This Privacy Policy explains how personal data is collected, used, and protected in connection with ChatClick (the "Service"), the website at chatclick.ca (the "Site"), and the websites and AI chat agents we build and host for our clients. ChatClick is a brand operated by Norte Sur Consulting S.A.S.
Who we are
ChatClick is a service of Norte Sur Consulting S.A.S., NIT 901.956.771-1, a company registered in Medellin, Colombia, and Canadian-owned. We design and host lead-generation websites with a 24/7 bilingual AI chat agent for small businesses in Canada. Our development and hosting operations are based in Medellin, Colombia, which means some of the processing described below happens in Colombia.
Because we are a Colombian-registered company serving clients abroad, we aim to handle personal data in line with both Colombia's Ley 1581 de 2012 and Decreto 1377 de 2013 (Habeas Data) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
When we are the controller and when we are the processor
This distinction matters because ChatClick handles two different kinds of personal data.
Data we control
For visitors to chatclick.ca, for people who chat with our own sales agent, and for our own clients (the businesses that hire us), Norte Sur Consulting S.A.S. is the data controller. We decide why and how that data is processed.
Data we process on behalf of clients
When a visitor interacts with a website or AI chat agent we built for one of our clients, the leads and messages captured there belong to that client. The client is the data controller for that information, and ChatClick acts as a data processor (service provider), handling it only to deliver the service and following the client's instructions. If you contacted a business through a site we built and want your data accessed or deleted, please contact that business directly, or contact us and we will route your request to them.
Information we collect
Site usage and analytics
We may collect approximate location, device and browser type, pages viewed, referring links, and interaction events so we can understand how the Site is used. This is collected through cookies and similar technologies and is processed in aggregate.
Chat agent conversations
If you chat with our AI agent (on our Site or on a client's site), we process the messages you send and any contact details you choose to provide, such as your name, email, phone number, and what you are asking about, so the agent can respond, qualify the inquiry, and book a call or pass it to a human.
Client onboarding data
When a business hires us, we collect the information needed to build and run their site and agent: business name, contact details, services, prices, hours, FAQ content, and billing information.
Payment data
Payments are processed by Wompi, our third-party payment provider. We do not store full card numbers. We receive limited confirmation details such as the amount, date, and status of a transaction.
Technical and server data
Our hosting and content delivery providers automatically log technical information such as IP address, request time, and user agent, for security, fraud prevention, and reliability.
How we use your information
- To operate, maintain, and improve the Site, our clients' sites, and the AI agents.
- To respond to inquiries and to capture, qualify, and route leads.
- To onboard clients, build their sites, and provide ongoing support.
- To process payments and manage billing.
- To analyze usage and measure the performance of our content.
- To protect against abuse, fraud, and security threats.
- To comply with applicable legal obligations.
Cookies and similar technologies
We use a small number of cookies and similar technologies to run the Site, remember preferences, and measure traffic. You can control or delete cookies through your browser settings. Where we use Google Analytics, you can opt out across sites using the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.
Legal basis and your rights
We process personal data based on your consent, our legitimate interest in operating and improving the Service, the performance of a contract with our clients, and to comply with legal obligations.
Under Colombia's Ley 1581 de 2012 you have the right to know, update, and rectify your data, to request proof of your consent, to be informed about how your data is used, to request deletion when there is no legal duty to keep it, to revoke consent, and to file a complaint with the Superintendencia de Industria y Comercio (SIC).
Under Canada's PIPEDA you have the right to access the personal information we hold about you, to ask that it be corrected, to know how it is used and disclosed, and to withdraw consent subject to legal or contractual limits. You may also contact the Office of the Privacy Commissioner of Canada.
To exercise any of these rights, email us at [email protected]. We will respond within a reasonable time and within any period required by applicable law.
Sharing and international transfers
We do not sell your personal data. We share it only with the service providers that help us run the Service, including Anthropic (the AI model behind the chat agent), Cloudflare (hosting and content delivery), Wompi (payments), Resend (email delivery), and Google (analytics).
Because our operations are based in Colombia and our clients are in Canada, your data may be processed and stored in Colombia, Canada, and the United States. When data crosses borders, we take reasonable steps, including contractual safeguards with our providers, to keep it protected to the standard described in this policy.
Data retention and security
We keep personal data only for as long as needed for the purposes described above, or as required by law or by our agreement with a client, after which it is deleted or anonymized. We use encryption in transit, access controls, and reputable infrastructure providers to protect data, though no method of transmission or storage is completely secure.
Children
The Service is intended for businesses and adults. We do not knowingly collect personal data from children.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes may be highlighted on the Site.
Contact us
To exercise your rights or ask a question about this policy, email us at [email protected]. The data controller is Norte Sur Consulting S.A.S., NIT 901.956.771-1, Medellin, Colombia.