1. Data controller and contact channels
The controller of personal data is the Fundación Educativa El Edén de los Niños (FEENIS), a non-profit organization with Tax ID (NIT) 900.515.162-0, located at Calle 22 #48A-76, Soledad, Atlántico, Colombia.
This policy applies to the personal data FEENIS collects through its website feenis.com, its forms, donations, the store, the WhatsApp channel and its internal student and guardian management system. It is governed by Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and any rules that amend or supplement them. The Spanish version of this policy is the official one.
The foundation’s administrative and finance area handles questions, complaints and requests about personal data through these channels:
- Email: [email protected]
- Phone and WhatsApp: +57 313 494 5805
- Address: Calle 22 #48A-76, Soledad, Atlántico, Colombia
2. What data we collect
We only collect the data we need for each channel:
- Website and forms (contact, volunteering, newsletter, store quotes): name, email address, phone number, the message you write to us and, where applicable, the delivery or billing details you give us.
- Donations: first and last name, amount and date of the donation, the payment status and, if you request a donation certificate, your ID number or your company’s Tax ID. Payments are processed by Mercado Pago on its own platform: FEENIS does not receive or store card numbers or your bank passwords.
- WhatsApp channel: your phone number, your WhatsApp profile name, the content of the messages you send us (text, images or documents), the date and time of each message and, if you are a guardian who wants to check account information, the ID number you give us to verify your identity.
- The foundation’s students and guardians: name and ID of the student and their guardian, contact details, grade or program, enrollment information, payments, balances and account statements, which we keep in our management system.
- Browsing the website: technical and usage data collected by analytics and measurement cookies (see section 11).
We do not ask for sensitive data (such as racial or ethnic origin, health, sexual orientation, beliefs or biometric data). If it were ever necessary, we would explain why and your answer would always be optional.
3. Data of children and adolescents
The data of the children and adolescents served by the foundation is processed only with the authorization of their legal representative (mother, father or guardian), respecting their best interests and fundamental rights, as required by article 7 of Law 1581 of 2012 and article 12 of Decree 1377 of 2013. We use that data only for educational, nutrition, support and administrative purposes.
The WhatsApp channel is intended for guardians and adults, not for minors. If a minor writes to us, we will ask them to have their guardian contact us and will not keep more data than needed to give that answer.
We publish photos or videos of children on the website or social media only with the written authorization of their legal representative, who may withdraw it at any time through the channels in section 1.
4. What we use the data for
We use personal data to:
- Handle and answer your questions, requests and messages.
- Allow guardians, once their identity is verified, to check balances and account statements.
- Send payment reminders to guardians.
- Manage donations, confirm payments and issue donation certificates.
- Manage store orders and quotes.
- Send communications from the foundation, such as news or the newsletter, when you have authorized us to. You can ask us to stop at any time.
- Coordinate volunteering.
- Comply with our legal, accounting and tax obligations and respond to requests from authorities.
- Measure the use of the website and the effectiveness of our campaigns in order to improve them.
We do not sell or rent personal data.
5. Use of artificial intelligence
Our WhatsApp assistant uses an artificial intelligence model (Claude, by Anthropic) to understand messages and draft replies. To do this, the content of the conversation is sent to Anthropic, which acts as a data processor.
The balances and account statements we show you come directly from our accounting system; they are not generated by the AI model. Even so, if you notice something that does not match, let us know and a person will review it.
The assistant does not make automated decisions that produce legal effects on you or significantly affect you. At any time you can ask to talk to a member of our team by writing, for example, "I want to talk to a person".
6. Who we share data with and international transfers
To operate we use providers that process data on behalf of FEENIS (data processors), only to provide their service to us:
- Meta Platforms (WhatsApp Business): receiving and sending WhatsApp messages.
- Anthropic (Claude): processing the WhatsApp assistant’s messages.
- Cloudflare: website hosting and processing of requests and messages.
- Supabase: database for the management system.
- Mercado Pago: processing payments for donations and the store.
- Google and Microsoft: email and office tools. Google also provides the analytics and advertising services described in section 11.
