This text is provided for information. It explains in plain terms how we handle personal data; the applicable laws prevail over it in case of conflict.
1. Who is responsible for your data
C & C BIOTECH LLC (“we”, “us”), a limited liability company organized in the United States, is responsible for the personal data described in this policy. Under Colombian law, we act as the data controller (responsable del tratamiento).
- Data controller
- C & C BIOTECH LLC
- Address
- 15421 W Dixie Hwy, Miami, FL 33162
- WhatsApp and phone
- +1 (305) 491-2455
- Website
- www.ccbiotechllc.com
This same channel is where you can ask questions about this policy and exercise your rights (section 12). We currently handle all requests through it.
2. Scope and legal framework
This policy applies to www.ccbiotechllc.com, in English and Spanish, and to the conversations people start with us by WhatsApp or phone. It does not cover the third-party sites we link to.
As a U.S. company, we handle personal data in line with the U.S. federal and state laws that apply to us. We also adopt this document as our Personal Data Processing Policy (Política de Tratamiento de la Información) under Colombian Statutory Law 1581 of 2012 and Decree 1377 of 2013, now compiled in Decree 1074 of 2015, and we apply it to the personal data of people in Colombia.
3. What data we process
What this website does not collect
The site has no forms, user accounts, newsletter or payments, and it does not set its own cookies. You can browse it without telling us who you are.
What you share when you contact us
If you write to us on WhatsApp or call us, we receive what you choose to share: usually your name, your phone number and the content of your message or call, plus any details you add about your organization or your request.
Technical records from our hosting provider
The site is hosted and protected by Cloudflare. To deliver pages and keep them secure, Cloudflare processes technical data such as your IP address, browser type, the page requested and the date and time of the request.
Aggregated analytics
We use Cloudflare Web Analytics to understand, in aggregate, how the site is used: page views, referring sites, browser or device type and similar figures. It does not use cookies and is not used to identify individual visitors.
4. Why we use it
We use personal data only to:
- Reply to your messages and calls and answer your questions about our company and our solutions.
- Manage any business relationship that follows from that contact.
- Deliver the website, keep it available and protect it against abuse and attacks.
- Understand, in aggregate, how the site is used so we can improve it.
- Meet our legal obligations and respond to valid requests from authorities.
We will not use your data for other purposes without telling you first and, where the law requires it, asking for your authorization.
6. Sensitive data and minors
We do not ask for sensitive data, such as health information, biometric data, or data about racial or ethnic origin, political opinions, religious or philosophical beliefs or sex life. Please do not send it to us by WhatsApp or phone. You are never required to provide it, and none of our purposes needs it.
This site is not directed to children under 13, and we do not knowingly collect personal data from children or adolescents. If you believe a minor has sent us personal data, contact us and we will delete it.
7. Service providers and third-party sites
We do not sell personal data, and we do not rent, transfer or give it to third parties for their own purposes. We share it only with:
- Cloudflare, Inc., which hosts the site, protects it and provides the analytics on our behalf (Cloudflare privacy policy).
- WhatsApp, a Meta service, when you choose to contact us there. Your messages travel through WhatsApp, which handles them under its own terms (WhatsApp privacy policy).
- Authorities, when a law or a valid order requires it.
The site links to our LinkedIn page and to the Kle-ah website (kleah.vercel.app). They are third-party sites with their own privacy policies, and this policy does not apply to them.
8. International transfers
We are based in the United States, and our providers may process data on servers located outside the country where you live, including the United States. For people in Colombia, this means an international transmission of personal data to Cloudflare as our provider, and the processing of what you send through WhatsApp on Meta’s infrastructure.
By contacting us, you authorize these international transfers and transmissions, which we carry out only for the purposes in section 4.
9. How long we keep it
We keep personal data only for as long as the purpose it was collected for requires, and for as long as we must to meet legal, accounting or contractual obligations. After that, we delete it or anonymize it. Cloudflare keeps its technical records for the limited periods set in its own policies.
Our databases remain in force for as long as those purposes last.
10. Security
We apply reasonable measures to protect personal data: the site is served only over encrypted HTTPS connections with HSTS, and our hosting provider applies its own security controls. No system is completely secure, so we cannot guarantee absolute security.
11. Your rights
Wherever you are, you can ask us what personal data we hold about you and how we use it, and ask us to correct or delete it. Depending on the state where you live, U.S. state privacy laws may give you additional rights; where they apply, you can exercise them through the same channel.
If you are in Colombia
Under Article 8 of Law 1581 of 2012, as the data subject you have the right to:
- Know, update and rectify your personal data, including data that is partial, inaccurate, incomplete, fragmented or misleading, or whose processing is prohibited or has not been authorized.
- Request proof of the authorization you gave us.
- Be informed, on request, of how your personal data has been used.
- File complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law, once you have first submitted your query or claim to us.
- Revoke your authorization and request the deletion of your data, unless a legal or contractual duty requires us to keep it.
- Access the personal data we process about you, free of charge.
These rights may be exercised by you, by your successors in title, or by a representative or attorney who proves that role.
12. How to make a query or a claim
Write to us on WhatsApp or call +1 (305) 491-2455. Include your full name, a way to reach you, a clear description of your request and, for claims, the facts and any supporting documents. To protect your data, we may ask you to confirm your identity before answering.
Queries
10business days
from the date we receive it
Extendable by up to 5 business days
Claims
15business days
from the day after we receive it
Extendable by up to 8 business days
Queries
If you want to know what data we hold about you or how we use it, we will answer within 10 business days from the date we receive your request. If we cannot do so in that time, we will tell you why and answer within 5 additional business days at most.
Claims
If you believe your data should be corrected, updated or deleted, or that we have not met our obligations, you can file a claim. If it is incomplete, we will ask you to complete it within 5 days of receiving it; if you do not send the missing information within 2 months of our request, the claim will be considered withdrawn.
Once the claim is complete, we will mark your data as “claim in progress” within 2 business days and resolve it within 15 business days from the day after we receive it. If we need more time, we will tell you why and resolve it within 8 additional business days at most.
After completing this process with us, you may take your complaint to Colombia’s Superintendence of Industry and Commerce (www.sic.gov.co).
13. Changes and effective date
We may update this policy. Changes are published on this page with a new “last updated” date. If a change substantially affects how we handle your data or its purposes, we will publish it here before it applies and, where the law requires it, ask for your authorization again.
This policy takes effect on October 20, 2026 and remains in force until it is replaced by a new version.