Privacy Policy

Last updated: September 16, 2026

1. Data controller

La Rifa processes personal data under Law 1581 of 2012 (Habeas Data) and other Colombian data protection regulations. La Rifa operates from Colombia and data is processed in Colombia, whatever country you use the platform from.

2. Data we collect

Organizers: name, email address, phone number, country, time zone, and raffle data.
Buyers: name, phone number, the proof of payment they upload (an image), and an email address if they choose to give one. The email is optional: the purchase works without it and it is used only to tell the buyer what happened to their ticket.
Minimal technical data (IP address, access logs) for security, plus two first-party cookies. The first holds a random identifier we use to count how many people see a page, a raffle or a plan, and how many go further; it is not derived from your IP or your account, is not shared with anyone, and ends when you clear cookies. The second remembers, for 30 days, where you first arrived from: the campaign tags on the link and the domain you came from, never the full address (a search engine URL would carry what you typed). About your browser we store whether it looks like a robot, yes or no, never the string that identifies it, and those measurements are deleted after 180 days. We use no third-party analytics.

3. Purpose

We use the data to run the platform: managing accounts, displaying the number grid, letting the organizer validate payments, and sending email notifications. The country you give us also determines which currency your plan is charged in and which tax applies to it, and your time zone is used to show your raffle dates in your own local time. We do not sell personal data.

4. Processors and third parties

We rely on providers acting as processors: Resend (sending emails), Bold (processing the organizer's plan payment), Cloudflare R2 (storing payment proofs), and our hosting provider. Third-party API keys entered by organizers are stored encrypted.

5. Retention

We retain data for as long as the account is active and per applicable legal retention periods. Payment proofs are kept to trace the organizer's raffle draw.

6. Your rights

You can know, update, correct, and request the deletion of your personal data by writing to privacidad@larifaco.com.