Privacy Policy

As of August 2026

1. Data controller Link to heading

Patrona & Sir, domiciled in Bogotá D.C., Colombia, is the controller of personal data collected through patronasir.co and our official communication channels.

For personal-data enquiries, complaints or requests:

Email: [email protected]
Domicile: Bogotá D.C., Colombia

2. Applicable law Link to heading

This policy is interpreted in accordance with Article 15 of the Political Constitution of Colombia, Law 1581 of 2012, Decree 1074 of 2015 and other applicable Colombian personal-data protection rules.

3. Data we process Link to heading

We may collect and process:

a name, alias or nickname;
confirmation that the visitor is an adult;
an email address, telephone number, messaging username or other contact detail the data subject chooses to provide;
enquiry or booking-request information, including the requested service, date, time, duration, incall or outcall preference, city and general location;
preferences, boundaries and other information the data subject voluntarily shares so that we can prepare or evaluate an experience;
messages, transcripts, summaries, conversation status and replies from Patrona & Sir or Velvet, our AI booking assistant;
technical and security data, including IP address, session identifiers, timestamps, browser information and anti-fraud or anti-abuse verification results.

4. Sensitive personal data Link to heading

Information concerning a person’s sex life, health, intimate preferences or personal boundaries may be sensitive personal data. A data subject is not required to answer questions about sensitive data. When a person voluntarily provides such information to enquire about or arrange a booking, they explicitly authorise its processing solely for the purposes described in this policy.

We do not knowingly request or process data relating to anyone under 18. Our services and booking channels are exclusively for adults. If we identify a minor’s data, we will restrict the conversation and delete the information where legally and technically possible.

5. Purposes of processing Link to heading

We process data to:

respond to enquiries about services, rates, availability and logistics;
prepare, manage and confirm booking requests;
communicate through the channel selected by the data subject;
allow Velvet to handle booking enquiries and refer questions requiring a human answer to Patrona & Sir;
send internal alerts about bookings, service enquiries or requests for human assistance;
maintain continuity of a conversation in the same browser;
prepare internal summaries and reviews for quality, security and service improvement;
prevent fraud, abuse, illegal or non-consensual activity and protect visitors, operators and systems;
comply with legal or contractual obligations and lawful requests from competent authorities.

We do not sell personal data or use it to provide automated erotic conversation for entertainment.

6. Authorisation Link to heading

By submitting data through our chat, forms or official channels, the data subject states that they are at least 18 and gives prior, express and informed authorisation for the processing necessary for the purposes described above. Providing sensitive data is optional; a person may decline to provide it, although that may prevent us from evaluating or arranging particular services.

We may retain evidence of authorisation through technical, electronic or documentary means that allow later consultation.

7. Processors, platforms and international processing Link to heading

To operate the site and handle communications, we may use infrastructure, security, storage, artificial-intelligence, messaging, notification and email providers, together with the communication service selected by the data subject.

These providers may process data on our behalf in Colombia or other countries. We limit shared information to what is necessary to provide the service and apply the authorisations, safeguards and agreements required for international transmissions or transfers. Each platform may also process information under its own terms and privacy policies.

We will not disclose personal data to third parties other than necessary providers, persons authorised by the data subject or authorities legally entitled to receive it.

8. Artificial intelligence and human review Link to heading

Velvet uses an artificial-intelligence service to answer booking- and service-related questions. Conversations may be processed automatically to produce a response or structure an enquiry. Velvet does not independently confirm an appointment: every booking remains subject to human confirmation by Patrona or Sir. A visitor may request a person at any time.

9. Retention and deletion Link to heading

Sessions and messages stored in the primary chat system are scheduled for automatic deletion after no more than 30 days. Necessary copies sent to internal communication channels, and records connected with an enquiry, booking, security matter or legal requirement, may be kept for as long as reasonably necessary to fulfil their purpose, resolve disputes, protect the parties or meet legal and contractual obligations. They will then be securely deleted, anonymised or restricted as appropriate.

10. Security and confidentiality Link to heading

We use reasonable technical, human and administrative safeguards, including encryption in transit, access controls and private operational services, to prevent loss, alteration, consultation, use or unauthorised access. Access is limited to Patrona, Sir and providers that need the information for authorised purposes. No system is completely infallible, but we will manage any incident in accordance with applicable law.

11. Browser storage and security technologies Link to heading

The chat uses local browser storage so that a data subject can resume a conversation from the same device. We may also use technologies strictly necessary for security, abuse prevention, site operation and technical measurement. A person can clear local storage through their browser settings, but doing so may remove access to an active conversation.

12. Data-subject rights Link to heading

A data subject may:

know, access, update and correct their data;
request evidence of authorisation, subject to legal exceptions;
ask how their data has been used;
request deletion or withdraw authorisation where permitted;
access processed personal data free of charge;
complain to Colombia’s Superintendence of Industry and Commerce after first completing the enquiry or complaint procedure with us.

Withdrawal or deletion will not apply where a legal or contractual duty requires us to keep the information.

13. Enquiries and complaints Link to heading

The data subject, their successor or authorised representative may email [email protected] with the subject “Data protection”. The request should include the name or alias used, a response channel, a clear description of the request and information reasonably necessary to verify identity and locate the relevant data. We may request additional documents when essential to avoid disclosing information to an unauthorised person.

Enquiries will be answered within ten (10) business days after receipt. If that is not possible, we will explain the reason and provide a new date no more than five (5) additional business days later. Complaints will be answered within fifteen (15) business days after the day of receipt. If that is not possible, we will explain the reason and provide a new date no more than eight (8) additional business days later.

If a complaint is incomplete, we will request correction within five (5) business days. If the required information is not provided within the following two (2) months, the complaint will be treated as withdrawn.

14. Changes to this policy Link to heading

We may update this policy to reflect legal, operational or technological changes. We will publish the current version and its revision date on this page. If a material change affects a previously authorised purpose, we will notify affected data subjects and seek new authorisation where required by law.