Privacy Policy

1. Data We Collect

We collect personal information only when you provide it to us directly or when it arises through the course of an engagement. The categories we may collect include:

• Contact information — name, email address, phone number, company name, and role.
• Correspondence — messages sent through our website form or by email.
• Business information — details about your company, sector, expansion plans, and financial context shared during advisory sessions.
• Website usage data — pages visited, time on site, browser type, and approximate location, collected via analytics tools if consented.

Legal basis: We process personal data based on your consent (website contact), contractual necessity (advisory services), and legitimate interest (service improvement and communication).

Retention: Contact form inquiries are kept for up to 12 months. Client engagement data is retained for up to 5 years from the end of the engagement, in line with Colombian commercial recordkeeping requirements.

2. How We Use Your Information

• To respond to inquiries and schedule initial conversations.
• To deliver advisory services and written outputs for which you have engaged us.
• To send relevant updates about our services, where you have opted in or have an existing client relationship.
• To improve the quality and relevance of our website and offerings.
• To meet our legal obligations under Colombian law.

We do not sell, rent, or trade personal information with third parties for marketing purposes.

3. Data Sharing

We may share personal information only in the following limited circumstances:

• Service providers — third-party tools used to operate the website or manage communications (e.g., hosting, email platforms), bound by data processing agreements.
• Legal requirements — when required by Colombian law, court order, or regulatory authority.
• Professional advisors — lawyers or accountants acting on our behalf, under strict confidentiality obligations.

4. Data Protection Measures

We apply the following measures to protect your information:

• HTTPS encryption for all data transmitted through our website.
• Access to client data limited to team members involved in the relevant engagement.
• Confidentiality agreements with all staff and contractors.
• Secure cloud storage with access controls and audit logging.
• In the event of a data breach affecting your rights, we will notify you within 72 hours of becoming aware of it, in line with best practice under Colombian Law 1581 of 2012.

5. Cookies

Our website uses cookies to function correctly and, with your consent, to understand how visitors use the site. Essential cookies are always active. Analytics and marketing cookies are used only when you accept them through our cookie banner. For full details, see our Cookie Policy.

6. Your Rights

Under Colombian Law 1581 of 2012 (Habeas Data), and consistent with international standards, you have the following rights:

• Right to access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete information.
• Right to erasure — request deletion of your personal data where there is no legitimate reason to keep it.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — at any time, for any processing based on consent.
• Right to lodge a complaint — with the Superintendencia de Industria y Comercio (SIC), the Colombian data protection supervisory authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 15 business days.

7. Third-Party Links

Our website may contain links to external resources or partner websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

8. Children's Privacy

Our services are directed at businesses and their representatives, all of whom are expected to be adults (18 years of age or older). We do not knowingly collect personal information from minors. If you believe we have inadvertently received data from a minor, please contact us so we can delete it promptly.

9. Policy Updates

We may update this policy periodically to reflect changes in our practices or legal requirements. When we do, we will revise the "last updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or to exercise your rights: