION
During a client engagement, Sherpa Way SEO may receive information belonging to or controlled by the client.
Such information will be used for the purposes of performing the agreed services and administering the professional relationship.
Where client-provided information contains personal data relating to the client’s employees, customers, users, contractors, or other individuals, the parties may need to determine their respective roles and obligations under applicable privacy legislation.
Where Sherpa Way SEO acts as a processor or service provider on behalf of a client, additional contractual data-processing terms may be used where required.
This Privacy Policy does not replace a Data Processing Agreement where one is legally necessary.
12. NEWSLETTERS AND MARKETING COMMUNICATIONS
Where Sherpa Way SEO offers newsletters or promotional communications, subscription is voluntary.
You may unsubscribe using the link included in the communication or by contacting:
Unsubscribing from marketing communications does not prevent us from sending communications that are necessary for an existing client relationship, contract, security matter, legal requirement, or request initiated by you.
Sherpa Way SEO does not sell subscriber email lists.
13. COOKIES AND ANALYTICS
Sherpa Way SEO uses or may use cookies and similar technologies to:
Enable Website functionality.
Maintain security.
Remember preferences.
Measure Website performance.
Analyze traffic.
Understand content usage.
Support marketing or advertising functions where enabled.
Where required by applicable law, non-essential technologies will be activated according to the User’s consent preferences.
The simple act of visiting or continuing to browse the Website will not be treated as affirmative consent where affirmative consent is legally required.
For more information, please read our Cookie Policy.
14. SERVICE PROVIDERS
Sherpa Way SEO may use third-party providers to operate its Website and business.
These may include providers of:
Web hosting.
Cloud infrastructure.
Email.
Analytics.
Security.
Project management.
Video conferencing.
File storage.
Accounting.
Customer relationship management.
SEO and marketing tools.
Content management systems.
Payment services.
Professional services.
These providers may process limited information where necessary to provide their services.
We seek to work with providers offering reasonable privacy and security safeguards and use appropriate contractual arrangements where legally required.
15. INTERNATIONAL TRANSFERS AND TRANSMISSIONS
Because Sherpa Way SEO works online and may use international technology providers, personal data may be processed in countries outside Colombia.
Where Colombian law applies, international transfers and transmissions of personal data will be handled in accordance with the requirements of Statutory Law 1581 of 2012, Decree 1074 of 2015, and other applicable regulations.
Where a provider processes data on behalf of Sherpa Way SEO, applicable rules governing domestic or international data transmissions may apply.
Where the GDPR applies, international transfers will be subject to the appropriate mechanisms and safeguards required by European data protection law.
16. DISCLOSURE OF PERSONAL DATA
Sherpa Way SEO does not sell personal data.
Personal information may be disclosed or made accessible where reasonably necessary:
To technology providers supporting our operations.
To contractors involved in delivering services.
To professional advisers.
To payment or accounting providers.
With the data subject’s authorization.
To comply with applicable law.
To respond to lawful requests from competent authorities.
To establish or defend legal rights.
To protect against fraud, abuse, or security threats.
In connection with a legitimate business reorganization or transfer, subject to applicable law.
Any disclosure will be limited to what is reasonably necessary for the relevant purpose.
17. THIRD-PARTY WEBSITES
The Website may link to external websites, platforms, tools, or social networks.
Sherpa Way SEO does not control the independent privacy practices of those third parties.
When you access a third-party service, you should review its own privacy policy before providing personal information.
18. DATA RETENTION
Personal data will be retained for no longer than reasonably necessary for the purposes for which it was collected, taking into account contractual, administrative, accounting, tax, security, and legal requirements.
Retention periods may vary according to the type of information.
For example:
Prospective client inquiries: retained for a reasonable period to manage the inquiry and potential business relationship.
Client records: retained during the professional relationship and afterward where reasonably necessary to comply with contractual, tax, accounting, or legal obligations.
Marketing information: retained until the individual unsubscribes, withdraws authorization where applicable, or the information is otherwise no longer required.
Technical and security logs: retained for periods reasonably necessary for security and troubleshooting.
Cookie information: retained according to the duration disclosed through the applicable cookie or consent management system.
When information is no longer required, it may be securely deleted, anonymized, or restricted where appropriate.
19. INFORMATION SECURITY
Sherpa Way SEO applies reasonable technical, administrative, and organizational safeguards designed to protect personal information from:
Unauthorized access.
Loss.
Alteration.
Destruction.
Fraudulent use.
Unauthorized disclosure.
Measures may include:
HTTPS encryption.
Access restrictions.
Authentication controls.
Security updates.
Account protection.
Backups.
