Law 1581 of 2012

Personal data processing policy

Updated October 30, 2026. It explains who receives the data you provide to us, what we use it for, and how you can access it, correct it, or request its deletion. This English version is provided for convenience; in case of discrepancy, the Spanish version prevails.

What data we collect

• The data you enter in our forms or send us on WhatsApp: name, mobile number, the department where the ranch is located, approximate hectares, land use, whether it would be sold with cattle, the time you prefer us to call you, and, if you are looking for a ranch, the type, region, size, budget, and your profile (cattle rancher, investor, or parcel buyer).
• What you tell us in conversation about the ranch you want to sell or buy.
• In the private portfolio: account email, user identifier, authorized ranches, and records of sessions and access changes. Your password is verified through Supabase Auth; it is not stored in permission records.

We do not request sensitive data or data about minors. The forms do not ask for the rural district or municipality of your ranch: those details are discussed by phone. These pages do not use advertising or tracking cookies.

The private portfolio uses necessary cookies to sign in, renew access, and protect permission changes. A portal session lasts up to 12 hours and can end earlier when you sign out or an administrator revokes access.

What we use it for

• Contact you to respond to your request to sell or buy a ranch.
• Coordinate visits, send you information on ranches, and follow up on the transaction.
• Send you information on new ranches, only if you requested it.
• Verify your account and let you view only the ranches we authorize for you, as well as protect and record access changes.

We do not sell your data. To operate the private portfolio, we use Supabase Auth to verify credentials and Cloudflare to run the portal and store permissions, sessions, and private material. These providers process the data needed to deliver those services. Supabase is configured in a United States region. Data may also be disclosed to an authority that requests it in accordance with the law or, with your authorization, to the attorney or notary involved in your transaction.

Your rights

• View, update, and correct your data.
• Request proof of the authorization you gave us.
• Know how we have used your data.
• Revoke your authorization and request that we delete your data, where there is no legal or contractual obligation to retain it.
• Access your data free of charge.
• File complaints with the Superintendence of Industry and Commerce, after first submitting your inquiry or claim to us.

How to exercise your rights

Message us on WhatsApp at +57 300 490 3639 with your name, your request, and how you would like us to respond.

• Inquiries: we respond within 10 business days at most. If we cannot meet that deadline, we will inform you of the reason and respond within the following 5 business days.
• Claims (correction, update, deletion, or revocation): we respond within 15 business days at most. If we cannot meet that deadline, we will inform you of the reason and respond within the following 8 business days.

How long we keep your data

For as long as the business relationship lasts and for the period required by accounting and tax regulations. If you requested notices of new ranches, until you ask us to stop messaging you. After that, it is deleted.

Changes to this policy

If anything significant changes, such as the data controller once Hierro & Tierra is incorporated as a company, we will update this page and its effective date.