Privacy policy
This policy explains what personal data rafatrujillo.xyz collects, why, and how you can exercise your rights, in accordance with Colombian Law 1581 of 2012 and Decree 1377 of 2013 (habeas data).
Controller
The data controller is rafatrujillo (Rafa Trujillo), an artist based in Colombia. For any request, use the contact form in the Press section of this site.
What we collect
Mailing list: your email address, your name (optional), the date you gave consent and an encrypted fingerprint (hash) of your IP address to prevent abuse; we never store your IP in plain text. Contact form: name, email and message. Metrics: anonymous usage events (page views, sections, plays, clicks to platforms) with no cookies and nothing that identifies you.
How we use it
To send you news about rafatrujillo’s music (new releases, dates, exclusive content), to answer booking or press messages, and to understand site usage in aggregate in order to improve it. We never sell or share your data with third parties for commercial purposes.
Double opt-in
Your subscription is only activated once you confirm through the link we email you. Unconfirmed requests are deleted automatically after 14 days.
Processors
We use providers that process data on our behalf: Supabase (database), Resend (email delivery) and Vercel (hosting and anonymous metrics). They may be located outside Colombia, with appropriate security measures.
Your rights
You can access, update, correct and delete your data, withdraw your consent and file complaints with Colombia’s Superintendence of Industry and Commerce. To unsubscribe, use the “unsubscribe” link at the bottom of any email; for anything else, write to us through the contact form.
Retention
We keep your email while you remain subscribed. If you unsubscribe, we stop emailing you immediately. Metric events are deleted after 13 months.
Cookies
This site uses no tracking cookies. It only stores preferences in your browser (local storage), such as closing the pop-up, the player or the cursor style. The Spotify player and YouTube videos (privacy-enhanced mode) load only when you use them.