Skip to content
Get in touch

Personal data processing policy

Version 1.0 · November 1, 2026 · Issued under Colombian Law 1581 of 2012 and Decree 1074 of 2015.

1. Data controller

  • Company: LM Bros Tech S.A.S.
  • Tax ID (NIT): 901.599.340-9
  • Domicile: Cali, Colombia
  • Address: Carrera 80B # 42-10, Cali
  • Email: gerencia@lmbrostech.co
  • Phone and WhatsApp: +57 310 423 2938
  • Website: https://lmbrostech.co

2. Scope

This policy applies to the personal data processed by LM Bros Tech S.A.S. through this website, its contact channels and its products MedKeep and Edgemon. It is issued under Colombian law (Law 1581 of 2012 and Decree 1074 of 2015).

For data about website visitors, business contacts and clients, LM Bros Tech S.A.S. decides how it is used and acts as data controller.

For data a client enters while using MedKeep or Edgemon (for example, its users or the recipients of its alerts), the client is the controller and LM Bros Tech S.A.S. acts as processor: it handles that data only on the client's instructions and to provide the service. When a request about that data reaches us, we forward it to the client and tell the person who made it.

3. Data we process

  • From website visitors: pseudonymous browsing data collected by Google Analytics (pages viewed, device and browser type, approximate city, how the visit arrived). We do not collect names or email addresses while you browse.
  • From people who contact us: name, company, phone, email and the content of the message sent to us on WhatsApp or by email.
  • From MedKeep and Edgemon clients and users: names, email, phone, job title, encrypted credentials, role, and access and usage logs.

The contact form on this site does not store or send data to our servers: it composes the message and opens it in WhatsApp. The data reaches us only if you decide to send it.

4. Purposes

  • Answer requests for information, quotes and demos.
  • Provide, operate, maintain and support our services and products.
  • Invoice, collect payment and meet accounting, tax and legal obligations.
  • Measure in aggregate how the site is used in order to improve it.
  • Prevent and investigate security incidents or misuse.
  • Send marketing information only when the data subject has authorized it, with the option to revoke that authorization at any time.

5. Authorization

Authorization is obtained when you write to us on your own initiative, accept a proposal or contract, or create an account in our products, and we keep proof of it. Authorization is not required in the cases listed in article 10 of Law 1581 of 2012, such as a request from an authority exercising its legal functions.

6. Sensitive data and minors

We do not request sensitive data or data about children and teenagers, and we ask you not to include it in messages or in our products. If a client enters it, the client is responsible for obtaining the reinforced authorization the law requires.

7. Your rights

Under article 8 of Law 1581 of 2012, you can:

  • Know, update and correct your data.
  • Request proof of your authorization, except where the law does not require it.
  • Find out how your data has been used.
  • Revoke your authorization and request deletion of your data when there is no legal or contractual duty to keep it.
  • Access your data free of charge.
  • File complaints with Colombia's Superintendence of Industry and Commerce (SIC), after first going through an inquiry or claim with us.

8. How to exercise them

Write to gerencia@lmbrostech.co with your name, your ID, what you are requesting and an email address for our reply.

Inquiries are answered within ten (10) business days, extendable by five (5) more with notice of the reason. Claims are answered within fifteen (15) business days, extendable by eight (8) more with notice of the reason. If a claim is incomplete, we ask you to complete it within five (5) days; if two (2) months pass without a reply, the claim is considered withdrawn.

9. Third parties that help us

We rely on providers that process data on our behalf, under confidentiality and security obligations:

  • Google Analytics (Google LLC), to measure how the site is used. Google signals and ad personalization are turned off, and data is kept for 14 months.
  • WhatsApp (Meta Platforms), as the contact channel you choose when writing to us.
  • Hosting, email, text message (SMS) and backup providers for our products.

10. International transfers

Some of these providers have servers outside Colombia, including in the United States. In those cases we check that the country offers an adequate level of protection according to the SIC, or we sign a data transmission agreement under Decree 1074 of 2015. We do not sell or share personal data.

11. Security

We apply reasonable technical and administrative measures: TLS encryption in transit, encrypted credentials, role-based access with least privilege, audit logging and regular backups. If an incident affects personal data, we inform the people affected and the SIC.

12. Retention

We keep data for as long as the relationship lasts and, afterwards, for the periods required by commercial, accounting and tax rules. Google Analytics browsing data is deleted after 14 months. Once those periods end, data is deleted or anonymized.

13. Cookies

This site only uses Google Analytics cookies (_ga and _ga_*), and only on lmbrostech.co. You can block or delete them in your browser settings or install the Google Analytics opt-out add-on; the site works the same. MedKeep and Edgemon use strictly necessary cookies and local storage to keep you signed in.

14. Effective date and changes

This policy applies from its publication. If we change it substantially, we publish the change here before it takes effect and, if we have your email, we let you know.