Personal Data Treatment Policy

In force since 13 August 2026

This policy sets out the rules under which ARCAP GROUP S.A.S., owner of the Trady platform, processes the personal data it collects, in compliance with Law 1581 of 2012 and Decree 1074 of 2015.

It applies to the personal data of anyone who contacts us through this site, of our clients and their representatives, and of any person whose data we collect in the course of our commercial activity.

This is a courtesy translation. The binding version of this policy is the Spanish one, which prevails in the event of any discrepancy.

Data controller

Registered name: ARCAP GROUP S.A.S.
Tax ID: NIT 900.206.856-8
Registered domicile: Barranquilla, Atlántico, Colombia
Address: Cra. 57 #99A-65, Torre Sur, Oficina 406, Edificio Torres del Atlántico
Email: operations@trady.com.co
Phone: +57 312 2092128

Processing and purposes

To store your data in Trady’s databases.
To establish, maintain and develop the commercial relationship.
To ensure the effectiveness and security of the services rendered.
To handle enquiries, requests, complaints and claims, and route them to the responsible area.
To fulfil the services contracted.
To send information about Trady’s services and to carry out marketing, statistical and commercial research activities, always within what Colombian law permits.
To invoice and collect payment for the services contracted.
To verify compliance with legal and contractual obligations, and to check the data for accuracy and suitability.
To transfer your data to the third parties Trady has contracted to deliver the service — including hosting and transactional email providers — solely for the purposes set out in this policy.
To respond to judicial or administrative requirements and to comply with legal mandates.
To manage the information required to meet tax obligations and commercial, corporate and accounting record-keeping duties.
To delete the information once it is no longer necessary for the purposes above.

Your rights as a data subject

To know, update and rectify your personal data. You may exercise this right over data that is partial, inaccurate, incomplete, fragmented, misleading, or whose processing is prohibited or was never authorised.
To request proof of the authorisation you granted, except where the law expressly waives that requirement.
To be informed, upon request, of the use that has been made of your personal data.
To file complaints with the Superintendency of Industry and Commerce for breaches of Law 1581 of 2012 and any rules amending or supplementing it.
To revoke your authorisation and request deletion of your data where the processing fails to respect constitutional and statutory principles, rights and safeguards.
To access, free of charge, the personal data of yours that has been processed.

Area responsible for requests, enquiries and claims

The Operations area of ARCAP GROUP S.A.S. is responsible for handling requests, enquiries and claims, and is where you may exercise your rights to know, update, rectify and delete your data and to revoke your authorisation.

How to exercise your rights

Enquiries

You, or anyone representing you, may consult the personal information held in our databases by writing to the responsible area. It is enough to identify yourself and describe the information you wish to consult.

Enquiries are answered within a maximum of ten (10) business days from receipt. Where that is not possible, we will tell you why and give you the date on which it will be answered, which will never exceed five (5) business days after the first deadline expires.

Claims

If you believe your information should be corrected, updated or deleted, or you detect a possible breach of the duties set out in Law 1581 of 2012, you may file a claim. The claim must include your identification, a description of the facts, a contact address and any supporting documents.

If the claim arrives incomplete, we will ask you to complete it within five (5) days of receipt. If two (2) months pass from that request without the information being supplied, the claim is deemed withdrawn. If whoever receives the claim is not competent to resolve it, they will pass it to whoever is within a maximum of two (2) business days and will inform you.

Once the complete claim is received, the database entry is marked “claim under review” together with its reason, within no more than two (2) business days, and stays marked until the claim is decided.

Claims are answered within a maximum of fifteen (15) business days from the day after receipt. Where that is not possible, we will tell you why and give you the date on which it will be answered, which will never exceed eight (8) business days after the first deadline expires.

Term

Databases are kept for as long as the purpose that justified collection remains, and for as long as the legal and contractual obligations of ARCAP GROUP S.A.S. require. Once that term has elapsed, the data is deleted.

Any substantial change to this policy will be communicated to data subjects in a timely and effective manner before the new version takes effect.