Habeas Data Policy
Last updated: June 15, 2026
In accordance with Colombia’s Law 1581 of 2012 and Decree 1074 of 2015, this policy describes how Welcome to Medellín treats personal data and the rights of data subjects.
1. Data controller (Responsable del Tratamiento)
[LEGAL ENTITY NAME], [NIT], located at [REGISTERED ADDRESS, MEDELLÍN, COLOMBIA]. Contact for data matters: [privacy@welcometomedellin.com], phone [CONTACT PHONE].
2. Data we collect
- Identification and contact data: name, email, phone/WhatsApp.
- Inquiry data you provide: budget, timeline, funding preference, location, and messages.
- Browsing data collected via cookies and analytics.
3. Purposes of the treatment
- Respond to and manage your inquiry and provide our services.
- Connect you, with your authorization, to vetted partners and lending partners.
- Send commercial communications you may opt out of.
- Comply with legal and contractual obligations.
4. Rights of the data subject
Under Law 1581 of 2012, you have the right to:
- Know, update, and rectify your personal data.
- Request proof of the authorization you granted.
- Be informed about the use of your data.
- File complaints with the Superintendencia de Industria y Comercio (SIC) for breaches.
- Withdraw your authorization and/or request deletion when no legal or contractual duty requires keeping the data.
- Access your personal data free of charge.
5. How to exercise your rights
Send queries and claims to [privacy@welcometomedellin.com]. Queries are answered within 10 business days; claims within 15 business days, extendable as the law allows. Please describe your request and how to identify you.
6. Authorization
By submitting our forms or contacting us, you authorize Welcome to Medellín to collect and process your personal data for the purposes above. This authorization is informed and may be withdrawn at any time, subject to legal limits.
7. Transfers and transmissions
Your data may be transmitted to service providers and, with your authorization, to partners and lenders, including processors located outside Colombia, always with appropriate safeguards.
8. Validity
This policy is effective from the date above. Personal data will be kept for as long as necessary for the stated purposes and legal duties.