Last updated: October 23, 2026.
At ALTUM Legal Partners we protect the information entrusted to us. This policy explains what personal data we collect, how we use it and how you can exercise your rights, in compliance with Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 (compiled in Single Decree 1074 of 2015) and any regulations that amend or supplement them.
1. Data controller
2. Definitions
- Data subject: the individual whose personal data is processed.
- Personal data: any information linked or that may be associated with an identified or identifiable individual.
- Sensitive data: data that affects the privacy of the data subject or whose misuse may lead to discrimination.
- Processing: any operation performed on personal data, such as collection, storage, use, circulation or deletion.
- Authorization: the prior, express and informed consent of the data subject to the processing of their data.
- Data processor: the person who processes personal data on behalf of the controller.
3. Data we collect
Through the website and our contact channels we may collect:
- Identification and contact data: name, company, position, email address and phone number.
- The information you include in your message about the matter you are consulting us on.
- Browsing data: IP address, browser type, pages visited and cookies, in aggregate form and for statistical purposes.
- In the course of providing our services: data of clients, their representatives, employees, counterparties and third parties that is necessary for the engagement.
4. Purposes of processing
Personal data will be processed in order to:
- Respond to requests, inquiries and messages sent through the contact form, email, phone or WhatsApp.
- Assess, quote and provide the legal services requested, including conflict-of-interest checks.
- Manage the contractual relationship, invoicing and the firm’s accounting, tax and legal obligations.
- Comply with anti-money laundering and counter-terrorist financing obligations where applicable.
- Send, only with your authorization, information about regulatory updates, publications and firm events. You may unsubscribe at any time.
- Produce website usage statistics to improve its content and performance.
- Respond to requests from competent judicial or administrative authorities.
5. Sensitive data and data of minors
You are not required to provide sensitive data. If processing such data is necessary to provide a service, we will request your express authorization and inform you of the specific purpose. We do not knowingly collect data from children or adolescents; where this is necessary, their best interests will be respected and the authorization of their legal representative will be obtained.
6. Rights of the data subject
As a data subject, you have the right to:
- Access, update and correct your personal data.
- Request proof of the authorization granted, except where the law does not require it.
- Be informed about how your data has been used.
- File complaints with the Colombian Superintendence of Industry and Commerce (SIC) for breaches of data protection law, after first contacting ALTUM.
- Revoke your authorization and request the deletion of your data where there is no legal or contractual duty to retain it.
- Access your personal data free of charge.
7. Authorization
By ticking the acceptance box on our forms, or by providing your data through any other channel, you give your prior, express and informed authorization for its processing in accordance with this policy. We will keep proof of that authorization.
8. Responsible area and contact channels
Inquiries, complaints and requests related to personal data are handled at dcastellanos@altumlegalpartners.com.co or in writing at Calle 66 No. 11-50, Office 306, Bogotá D.C., Colombia. Requests must include the name of the data subject, their identification document, a description of the request and an address or email for our reply.
9. Procedure for inquiries and complaints
- Inquiries: will be answered within a maximum of ten (10) business days from receipt. If this is not possible, we will explain the reasons and respond within five (5) business days after the initial deadline.
- Complaints (correction, update, deletion or non-compliance): will be handled within a maximum of fifteen (15) business days from receipt, extendable by up to eight (8) additional business days, stating the reasons. If a complaint is incomplete, we will ask you to complete it within five (5) days; if two (2) months pass without a reply, the complaint will be deemed withdrawn.
10. Data transmission and transfer
To operate the website and provide our services we may share data with providers acting as data processors, such as web hosting, email, analytics (for example, Google) and messaging (WhatsApp) services. Some of these providers may store information outside Colombia, in countries with adequate levels of protection or under contracts that guarantee data security. We do not sell or assign your data to third parties for commercial purposes.
11. Attorney-client privilege and security
Information you share with us in the course of an inquiry or engagement is protected by attorney-client privilege. We apply reasonable technical, human and administrative measures to protect data against loss, unauthorized consultation, use or access.
12. Cookies
The website uses its own and third-party cookies to operate and to obtain browsing statistics. You can configure your browser to block or delete them; some website features may be affected.
13. Effective date
This policy is effective as of October 23, 2026. Data will be kept for as long as necessary for the purposes described and for the periods required by applicable legal, accounting and professional regulations. Any material change will be published on this page. Please also see our Terms and Conditions.
This English version is provided for convenience. In the event of any discrepancy, the Spanish version shall prevail.
