Data

1. Identification of the Data Controller

ESTRUCTURE DIGITAL AGENCY, identified by Tax Identification Number (NIT) 1015458512-1, hereinafter ESTRUCTURE, a company domiciled in Bogotá, Colombia, is responsible for the processing of personal data collected through the website estructuredigital.com and through the company’s other contact channels.

• Contact email: estructureagency@gmail.com

• Telephone: 3212011844

2. Legal Framework

This policy is issued in compliance with Article 15 of the Political Constitution of Colombia, Law 1581 of 2012, Decree 1074 of 2015 (which incorporated Decree 1377 of 2013), and other applicable regulations concerning personal data protection and habeas data.

3. Definitions

• Data Subject: The natural person whose personal data is subject to processing.

• Personal Data: Any information related to or that can be associated with an identified or identifiable natural person.

• Sensitive Data: Data that affects the privacy of the Data Subject or whose improper use may result in discrimination.

• Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.

• Data Controller: The party that determines the purpose and means of processing personal data; in this case, ESTRUCTURE.

• Data Processor: The party that processes personal data on behalf of the Data Controller.

• Authorization: The Data Subject’s prior, express, and informed consent to the processing of their personal data.

4. Data We Collect

Depending on your relationship with ESTRUCTURE, we may collect the following information:

ESTRUCTURE does not deliberately collect sensitive data. If such data becomes necessary in any particular case, we will request your explicit authorization and inform you that you are not required to provide it. We also do not knowingly collect data from minors. If we become aware that we have received a minor’s personal data without authorization from their legal representatives, we will proceed to delete it.

5. Purposes of Data Processing

Your personal data will be processed for the following purposes:

• Responding to requests for information, quotations, and commercial inquiries.

• Providing contracted digital marketing, advertising, and consulting services.

• Managing the contractual relationship, invoicing, and collection of outstanding payments.

• Sending commercial communications, newsletters, and agency content when authorized by the Data Subject.

• Measuring website and advertising campaign performance and improving the browsing experience.

• Managing recruitment and personnel selection processes.

• Complying with legal, accounting, and tax obligations and responding to requests from competent authorities.

6. Data Subject Authorization

Authorization for the processing of your personal data is obtained through your express acceptance of this policy when completing any of our forms, subscribing to our communications, or entering into a contractual relationship with ESTRUCTURE. We retain evidence of such authorization in accordance with applicable legal requirements.

7. Data Subject Rights

As a Data Subject, you have the right to:

• Know, update, and correct your personal data.

• Request proof of the authorization granted.

• Be informed about how your personal data has been used.

• File complaints with the Superintendence of Industry and Commerce for violations of applicable data protection laws.

• Revoke your authorization and request the deletion of your personal data when there is no legal or contractual obligation preventing such deletion.

• Access, free of charge, the personal data that has been processed.

8. Procedure for Inquiries and Complaints

You may exercise your rights by writing to estructureagency@gmail.com with the subject line “Personal Data Protection”, stating your full name, identification document number, specific request, and preferred method of response.

Inquiries

Inquiries will be addressed within a maximum period of ten (10) business days from the date they are received. When it is not possible to respond within this period, we will inform you of the reasons and the expected response date, which in no event may exceed five (5) additional business days following the expiration of the initial period.

Complaints

Complaints will be addressed within a maximum period of fifteen (15) business days from the day following their receipt. If the complaint is incomplete, we will request that you provide the missing information within five (5) days. If two (2) months pass without receiving a response from you, the complaint will be deemed withdrawn.

When it is not possible to address the complaint within the indicated period, we will inform you of the reasons and the new response date, which may not exceed eight (8) additional business days following the expiration of the initial period.

9. Cookies and Tracking Technologies

Our website uses first-party and third-party cookies to remember your preferences, analyze browsing behavior, and measure the effectiveness of our advertising campaigns. Among others, we use tools from Google, including Google Analytics and Google Ads, and from Meta, including the Facebook and Instagram Pixel.

You may configure your browser to block or delete cookies. Please note that disabling cookies may affect the functionality of certain sections of the website.

10. Use of Google APIs

ESTRUCTURE uses Google APIs — including the Google Ads API — exclusively to access, with express authorization, its own advertising accounts and those of clients who have engaged our services, for the purpose of generating performance reports, analyzing metrics, and optimizing campaigns.

ESTRUCTURE’s use of information received through Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• The data obtained is used solely to provide and improve the user-facing functionalities for which the user has authorized access.

• We do not transfer or sell such data to third parties, except when necessary to provide the service, required by law, or expressly authorized by the Data Subject.

• We do not use such data for advertising targeted at third parties, nor do we provide it to data brokers.

• No person outside the authorized team accesses or reads this data, except with express consent, for security reasons, or when required by law.

You may revoke the access granted at any time through your Google Account permissions page.

11. Data Processors and International Data Transfers

To operate its business, ESTRUCTURE relies on technology providers that may store information on servers located outside Colombia, including Google LLC, Meta Platforms Inc., and web hosting and email service providers. By accepting this policy, you authorize the international transfer and transmission of your personal data to such providers, who are contractually required to maintain security and confidentiality standards equivalent to those described herein.

12. Security Measures

We adopt reasonable technical, human, and administrative measures to protect your personal data against unauthorized access, loss, alteration, or fraudulent use. Access to information is restricted to personnel who require it to perform their duties and is subject to confidentiality obligations.

13. Data Retention Period

Your personal data will be retained for as long as the commercial relationship remains in effect or for as long as the purpose for which it was collected continues to exist. Thereafter, it will be retained for the periods required under applicable legal, accounting, and tax obligations. Once these periods have expired, the data will be securely deleted.

14. Amendments

ESTRUCTURE may modify this policy at any time. Material changes will be communicated through this website at least ten (10) business days before they become effective.