Expressco S.A.S. (hereinafter 'Expressco', 'we', or 'the company'), with registered address at Carrera 7 #71-21, Office 1005, Torre Davivienda, Bogotá D.C., Colombia, and Tax ID (NIT) 901.456.789-2, is committed to protecting the privacy of users of its digital real estate crowdlending platform. This Privacy Policy describes how we collect, use, store, and protect your personal information in accordance with Law 1581 of 2012, Decree 1377 of 2013, and other current regulations on personal data protection in Colombia.
1. Information we collect
We collect the following types of personal data when you use our platform: • Identification data: full name, type and number of identity document, date of birth, nationality. • Contact data: email address, phone number, residential address. • Financial data: banking information necessary for investment management, transaction history within the platform. • Browsing data: IP address, browser type, pages visited, time spent, cookies and similar technologies. • Voluntarily provided data: information included in contact forms, inquiries, or communications with our team.
2. Purpose of processing
We use your personal information for the following purposes: • Managing your registration and account on the platform. • Processing and administering investments made through real estate crowdlending. • Complying with applicable legal and regulatory obligations, including anti-money laundering regulations (SARLAFT). • Sending communications related to the status of your investments, project updates, and platform news. • Conducting statistical analysis and service improvement. • Responding to requests, inquiries, and complaints.
3. Legal basis for processing
The processing of your personal data is based on: • Your express consent when registering on the platform and accepting the terms of service. • Fulfillment of contractual obligations arising from your participation in investment projects. • Compliance with legal obligations before supervisory and control entities. • The legitimate interest of Expressco in the continuous improvement of its services and fraud prevention.
4. Data sharing
Your personal data may be shared with: • Trust entities and financial partners involved in managing investment projects. • Competent authorities when required by law. • Technology service providers operating under confidentiality and data protection agreements. We do not sell or market your personal information to third parties for marketing purposes.
5. Data subject rights
Under Colombian law, you have the right to: • Know, update, and rectify your personal data. • Request proof of the authorization granted. • Be informed about the use given to your data. • Revoke authorization and request deletion of your data, except when a legal or contractual duty prevents it. • Access your personal data free of charge. • File complaints with the Superintendence of Industry and Commerce (SIC) if you consider your rights violated.
6. Information security
We implement technical, administrative, and physical measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure. These include: encryption of data in transit and at rest, role-based access controls, continuous security monitoring, and periodic audits.
7. Data retention
We retain your personal data for as long as necessary to fulfill the described purposes and applicable legal obligations. For financial data, the minimum retention period is ten (10) years in accordance with tax and anti-money laundering regulations.
8. Contact
To exercise your rights or resolve inquiries about the processing of your personal data, you may contact our Data Protection Officer: • Email: privacidad@expressco-official.com • Address: Carrera 7 #71-21, Office 1005, Torre Davivienda, Bogotá D.C., Colombia • Phone: +57 601 743 2100