Privacy Policy and Personal Data Processing

Last updated: May 2026

1. Data Controller

Coloca Payments S.A.S.

Email: hello@colocapayments.com

2. Purpose of Data Processing

Personal data collected through this form will be used for:

  • Commercial contact and follow-up on interest in our services
  • Sending relevant information about Coloca Payments products and services
  • Event management and follow-up
  • Statistical analysis and improvement of our services

3. Data Collected

  • Identification data: full name
  • Contact data: corporate email, phone number, WhatsApp
  • Business data: company name, country of operation
  • Service preferences: services of interest, estimated monthly volume
  • Technical data: IP address, user agent (collected automatically)

4. Data Subject Rights

In accordance with Colombian Law 1581 of 2012 and Decree 1377 of 2013, you have the right to:

  • Access, update, and correct your personal data
  • Request proof of the authorization granted
  • Be informed about how your data is used
  • Revoke your authorization and/or request deletion of your data
  • Access your personal data free of charge

5. How to Exercise Your Rights

To exercise any of the rights mentioned above, please contact us at: hello@colocapayments.com

Please include your full name, identification document, description of the request, and contact details.

Response time: up to 10 business days (extendable by 5 additional business days).

6. Data Retention Period

Personal data will be retained until the data subject requests its deletion or revokes the authorization granted.

7. International Data Transfers

Your data may be processed on technology infrastructure located in the United States and/or the European Union (Google Cloud Platform, Brevo). These transfers are carried out with adequate protection guarantees in accordance with Colombian regulations.

8. Security Measures

We implement technical and organizational measures to protect your data, including encryption in transit and at rest, access control, and continuous monitoring.

9. Effective Date

This policy is effective from its publication date and remains in effect until modified or updated.