Secure cloud services.
Vendor security controls.
No Internet-connected system can guarantee absolute security.
Where a personal data security incident occurs, Sherpa Way SEO will take reasonable measures and comply with applicable notification or reporting requirements.
20. RIGHTS OF DATA SUBJECTS IN COLOMBIA
Where Colombian law applies, data subjects may have rights to:
Know their personal data.
Access their personal data.
Update their information.
Correct inaccurate information.
Request proof of authorization where applicable.
Request information regarding the use made of their personal data.
Submit inquiries and complaints.
Request deletion where legally appropriate.
Revoke authorization where legally appropriate.
Access their personal data subject to processing free of charge under applicable conditions.
File a complaint with the Superintendence of Industry and Commerce (SIC) after completing the applicable prior procedure where required.
Deletion or revocation may not apply where information must be retained because of a legal or contractual obligation.
21. HOW TO EXERCISE YOUR PRIVACY RIGHTS
The area responsible for privacy requests is:
Privacy and Data Protection — Sherpa Way SEO
Requests may be submitted to:
A request should include sufficient information to allow us to:
Identify the data subject.
Understand the request.
Identify the relevant personal data.
Contact the requester with our response.
Reasonable evidence of identity or authority to act on behalf of another person may be requested where necessary.
22. INQUIRY PROCEDURE UNDER COLOMBIAN LAW
Requests to consult personal data will be answered within a maximum of ten (10) business days from receipt.
Where the request cannot be answered within that period, the requester will be informed of the reason for the delay and the expected response date.
The additional period will not exceed five (5) business days following expiration of the initial period.
23. COMPLAINT PROCEDURE UNDER COLOMBIAN LAW
A data subject or legally authorized person may submit a complaint to request correction, updating, deletion, revocation where appropriate, or to report an alleged breach of applicable data protection obligations.
If the complaint is incomplete, additional information may be requested in accordance with applicable legal requirements.
A complete complaint will be answered within a maximum of fifteen (15) business days beginning on the day following its receipt.
Where the complaint cannot be resolved within that period, the requester will be informed of the reason for the delay and the date on which a response will be provided.
The additional period will not exceed eight (8) business days following expiration of the initial period.
24. COMPLAINTS TO THE SUPERINTENDENCE OF INDUSTRY AND COMMERCE
Where Colombian law applies, data subjects may submit complaints to the Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio — SIC) after completing the applicable inquiry or complaint process before Sherpa Way SEO where such prior procedure is legally required.
25. EUROPEAN USERS AND THE GDPR
Sherpa Way SEO is operated from Colombia.
Certain processing activities may nevertheless fall within the territorial scope of the GDPR.
Where the GDPR applies, individuals may have rights including, subject to applicable conditions and exceptions:
Access.
Rectification.
Erasure.
Restriction of processing.
Objection.
Data portability.
Withdrawal of consent.
The right to lodge a complaint with a competent supervisory authority.
Requests may be submitted to:
The availability of a particular GDPR right depends on the nature of the processing and the legal basis involved.
26. CHILDREN’S PERSONAL DATA
Sherpa Way SEO provides professional SEO and digital marketing services and is not directed at children.
We do not intentionally seek to collect personal data from children through the Website.
Under Colombian law, personal data relating to children and adolescents receives special protection.
Where such processing becomes necessary, it will only be carried out where permitted by law, with due regard for the child’s best interests and fundamental rights and with any legally required authorization.
27. AUTOMATED DECISION-MAKING
Unless expressly disclosed otherwise, Sherpa Way SEO does not use information collected directly through its Website to make solely automated decisions that produce legal effects concerning an individual or similarly significantly affect them.
Analytics or marketing tools may nevertheless classify general Website audiences or browsing patterns where permitted by law and applicable consent preferences.
28. CHANGES TO THIS POLICY
Sherpa Way SEO may update this Policy where necessary to reflect:
Legal or regulatory changes.
Changes to our services.
Changes in technology.
New service providers.
New processing activities.
Improvements to our privacy practices.
Where legally required, material changes will be communicated and renewed authorization will be obtained where necessary.
The current version will always be the version published on this page.
29. EFFECTIVE DATE
This Privacy and Personal Data Processing Policy is effective from:
August 13, 2026
30. CONTACT
For privacy-related inquiries or requests:
Sherpa Way SEO
Data Controller: Mario Rendón Grisales
Address: Carrera 14 No. 97-51, Pereira, Colombia
Email: contact@sherpawayseo.com
Website: https://sherpawayseo.com/
Privacy contact: Privacy and Data Protection — Sherpa Way SEO
Last updated: August 13, 2026
