Your information. Your rights.

We use your inquiry to understand your request, assess whether we can help, respond, and coordinate the next steps you request. We also retain evidence of your authorization, protect the form against abuse, and meet applicable legal obligations. Sending an inquiry does not subscribe you to marketing or authorize advertising profiles.

This policy covers this corporate website. Zendi accounts, saved properties, verification documents and other platform services require their own notices and appropriate authorizations.

The contact form asks for your name, email address, telephone number with country code, topic and message. These fields are required to send an online inquiry; the telephone number lets us follow up about your request. We record the authorization wording, policy version, language and submission reference with your inquiry.

Please do not send identity documents, bank details, health information, biometric data or other sensitive information through this form. It is intended for adults and does not request children’s information. If you include another person’s information, you must be authorized to share it.

The unchecked form checkbox requests your prior authorization for the stated inquiry purposes. You can read this policy before choosing. We do not use silence or simply browsing this website as authorization for identifiable analytics, session replay or marketing. Any future optional profiling or marketing purpose will require a separate choice.

Our hosting and security providers process technical connection information, including IP addresses, to deliver the website and protect it from abuse. Cloudflare Turnstile verifies form submissions. We do not include your IP address or browser history in inquiry emails. We remember an explicit language choice in browser storage and a language-preference cookie.

Optional analytics remain off until you affirmatively authorize them through “Got it” in the analytics notice. Browsing, scrolling or leaving the notice open does not authorize analytics. The privacy policy is available before any choice. Where enabled, analytics cookies, browser identifiers, page visits, campaign parameters, referring sites and interactions help us understand website use, improve usability and resolve problems. Browser identifiers are pseudonymous: the absence of a name does not make a linkable activity history anonymous.

We use Google Analytics 4 after your authorization to measure visits, referring sites, campaign sources and website interactions. It uses cookies and browser identifiers; Google may process this information outside Colombia, including in the United States. Our website disables Google Signals and advertising-personalization signals, denies advertising storage and advertising use of data, and sets analytics cookies to expire after 12 months (365 days) without automatic renewal. Fullstory and HubSpot tracking and session recording are not enabled. We do not send your contact-form responses to Google Analytics or use its User-ID feature to associate visits with your identity. Inquiry authorization alone does not authorize associating browsing history with your contact details; that would require a separate, informed choice before the association.

Google Analytics is configured to retain user-level and event-level data covered by its retention setting for 14 months. This setting does not apply to standard aggregated reports. If Google Analytics is set to reset user data retention on new activity, the retention period for a user identifier starts again with each new activity. This is separate from the lifetime of cookies and your saved authorization.

Analytics authorization is remembered for up to 12 months (365 days), or until the configuration or policy changes. We retain a record containing an opaque receipt reference, the choice’s time, language, notice wording and policy version. The proposed evidence-retention period is one year. The receipt does not contain your inquiry details, IP address or browsing history. You can withdraw authorization using “Analytics preferences” in the footer; this stops further capture in this browser and opens this policy. To request deletion of data already collected or exercise rights across devices, contact [email protected]. Clearing browser storage removes the local choice but does not itself delete earlier provider records.

Cloudflare provides hosting and form protection; the planned email delivery provider is Resend. Our business email provider also processes messages delivered to our inbox. Authorized staff and contracted providers may access information only as needed for the described purposes, subject to appropriate confidentiality and security terms.

Providers may process information outside Colombia. Before using them, we must establish the applicable processing agreements and, where relevant, the legal conditions for international transfers. We do not sell inquiry data. We may disclose information when required by law or a competent authority.

Our proposed retention period for inquiries that do not become a client relationship is 12 months after the last meaningful contact. We then delete or irreversibly anonymize them, unless a documented legal obligation or dispute requires longer retention. Client records follow the periods applicable to that relationship. Authorization records are retained while the related processing and obligations continue.

Access is limited to authorized people. We use encrypted connections, protected service credentials and controls against form abuse. Do not send confidential documents by this form. No Internet service can promise absolute security.

You may ask to know, access, update or correct your information, obtain evidence of your authorization, and understand its use. You may request deletion or withdraw authorization, subject to obligations that require continued retention. You may complain to the Superintendencia de Industria y Comercio after first following the applicable inquiry or complaint procedure with us.

Email [email protected] or write to our mailing address above, for the attention of Mark Sullivan. Identify yourself, describe your request, and give us a reply address. We may ask for proportionate information to verify your identity or authority to act for someone else. Do not send identity-document copies unless a secure channel has been arranged.

We respond to data-access consultations within 10 business days; an explained extension may add up to 5 business days. Complaints are addressed within 15 business days after receipt, with an explained extension of up to 8 business days. For an incomplete complaint, we request missing information within 5 days; after two months without it, the complaint may be treated as withdrawn. We will communicate delays and the expected response date.

We publish the effective date and version on this page and make material changes available through this website. If a change adds a purpose requiring a new authorization, we will request it before using your information for that purpose. The Spanish and English versions describe the same practices. Contact us if you notice a discrepancy.