Skip to content
2026 pilot: one company at a time
The Ark of ISOFrom zero to certified
Colombian Law 1581 of 2012 · habeas data · version 3 · 11 Nov 2026

Personal data processing policy.

Data controller: The Ark of ISO · administrator@thearkofiso.com · Colombia. In force since publication.

What data we collect and why

During pre-launch we collect only the email address (and, if you provide them, your company name and what you are interested in: a standard, Risk or both) you leave in the pilot reservation form. The purpose is exclusive: to notify you when the pilot opens and invite you to take part. We do not share, sell or use that data for anything else.

The form is sent to a Google script (Apps Script) and the email is stored in a Google Workspace spreadsheet, services provided by Google LLC with servers in the United States. It is an international data transfer covered by your express authorization (article 26 of Law 1581 of 2012); Google acts as processor and does not use the data for its own purposes.

Authorization

Processing is carried out with your prior, express and informed authorization, given by ticking the box in the form. We keep the date and channel of that authorization together with your email, so we can prove it.

Your rights as a data subject

You can access, update and rectify your data, request proof of authorization, be informed about its use, file complaints before the Superintendencia de Industria y Comercio, revoke the authorization and request the deletion of your data.

To exercise them write to administrator@thearkofiso.com. We answer queries within 10 business days (extendable by 5) and complaints within 15 business days (extendable by 8), under articles 14 and 15 of Law 1581 of 2012.

Site analytics

We use Google Analytics 4 to know how many people visit the site and which pages they read. It collects technical data (pages viewed, device type, approximate country and where you came from) and stores a cookie in your browser so you are not counted twice.

Nothing from Google loads until you authorize it. Until you accept, your browser never communicates with Google Analytics: the script is not even downloaded. The legal basis is your prior, express and informed authorization (article 9 of Law 1581 of 2012), given by pressing “Accept” in the cookie notice.

You can change your mind at any time. The “Cookie preferences” link at the foot of every page reopens the notice and lets you revoke the authorization, as article 8 of the same law recognizes. When you revoke it we stop measuring immediately.

International transfer. Google Analytics is provided by Google LLC, with servers in the United States, so authorizing analytics involves an international transfer of that technical data. It is covered by your express authorization, under article 26 of Law 1581 of 2012.

What we do not do. We do not use analytics to identify you, we do not cross it with the email you leave in the reservation, we have neither Google advertising nor audiences enabled, and we do not share this data with third parties other than Google. We keep analytics data for 14 months.

If you would rather not decide in the notice, you can also install the Google Analytics opt-out add-on.

Validity

We keep the email for as long as pre-launch lasts and until you request its deletion. Version 3, published on 11 November 2026 (version 2 applied from 26 October 2026); it will be updated when the product enters commercial operation.