Skip to content
Legal

Personal data policy

Version 1.0 · In force since 10 August 2026

This is a courtesy translation. The binding version of this policy is the Spanish one, which governs our relationship with you and prevails in case of any discrepancy. You can read it at Política de tratamiento de datos personales.

This policy explains what personal data we collect, what we use it for, who we share it with, how long we keep it and how you can control it. It is written under Colombian Law 1581 of 2012, Decree 1074 of 2015 and the other Colombian rules on personal data protection.

1. Who is responsible

The data controller is Daniel Urrego, a natural person carrying out property brokerage and management activities under the trade name Urrego Real Estate.

Any request, query or complaint about your personal data must be sent to that email address. It is the only official channel for these matters and it is attended directly by the controller.

2. What we collect and through which channel

We do not collect data we do not need. These are all the cases in which you give us personal information:

2.1. Contact form on the website

Your name, one contact detail of your choice (phone or email) and the message you write. If you write from a property page, we record which one it was.

2.2. WhatsApp, phone call or email

Whatever you choose to share in that conversation, including your phone number or email address.

2.3. Contractual relationship

When you become an owner, tenant, guarantor or supplier, we collect the data needed to enter into and perform the contract: full name, identity document, address, phone, email, employment or income information where the tenancy assessment requires it, bank details for paying rent or statements, and information about the property.

2.4. What we do not collect

We do not ask for sensitive data — data on racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life or biometric data. If you include such data in a message on your own initiative, we will not use it for any purpose and we will delete it.

Our services are not aimed at minors and we do not knowingly collect their data. Where a minor appears in a contract represented by their parents or guardians, their data is processed only for that purpose and with the authorisation of their representative.

3. What we use your data for

We use your personal data solely for the following purposes:

  1. To answer the request, question or complaint you sent us.
  2. To offer you properties matching what you were looking for, and to let you know when one comes up that fits your interest.
  3. To enter into, perform and settle the tenancy, management, brokerage or sale contracts to which you are a party.
  4. To carry out the tenancy assessment and verify the information provided, where this is necessary to enter into the contract.
  5. To make and receive payments, issue receipts and keep the accounts of the business.
  6. To comply with legal, accounting, tax and record-keeping obligations.
  7. To send you information about our services. You may ask us to stop at any time and we will stop immediately, without this affecting the handling of your request or the performance of your contract.

We do not sell your data, we do not rent it and we do not pass it to third parties for commercial purposes.

4. Your rights

As the owner of your personal data, you have the right to:

  1. Know what data of yours we hold, free of charge and as often as you need, subject only to the limit the law sets for manifestly repetitive requests.
  2. Update and correct data that is incomplete, inaccurate or out of date.
  3. Request deletion of your data where you consider it is not being processed in accordance with the law, or withdraw the authorisation you gave us.
  4. Request proof of the authorisation you granted, except where the law does not require it.
  5. Be informed, on request, about how we have used your data.
  6. File complaints with the Superintendence of Industry and Commerce for breaches of the law.

There is one important and honest limit: if you are party to a contract in force with us, or if there is a legal or contractual duty to keep certain information, deletion does not apply to that data while the obligation lasts. In that case we will explain it clearly and tell you when we will be able to delete it.

5. How to exercise your rights

Write to contacto@urregorealestate.com stating your name, something that identifies you, what you are asking for and an address for our reply. You do not need a lawyer or any special format.

The law requires this procedure to be exhausted with us before going to the Superintendence of Industry and Commerce. We would rather solve it directly and as quickly as possible.

6. Who else processes your data

To operate we rely on technology providers. They act as data processors: they may only use the data to provide the service to us, not for their own purposes.

We may also share information with the authorities where a rule or a court order requires it, and with insurers or rent guarantee companies where the tenancy contract requires it and you have authorised it.

7. International transfer

As follows from the previous point, your data is stored and processed outside Colombia, mainly in the United States and Brazil. Article 26 of Law 1581 of 2012 allows such a transfer where the data owner expressly authorises it.

For that reason, by ticking the authorisation box on the form or by accepting this policy, you expressly authorise your data to be transferred to and processed in those countries by the providers listed above, for the purposes described in point 3 and under contractual confidentiality and security obligations.

8. How long we keep it

9. How we protect it

We apply reasonable technical and administrative measures: the website travels encrypted, access to the database is restricted by credentials known only to the controller, contractual information is managed in our own system with access control and an audit trail, and the public website database is physically separate from the business one, so that the information of our clients cannot be reached from the internet.

No system is infallible. Should an incident affecting your data occur, we will inform you and report it to the authority as the law requires.

10. Changes to this policy

We may update this policy. Where the change is substantial — a new purpose, or a new provider in another country — we will inform you through the contact details we hold and, where the law requires it, we will ask for a new authorisation. The date of the version in force always appears at the top of this document.

11. Term

This policy is in force from 10 August 2026. Databases will be kept for the periods set out in point 8 and, in any case, for as long as the purpose that justified their collection or a legal duty to keep them subsists.

If anything here is unclear, write to contacto@urregorealestate.com and we will explain it in plain words. We would rather you understood it than simply accepted it.

CONTACT
EscríbenosES