Privacy Policy and Personal Data Processing

1. Legal Framework

This Privacy Policy is governed by Law 1581 of 2012 (Colombia's Personal Data Protection Law), Decree 1377 of 2013 and other related regulations. By providing your personal data through our website, forms or communication channels, you expressly authorize its processing as set out herein.

2. Personal Data We Collect

CoVisas collects only the data needed to provide its advisory and medical assistance plan quotation services:

• Identification data: first name, last name, date of birth, nationality.
• Contact data: phone number, email, country of residence.
• Health data (where applicable): pre-existing conditions relevant to the quotation, only with your explicit consent.
• Browsing data: IP address, browser type, pages visited (through analytics cookies; see the Cookie Policy).
• Transaction data: information related to purchasing the medical assistance plan.

3. Purposes of Processing

Your personal data will be used exclusively to:

• Prepare personalized quotations for medical assistance plans for visas in Colombia.
• Manage the purchase and administration of the plans acquired.
• Send relevant information about your current plan, renewals and regulatory changes.
• Comply with legal obligations before insurers, immigration authorities or Colombian regulatory entities.
• Send CoVisas marketing communications (you may unsubscribe at any time).
• Improve our services through anonymous statistical analysis.

4. Legal Basis for Processing

• Consent: given when you complete our forms or contact us.
• Performance of a contract: necessary to provide the contracted service.
• Legal compliance: obligations before the Superintendence of Industry and Commerce (SIC) and other Colombian authorities.
• Legitimate interest: improving services and preventing fraud.

5. Data Transfer and Sharing

CoVisas may share your data only with:

• Assistance companies, providers and operators: business partners needed to carry out the contracted plan.
• Immigration or consular authorities: when Colombian regulations require it (e.g., Cancillería, Migración Colombia).
• Technology providers: form and CRM platforms, under confidentiality agreements.

We do not sell, rent or transfer your personal data to third parties for their own commercial purposes.

6. Rights of the Data Subject

Under Law 1581 of 2012, you have the right to:

• Know the data we hold about you and how it is processed.
• Update and correct inaccurate or incomplete data.
• Delete your data when there is no legal obligation to keep it.
• Revoke the consent given at any time.
• Access your personal data free of charge.
• File complaints with the Superintendence of Industry and Commerce (SIC).

To exercise your rights, contact: pachoviloriainsurances@gmail.com. We will respond within a maximum of 10 business days.

7. Data Retention

Your data will be kept for the duration of the business relationship and for the periods required by Colombian law (at least 5 years for accounting and contractual records). After that period, we will delete it securely.

8. Information Security

We implement technical and organizational measures to protect your data: SSL/TLS encryption in transit, access restricted to authorized personnel, and periodic security reviews. However, no system is 100% infallible; in the event of an incident, we will notify you under the applicable legal terms.

9. Minors

Our services are not directed at people under 18. We do not knowingly collect data from minors. If you detect that a minor has provided data without authorization, contact us so we can delete it immediately.

10. Changes

CoVisas reserves the right to update this policy. Changes will be published at covisascolombia.com/privacidad.html with the date of the update. Continued use of the site after publication implies acceptance of the changes.