Several of these providers have their servers outside Colombia (for example, in the United States), which involves an international transmission or transfer of data. FEENIS works with providers that offer an adequate level of data protection, as required by Law 1581 of 2012 and the instructions of the Superintendence of Industry and Commerce (SIC), and that commit by contract or through their terms of service to process the data only to provide their service to us and with security measures.
We may also disclose data to public authorities when required by law or by a judicial or administrative order.
7. Your rights
As the data subject you have the right to:
- Know, update and correct your personal data.
- Request proof of the authorization you gave us, except where the law does not require it.
- Be informed, upon request, about how we have used your data.
- Withdraw your authorization and request the deletion of your data, when there is no legal or contractual duty requiring us to keep it.
- File complaints with the Superintendence of Industry and Commerce (www.sic.gov.co) for violations of the law, after first submitting your question or complaint to FEENIS.
- Access your personal data free of charge.
These rights may be exercised by the data subject, their successors, their representative or attorney, or anyone acting under a stipulation in favor of another. For children and adolescents, they are exercised by their legal representative.
8. How to submit questions and complaints
Write to us at [email protected] or on WhatsApp at +57 313 494 5805 with your full name, your ID number, what you are requesting and a way to reply to you. If you are acting on behalf of someone else, attach the document that authorizes you. We may ask for additional information to verify your identity before disclosing or changing data.
- Questions (knowing what data we hold and how we use it): we answer within a maximum of ten (10) business days from receipt. If that is not possible, we will tell you why and give you a new date, no more than five (5) additional business days later.
- Complaints (correcting, updating or deleting data, withdrawing authorization or reporting a breach): we answer within a maximum of fifteen (15) business days from the day after receipt. If that is not possible, we will tell you why and give you a new date, no more than eight (8) additional business days later. If the complaint is incomplete, we will ask you to complete it within five (5) days; if two (2) months pass without you doing so, we will consider it withdrawn.
9. Data deletion
You can ask us at any time to delete the data we hold from the WhatsApp channel or the website:
- On WhatsApp: send "ELIMINAR MIS DATOS" (or "DELETE MY DATA") to +57 313 494 5805 from the number whose data you want deleted.
- By email: write to [email protected] with the subject "ELIMINAR MIS DATOS" (or "DELETE MY DATA"), including your name, your ID number and the phone number or email address you used to contact us.
We answer the request within a maximum of fifteen (15) business days, which may be extended by eight (8) more business days, and we confirm through the same channel which data we deleted. When we delete it, we erase from our systems the WhatsApp conversations, your number and profile name, and the data from the website forms, and we stop sending you messages and reminders.
Some information must be kept by law even if you request its deletion: accounting records and their supporting documents (for example, payments, receipts, donations and certificates issued) are kept for up to ten (10) years under Colombian accounting and commercial rules; we also keep the student information required by education regulations, and whatever is needed to handle an ongoing complaint or legal proceeding. That information is blocked for any other use and deleted when the period ends.
Please note that the copy of the conversation on your phone and the data WhatsApp keeps as a service are managed by Meta under its own privacy policy. Deleting the chat on your phone does not delete the data held by FEENIS; for that, submit the request described above.
10. Security and retention
We apply reasonable technical and administrative measures to protect data against loss and unauthorized use or access. These include:
- Role-based access: each team member sees only the information they need for their work.
- Encryption of information in transit (HTTPS and secure connections with our providers).
- Audit logs of access and changes in the management system.
- Verification of the guardian’s identity before showing account information on WhatsApp.
We keep the data for as long as our relationship with you lasts (for example, while the student is enrolled at the foundation or while you remain subscribed to our communications) and, after that, for the periods required by law. When we no longer need it, we delete or anonymize it. FEENIS’s databases will remain in force for as long as the foundation carries out its corporate purpose.
12. Effective date and changes
This policy is effective as of October 10, 2026, the date of its last update.
If we make significant changes (for example, to the purposes or the processors), we will publish the new version on this same page with its update date and, when the change affects how your data is used, we will let you know through the channel you use to contact us before applying it and, where the law requires, ask for a new authorization.