Personal data processing
and protection policy

The purpose of this policy is to establish the guidelines for the processing of personal data collected, stored, used, circulated, and deleted by Cor-e Consulting Services, in compliance with Law 1581 of 2012, Decree 1377 of 2013, and other complementary regulations.

Personal data will be processed for:

Contact form. When you send us a message through our website, we process the first and last name, work email address, company, job title, telephone number (optional), area of interest and the content of the message that you provide. Providing this information is voluntary; without it we cannot reply to your request.

Technical anti-abuse data. To limit abusive or automated use of the contact form, we temporarily process the IP address from which the request is made. This information is held in memory only, is not stored in a database and is not used to identify or profile visitors.

Client portal. If you hold an account in our client portal, we process your access credentials, contact details, the company you are associated with, and the invoicing information and documents linked to that company. Access is restricted to the company each user belongs to.

Data subjects may:

Sensitive data or data from minors will only be collected with express authorization and when necessary to comply with legal or contractual obligations.

Cor-e Consulting Services implements technical, human, and administrative measures to protect personal data against unauthorized access, loss, alteration, or misuse.

Service providers. We use third-party service providers that process personal data on our behalf and under our instructions:

• Email delivery. Messages sent through our contact form are delivered using Brevo (Sendinblue SAS), an email service provider based in the European Union. Brevo processes the contents of your message solely to deliver it to us and to send you the acknowledgement of receipt.
• Hosting. Our website is hosted on Vercel Inc. infrastructure, located in the United States.

International transfers. Because these providers operate outside Colombia, sending a message through this website involves an international transfer of your personal data, which you authorise when you accept this policy at the point of submission. We only work with providers that offer adequate levels of protection, as required by Article 26 of Law 1581 of 2012.

This website uses only strictly necessary cookies. We do not use analytics, advertising or tracking cookies, and we do not share cookie data with third parties.

• token — keeps you signed in to the client portal. It is set only after you log in, marked httpOnly so it cannot be read by scripts, and removed when you log out.
• flash_error / flash_success — display a one-off status message. They expire after five seconds.

Because all of these cookies are strictly necessary for the site to work, they do not require prior consent under Colombian law. You can delete them at any time from your browser settings; doing so will sign you out of the client portal.

Data subjects may exercise their rights by sending a written request to info@cor-econsulting.com or to the company’s physical address. The request must include:

This policy is effective as of June 10, 2025, and may be modified. Updates will be posted on the company’s website.