Privacy and personal data policy

Last updated: 27 September 2026.

Amen is a Christian website whose purpose is to preach the Gospel of Jesus Christ to the nations. To fulfil that purpose it receives prayer requests, testimonies and messages from people in different countries. This Policy explains how that data is processed, in compliance with Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 (compiled in Single Regulatory Decree 1074 of 2015) and the fundamental right of habeas data under Article 15 of the Political Constitution of Colombia.

1. Data controller

Controller: GLOBALINSURANCEMALL (GIM)
Tax ID (NIT): 11275422075
Address: Medellín, Colombia
Email for exercising your rights: pachoviloriainsurances@gmail.com
Phone and WhatsApp: +57 324 367 5333

2. Definitions

The definitions in Article 3 of Law 1581 of 2012 apply: Data subject, the natural person whose data is processed; Personal data, any information linked or that may be associated with an identified or identifiable natural person; Processing, any operation on personal data, such as collection, storage, use, circulation or deletion; Authorisation, the prior, express and informed consent of the data subject; Controller, whoever decides on the database and its processing; and Processor, whoever processes data on behalf of the controller.

3. Principles

Processing is governed by the principles of Article 4 of Law 1581 of 2012: legality, purpose, freedom, accuracy or quality, transparency, restricted access and circulation, security and confidentiality. In particular, data is used only for the purposes stated here and never for commercial purposes.

4. Data collected

Prayer request: name (optional), email (optional), type of request and text.
Testimonies: name, country or city, title and text.
Contact: name, email, church or organisation (optional), subject and message.
Technical data: a technical session identifier, the date of submission, language preference and cookie choice, as explained in the Cookie Policy.

The Site does not ask for identity documents, bank details, passwords or precise location.

5. Sensitive data

Under Article 5 of Law 1581 of 2012, sensitive data includes, among others, data revealing religious beliefs and data concerning health. By the nature of the Site, prayer requests and testimonies may contain this kind of information.

In accordance with Article 6 of the same law, sensitive data is processed only with the explicit authorisation of the data subject, given by ticking the corresponding box on each form. You are expressly informed that you are not obliged to authorise the processing of sensitive data or to provide information about your health or beliefs; you may send your request without your name and without details that identify you.

6. Purposes

Data is processed exclusively to:

a) Receive prayer requests and pray for them.
b) Publish on the prayer wall the requests the data subject chooses to make public, showing only the first name and text.
c) Publish the testimonies sent, so that the Gospel may reach other people.
d) Reply to messages and, when the data subject requests it, offer spiritual support or information about the Christian faith and nearby churches.
e) Learn about and share, with authorisation, the work of churches and ministries in different nations.
f) Maintain the security of the Site and prevent abuse.
g) Comply with legal obligations.

Data is not sold, rented or transferred to third parties for commercial, advertising or political purposes, nor shared with churches or organisations without the data subject’s prior authorisation.

7. Rights of the data subject

Under Article 8 of Law 1581 of 2012, the data subject may:

a) Know, update and correct their data.
b) Request proof of the authorisation given.
c) Be informed, on request, about how their data has been used.
d) File complaints with the Superintendence of Industry and Commerce (SIC).
e) Revoke the authorisation and request deletion of their data.
f) Access their data free of charge.

8. Enquiries and claims

Enquiries: answered within a maximum of ten (10) business days from receipt, extendable by up to five (5) additional business days with an explanation (Article 14, Law 1581 of 2012).

Claims: a data subject who believes their information should be corrected, updated or deleted, or who notices a breach, may send a claim to pachoviloriainsurances@gmail.com stating their identification, a description of the facts, an address for notifications and any supporting documents. If the claim is incomplete, the claimant will be asked within five (5) days to complete it; if it is not completed within two (2) months, it will be deemed withdrawn. The response period is fifteen (15) business days, extendable by up to eight (8) additional business days (Article 15, Law 1581 of 2012). A complaint to the Superintendence of Industry and Commerce may be filed once this procedure has been exhausted.

9. Users from other nations

Because the Site seeks to reach the nations, it receives visits and messages from people in many countries. Processing is governed by Colombian law; in addition, the controller will respect, where applicable, the rights granted by the data protection rules of the user’s country. For example, people in the European Union may exercise their rights of access, rectification, erasure, restriction, portability and objection under the General Data Protection Regulation (Regulation (EU) 2016/679) by writing to the controller’s email.

Believers living in countries where the Christian faith is persecuted or restricted may send requests anonymously, without email or name. The controller will not publish data that could put them at risk and will delete their information on request.

10. Data of children and adolescents

The Site does not seek to collect data from minors. Under Article 7 of Law 1581 of 2012, any processing of such data will respect their best interests and fundamental rights and will require the authorisation of their legal representative. We recommend not including names or health information of minors in public requests.

11. International transfer and transmission

Data may be stored on servers of technology providers located outside Colombia, acting as processors. In such cases, efforts will be made to ensure these providers offer adequate levels of protection, in accordance with Article 26 of Law 1581 of 2012 and the instructions of the Superintendence of Industry and Commerce. By accepting this policy, the data subject authorises such transmission for the purposes described.

12. Security

The controller adopts reasonable technical, human and administrative measures to protect data against alteration, loss, consultation, use or unauthorised access. Private prayer requests and contact messages are stored in restricted-access areas visible only to the administrator. No system is infallible, so we recommend not sending unnecessary information.

13. Retention

Data is kept for as long as necessary to fulfil the purposes or until the data subject requests its deletion. Private prayer requests may be deleted periodically once their purpose has been fulfilled.

14. Validity and changes

This policy is effective from its publication. Substantial changes will be announced on the Site with the date of update.