Data-treatment policy
This policy describes how Cannatel Exclusive Hotel handles the personal data collected through this site, in compliance with Colombian Law 1581 of 2012 and Decree 1377 of 2013.
Last updated: 19 August 2026.
Data controller
Cannatel Exclusive Hotel, Vereda El Caimo, Kilómetro 9, Vía La Tebaida – Armenia, Armenia, Quindío, Colombia. Phone: (+57) 311 392 0221. Email: experience@cannatel.co.
What we collect
Contact, events, gift, and Cannatel Circle forms: name, email, phone, and the message you write to us.
Cannatel Circle (once you activate a membership): phone number, name, preferred language, the record of your consent, and programme activity — stays, credits, and referrals.
Site analytics: only with your consent, through the cookie notice, and in aggregate.
Payments: processed by PayU Colombia on its own pages. This site never receives or stores card data.
Why we use it
To answer your enquiries and coordinate bookings, events, and gifts.
To operate Cannatel Circle: verifying your number over WhatsApp with a one-time code, keeping your credits and stays, and managing your referrals.
To understand how the site is used and improve it, when you accept analytics.
Authorization
We ask for your express authorization at the moment of collection: when you submit a form, or when you tick the consent box on joining Cannatel Circle. Browsing the site requires no personal data.
Your rights
The law entitles you to know, update, and rectify your data; to request proof of authorization; to be informed of how it has been used; to revoke authorization and request deletion; and to file complaints with the Superintendencia de Industria y Comercio (SIC).
How to exercise them
Write to experience@cannatel.co or via WhatsApp at (+57) 311 392 0221. We will answer requests and claims within the timeframes Law 1581 of 2012 establishes.
Processors and transfers
We use infrastructure providers to host the site, a messaging provider to deliver WhatsApp verification codes, and PayU Colombia to process payments. Some of these providers operate servers outside Colombia; in every case we require adequate safeguards, and they receive only what their service needs.
Security and retention
Data travels encrypted, is stored with restricted access, and system credentials never reach the browser. We keep data only while the relationship that justifies it exists; you can request deletion at any time through the channels above.
Changes to this policy
Any change will be published on this page, with its update date.