EXODO LATAM — Soluciones digitales para organizaciones

Personal Data Processing and Protection Policy

EXODO LATAM describes how it collects, uses, stores and protects the personal data of those who interact with its services, in compliance with the applicable regulations in Colombia and the countries where it operates.

At EXODO LATAM, personal data processing is carried out under the principles of legality, purpose, freedom, accuracy, transparency, restricted access, security and confidentiality. This policy applies to customers, prospects, suppliers, partners, employees and visitors of our digital channels.

1. Identification of the data controller

  • Legal name: EXODO LATAM [pending legal validation]
  • Tax ID: [pending legal validation]
  • Registered office: [pending legal validation — Colombia]
  • Email: contacto@exodolatam.com
  • Direct channel: WhatsApp +57 316 4448826
  • Operating coverage: Colombia and Latin America.

2. Scope of the policy

This policy applies to all personal data collected by EXODO LATAM through any physical, electronic or digital means, including web forms, emails, calls, instant messaging, events, commercial proposals and technology platforms operated by the company or by its authorized partners.

It covers all collection, storage, use, circulation, transfer, transmission, deletion and any other operation that constitutes processing of personal data.

3. Key definitions

  • Personal data: any information linked or associable to an identified or identifiable natural person.
  • Sensitive data: data that affects the data subject's privacy or whose misuse may lead to discrimination.
  • Data subject: the natural person to whom the data refers.
  • Controller: EXODO LATAM, who decides on the database and its processing.
  • Processor: any natural or legal person processing data on behalf of the controller.
  • Authorization: the data subject's prior, express and informed consent for processing.
  • Database: an organized set of personal data subject to processing.

4. Principles for personal data processing

  • Legality: processing complies with applicable law.
  • Purpose: data is collected for legitimate, previously disclosed purposes.
  • Freedom: data is processed only with prior authorization or legal mandate.
  • Accuracy and quality: information must be truthful, complete, up to date and verifiable.
  • Transparency: data subjects have the right to know what data concerns them.
  • Restricted access and circulation: processing is performed only by authorized personnel.
  • Security: technical, human and administrative measures are applied to protect the data.
  • Confidentiality: everyone involved in processing must keep the data confidential.

5. Purposes of the processing

EXODO LATAM processes personal data for the following purposes:

  • Respond to information requests, quotes and commercial proposals.
  • Manage contractual relationships with clients, suppliers and partners.
  • Provide automation, software development, integration, portal, applied AI and technology consulting services.
  • Communicate news, content, case stories, event invitations and institutional newsletters when consented.
  • Comply with legal, accounting, tax and regulatory obligations.
  • Perform statistical analysis, process improvement and quality control.
  • Manage recruitment, hiring and HR administration when applicable.
  • Share information with processors that support operations under confidentiality agreements.

6. Data subject rights

Data subjects have the right to:

  • Know, update and correct their data held by EXODO LATAM as controller.
  • Request proof of the authorization granted.
  • Be informed about how their personal data has been used.
  • File complaints before the competent data protection authority for breaches of applicable regulations.
  • Revoke authorization and/or request deletion when no legal or contractual duty requires data retention.
  • Access their personal data subject to processing free of charge.

7. Procedure for queries, claims and updates

Any request related to data processing can be submitted through the following channels:

The request must include: identification of the data subject, a clear description of the facts, notification address and supporting documents. Response timeframes follow the applicable regulations. [Formal mechanism and detailed timelines pending legal validation]

8. Security and confidentiality measures

EXODO LATAM implements reasonable technical, administrative and organizational controls to protect personal data from loss, alteration, unauthorized access, consultation or fraudulent use. These controls include role-based access management, encryption in transit, backups, infrastructure monitoring, internal security policies and confidentiality agreements with employees and third parties.

9. Data transfer and transmission

Personal data may be transferred or transmitted to technology partners, cloud infrastructure providers, communication tools, analytics systems and support platforms that support the operation of EXODO LATAM across Colombia and Latin America.

When these third parties are located in countries with a different level of protection than the one required by applicable regulations, EXODO LATAM will adopt the contractual and technical safeguards required to ensure proper processing.

10. Validity and policy updates

This policy takes effect on its publication date and will remain in force until modified. EXODO LATAM may update it at any time to adapt to regulatory, operational or technological changes. Updates will be published on this same website.

Last updated: [pending legal validation]

11. Contact information for requests

EXODO LATAM operates across Colombia and Latin America
Made in Colombia · built for Latin America

We understand your reality because it's ours

We work with organizations across Colombia and Latin America that need real technology solutions, adapted to their market, with close support and in their language.