Privacy policy

1. Data we collect

• Identification and contact data: name, email address, telephone number, country of residence, preferred language.
• Enquiry data: the properties you asked about, budget range, intended use, timeline, and the content of your messages to us.
• Technical data: IP address, browser and device type, referring page and pages viewed. Analytics data is collected only after you consent.
• Transaction data, where a purchase proceeds: the identity and documentation required by the notary, the developer and applicable anti-money-laundering rules.

2. Purposes of processing

• Answering your enquiry and sending you property information you requested.
• Coordinating viewings, video tours, reservations, legal review, notary and registration steps.
• Sending market updates and new listings, only where you have opted in.
• Measuring how the site is used, only where you have accepted analytics cookies.
• Meeting legal, tax, accounting and anti-money-laundering obligations in Colombia.

3. Legal basis

Under Colombian law, processing is based on your prior, express and informed authorization (Law 1581 of 2012, article 9), except where a legal duty or a court order applies.

Under the GDPR, we rely on: your consent (article 6.1.a) for marketing and analytics; the performance of a contract or steps taken at your request (article 6.1.b) for handling your enquiry and any purchase; our legitimate interest (article 6.1.f) in operating and securing the site; and legal obligation (article 6.1.c) for record-keeping and anti-money-laundering duties.

4. Who we share data with

We share only what is necessary, and only with: the developer or partner firm holding the property you enquired about; lawyers, notaries and translators involved in your transaction; and technical providers who host the site, send our email and, where consented, measure traffic.

We do not sell personal data and we do not share it with data brokers.

5. International transfers

Our hosting, email and analytics providers process data outside Colombia, including in the United States and the European Union. Where data leaves Colombia we rely on your authorization or on the standards required by article 26 of Law 1581 of 2012. Where personal data of EEA or UK residents leaves that area, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Your rights as a data subject

Under Law 1581 of 2012 you have the right to: know what data we hold about you and how it is used; update it; rectify it when it is incomplete, partial, misleading or inaccurate; revoke the authorization you gave us; request deletion when processing is not required by a legal or contractual duty; access it free of charge at least once each calendar month; and file a complaint with the Superintendencia de Industria y Comercio once you have exhausted our internal channel.

If the GDPR applies to you, you additionally have the rights of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest or direct marketing, and the right not to be subject to solely automated decisions. You may complain to your national supervisory authority.

7. How to exercise them

Write to info@avelestates.com from the email address you gave us, stating your name, what you are asking for, and the facts that support the request. We may ask for proof of identity. Consultations are answered within ten (10) business days and complaints within fifteen (15) business days; where we cannot meet the term we tell you why and give a new date, as Law 1581 requires.

Withdrawing consent does not affect processing carried out before the withdrawal, nor processing we are legally required to continue.

8. Retention period

• Enquiries that do not lead to a transaction: 24 months from your last contact with us, then deleted.
• Marketing consent records and the mailing list: until you unsubscribe or revoke your authorization, plus 12 months to evidence that the consent existed.
• Transaction and accounting records: 10 years, the term required by Colombian commercial and tax law.
• Cookie consent records: 12 months, matching the life of the consent cookie.

9. Security

Access to personal data is restricted to the people who need it to do the work described above. Data is transmitted over TLS and stored with providers that offer encryption at rest. No system is perfect; if a breach affects your data and creates a risk to you, we notify you and the competent authority within the terms the law sets.

10. Children

The site is not directed at children. We do not knowingly process the personal data of minors, other than data provided by a parent in the context of a family purchase, which is handled in the child's best interest under article 7 of Law 1581 of 2012.

11. Changes

If we change this policy we publish the new version here with a new date, and where the change is material we tell you by email before it takes effect.