Privacy and personal data policy

Effective: November 4, 2026

This is a translation for convenience. If there is any difference, the Spanish version prevails.

1. Data controller

Vértice Collective S.A.S., tax ID (NIT) 902.073.176-2, domiciled in Bogotá D.C., Colombia, address Carrera 73 No. 163-64, Torre 5, Oficina 203, email contacto@verticecollective.co, phone +57 312 521 4592.

The company's management handles questions and complaints about personal data, through contacto@verticecollective.co.

2. Legal framework

This policy is adopted under article 15 of the Colombian Constitution, Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and any rules that amend or complement them.

3. What data we collect and where

• Contact form on this site: name, company (optional), email and, if you wish, a description of your project.
• Call scheduling (Microsoft Bookings): the details the scheduling page asks for to set up the call, such as name, email, company and what you need.
• Record of your consent: the date and time you accepted, the text you accepted, the version of the documents in force and the page you accepted from.

We only ask for what we need to reply to you. We do not request sensitive data or data about children or adolescents; please do not include it in your message.

4. What we use it for

• Replying to your enquiry, scheduling the call and preparing proposals or quotes.
• Managing any business or contractual relationship that follows, including invoicing.
• Keeping proof of your consent, as the law requires.
• Meeting legal, accounting and tax obligations.

We do not sell your data or use it to send you advertising.

5. Your consent

We process your data with your prior, express and informed consent, which you give by ticking the corresponding box on the form or the scheduling page. That box is separate from accepting the Terms and conditions and is never pre-ticked. You may withdraw your consent at any time by writing to contacto@verticecollective.co, except where we must keep the data because of a legal or contractual duty.

6. Your rights

As the data subject you have the right to:

• Know, update and correct your data.
• Request proof of the consent you gave.
• Be told how your data has been used.
• File complaints with the Superintendence of Industry and Commerce (SIC), after first raising your request or complaint with us.
• Withdraw your consent and ask us to delete your data when there is no legal or contractual duty to keep it.
• Access your data free of charge.

7. Requests and complaints

Write to contacto@verticecollective.co with your name, your request and how we should reply.

Requests are answered within ten (10) business days, extendable by five (5) more. Complaints are handled within fifteen (15) business days, extendable by eight (8) more. If your complaint is incomplete, we will ask for what is missing within five (5) business days. We will always tell you the reason for any extension.

8. Providers that help us (processors)

We use technology providers that process data on our behalf and only to provide their service to us:

• Vercel: website hosting.
• Web3Forms: delivering the contact form to our email.
• Microsoft 365: email and call scheduling (Microsoft Bookings).

These providers may store information on servers outside Colombia, for example in the United States. By giving your consent you also authorize this international transfer for the purposes described.

9. Security and retention

We take reasonable measures to protect your data against unauthorized access, loss or alteration. We keep your data while it is needed for the purposes described or while a legal or contractual obligation requires it. The record of your consent is kept while we process your data and for as long as it may be needed as evidence.

10. Cookies

This site does not use tracking or advertising cookies. Details are in our Cookie policy.

11. Term and changes

This policy applies from the date shown above. The database will remain in force while Vértice Collective S.A.S. carries out its corporate purpose and there are purposes that justify the processing. Any substantial change will be published on this page with its effective date and, if the purpose changes, we will ask for your consent again.