Privacy policy
Last updated: 19 August 2026
This policy explains what personal data jrstudio.com.co collects, why, how long it is kept and how you can exercise your rights over it. It is written to be understood in a single read.
Who processes your data
The data controller is Jose Eduardo Rodríguez Romero (JR Studio), a sole trader based in Colombia and the owner of jrstudio.com.co.
For anything concerning your personal data, including exercising your rights, write to info@jrstudio.com.co.
What is collected and why
The site only collects data you type into one of its two forms. There is no other collection point.
Contact form. Collects your name, company, email address, the project type you select and the message you write. The sole purpose is to read your enquiry and reply to it. The legal basis is your consent, given when you submit the form, together with pre-contractual steps taken at your request.
Checklist subscription. Collects your email address only. The purpose is to send you the free material you asked for and, afterwards, updates about the Figma a Código series. The legal basis is your consent.
No special category data is collected and no automated decisions with legal effects are made about you. Advertising profiling does take place, carried out by Meta from the pixel described in the next section; what it sends and how to turn it off is set out there.
Cookies, measurement and tracking
This site sets one advertising cookie, and only one: _fbp, written by the Meta pixel. It is a first-party cookie — set by jrstudio.com.co, not by facebook.com — it expires after three months and it holds a random identifier for your browser. There are no session cookies, no Google Analytics and no heatmap tooling.
Meta pixel. It loads on every page of the site and sends Meta the address of the page you are viewing, the page that brought you to it, your IP address and your browser's technical details. On the book page it also sends a ViewContent event carrying the title, the price and the currency. The purpose is to measure which ads bring readers who actually reach the book page, and to show those readers the ad again. The legal basis is your consent.
How to turn it off. There are three ways, and the site works exactly the same under all of them: your Meta account ad settings (Settings → Ad preferences → Activity off Meta technologies), which lets you disconnect this activity from your profile; any ad blocker, which stops the pixel from loading at all; or clearing this domain's cookies in your browser. You may withdraw your consent at any time through any of those, or by writing to info@jrstudio.com.co.
Page usage is measured, using Vercel Web Analytics — the hosting platform's own tool. It works without cookies and without persistent identifiers: it builds no profile of you, does not recognise you between visits and does not follow you off this site.
For each visit it records, in aggregate, the page viewed, the page you came from, your approximate country or region and your browser and operating system type. It exists to show which content gets read and which links work. There is no way to connect that data to you or to anything you type into the forms, which travel by an entirely separate path.
You will not see a cookie banner. That is a deliberate choice and you should know exactly what it means: the site sets the advertising cookie described above from the moment you arrive, without asking first. In exchange, it is declared here by name, lifetime and purpose, and the paragraph above gives you three ways to switch it off. If you would rather nothing from Meta loaded at all, block it before browsing on.
Separately, the server hosting the site automatically logs technical request data — IP address, browser, page requested — solely to keep the service running and detect abuse. Those logs are transient and are never cross-referenced with the forms.
Who it is shared with
Your data is never sold, rented or passed to third parties for commercial purposes. Only the providers strictly required to run the site are involved:
Brevo (Sendinblue SAS, France) is the email provider. It processes contact form submissions and stores the checklist subscriber list. It acts as a data processor and its servers are located in the European Union.
Vercel Inc. (United States) hosts the site and provides the cookieless analytics described above. It processes the technical connection data and aggregate visit data.
Meta Platforms Ireland Ltd. receives the data sent by the pixel. It does not act as a processor but as an independent controller: it uses that data under its own data policy to measure ad campaigns, build audiences and target advertising, whether or not you hold an account on its platforms.
Hotmart processes ebook purchases. Note that payment does not happen on this site: pressing the buy button takes you to Hotmart's own domain, where your payment data is collected and processed by them as an independent controller under their own privacy policy. Your card details are never seen or stored by me.
These providers may involve international data transfers outside Colombia. All of them operate under standard contractual clauses and recognised protection frameworks.
How long it is kept
Contact form messages are kept for the duration of the conversation and afterwards for as long as needed to handle any responsibilities arising from it.
Subscription data is kept until you unsubscribe. Every email includes a one-click unsubscribe link, and using it removes your address from the list without having to write to anyone.
Your rights
You may at any time exercise your rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
To do so, write to info@jrstudio.com.co stating which right you wish to exercise. You will not be asked to justify your reasons or to pay anything.
If you are in the European Economic Area, Regulation (EU) 2016/679 (GDPR) applies to this processing, including your right to lodge a complaint with the supervisory authority in your country.
If you are in Colombia, processing is also governed by Law 1581 of 2012 and Decree 1074 of 2015. Enquiries are answered within ten (10) business days and complaints within fifteen (15) business days. The supervisory authority is the Superintendencia de Industria y Comercio.
Children
The site is aimed at design and development professionals and is not intended for children. No children's data is knowingly collected. If you believe this has happened, write to me and I will delete it.
Changes to this policy
If the way the site handles data changes, this page will be updated before the change goes live, and the date above will reflect it. That is how the cookieless analytics were introduced, and how the Meta pixel was: each documented in the same deployment that switched it on.
