Privacy Policy

1. Who we are

Colombia Bound (“we”, “us”) operates colombiabound.com and helps foreigners buy property and access services in Medellín, Colombia. The data controller is [LEGAL ENTITY NAME], [COLOMBIAN TAX ID / NIT], registered at [REGISTERED ADDRESS, MEDELLÍN, COLOMBIA].

For any privacy question or request, contact us at [privacy@colombiabound.com] or hello@colombiabound.com.

2. Information we collect

We collect:

• Information you give us — your name, email, phone/WhatsApp number, and the details you submit in our forms (e.g. budget, timeline, how you plan to fund a purchase, your location, and any message).
• Information collected automatically — IP address, device and browser type, pages viewed, referring URLs, and similar usage data through hosting logs and cookieless analytics.
• Google Maps content — when a page displays a live Google Maps photo or you follow a Google Maps source link, Google may receive your IP address, browser information, and the requested content URL under the Google Privacy Policy (https://policies.google.com/privacy).
• Communications — messages you send us by form, email, WhatsApp, or SMS.

3. How we use your information

• To respond to your inquiry and provide buyer’s-agent and concierge services.
• To connect you, with your consent, to vetted partners such as lawyers and lending partners.
• To send you updates, offers, and marketing you can opt out of at any time.
• To operate, secure, and improve our website.
• To understand aggregate site traffic and improve the pages people use.
• To comply with legal obligations and enforce our terms.

4. Legal bases (EEA/UK visitors)

Where the GDPR/UK GDPR applies, we process personal data on these bases: your consent; performance of a contract or steps you request; our legitimate interests in operating and growing our business; and compliance with legal obligations. You may withdraw consent at any time.

5. Functional storage and analytics

We do not run advertising tags or set analytics cookies. Google Analytics 4 operates with analytics and advertising storage denied, Google Signals disabled, and advertising personalization disabled. It provides aggregate cookieless traffic measurement.

For the functional currency display, our hosting layer derives only a coarse country code from the network request and stores a one-year suggestion cookie: COP for Latin America and the Caribbean, and USD elsewhere or when the country is unknown. This is not precise location data, is not used for advertising, and does not track your movements.

If you choose a currency, that explicit choice overrides the country-derived suggestion. We store the override in a client-readable functional cookie and in this browser’s local storage (cb.prefs) so it persists across visits. You can change it with the site’s currency control or remove it by clearing site data.

6. How we share information

We do not sell your personal data. We share it only with:

• Service providers who run our operations — hosting and database (Supabase), CRM and lead routing (Routeless), email delivery, cookieless aggregate analytics, and attributed business media and ratings (Google Maps Platform).
• Partners and lenders, only when you ask us to connect you.
• Authorities or third parties when required by law or to protect rights and safety.

7. International transfers

Your data may be processed in Colombia, the United States, and other countries where our providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

8. Data retention

We keep personal data for as long as needed to provide our services, follow up on your inquiry, comply with legal obligations, and resolve disputes. When no longer needed, we delete or anonymize it.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your data; to object to or restrict processing; and to withdraw consent. EEA/UK residents may lodge a complaint with their data protection authority.

Colombian residents have specific rights under Law 1581 of 2012 (Habeas Data) — see our Habeas Data policy.

California residents may request to know, delete, or correct their personal information and to opt out of “sale”/“sharing”. We do not sell personal information.

10. How to exercise your rights

Email [privacy@colombiabound.com] with your request. We will verify your identity and respond within the timeframes required by applicable law.

11. Children

Our services are for adults (18+). We do not knowingly collect data from children.

12. Security

We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure, but we work to safeguard it.

13. Changes to this policy

We may update this policy. We will post the new version here and update the “last updated” date above.

14. Contact

Questions? Email [privacy@colombiabound.com] or hello@colombiabound.com, or write to [REGISTERED ADDRESS, MEDELLÍN, COLOMBIA].