Privacy Policy

1. Data Controller

Raíces & Horizontes (hereinafter, “the firm”, “we”) is the controller responsible for the processing of the personal data we collect through this website and our communication channels. For any privacy-related inquiry, you may contact us at hola@raicesyhorizontes.com.

2. Data We Collect

We collect information when you:

• Complete a contact, investment, or inquiry form on the site.
• Contact us by email or WhatsApp.
• Request information about a specific property.
• Apply to become an advisor or a property owner within the network.

The information we may collect includes: full name, email address, phone number or WhatsApp number, country of residence, investment profile (approximate amount, type of asset of interest), and any other data you choose to share in the body of your messages.

We do not collect sensitive banking or financial data through the website.

3. Purpose of Processing

We use your data to:

• Respond to inquiries and requests for information.
• Present you with properties or assets that match your investment profile.
• Send you updates about new available assets, if you expressly requested them.
• Evaluate applications from advisors or property owners.
• Comply with legal obligations in the countries where we operate.

We do not use your data for unsolicited marketing purposes, nor do we transfer it to third parties for advertising purposes.

4. Third Parties With Access to Your Information

To operate the site and manage communications, we use the following service providers, which may process data on our behalf:

• Supabase (PostgreSQL) — storage of form and contact data. Servers located in the European Union.
• Resend — transactional email delivery service. May process the sender's and recipient's email addresses.
• Vercel — hosting infrastructure and serverless functions. Data processed on servers in the EU and the US.

All providers comply with internationally recognized security standards (SOC 2, ISO 27001, or equivalent).

5. Data Retention

We retain data for as long as necessary to fulfill the purpose for which it was collected, or for as long as an active business relationship exists. If you request the deletion of your data, we will process the request within a maximum of 15 business days, unless a legal obligation requires us to retain it.

6. Your Rights

Under the applicable legislation in Argentina (Law 25,326 on the Protection of Personal Data), Costa Rica (Law 8968 on the Protection of Individuals Regarding the Processing of Their Personal Data), and Colombia (Law 1581 of 2012 on the Protection of Personal Data), you have the right to:

• Access: know what data we hold about you.
• Rectification: correct inaccurate or outdated data.
• Cancellation / erasure: request that we delete your data.
• Objection: object to certain uses of your data.

To exercise any of these rights, write to us at hola@raicesyhorizontes.com with the subject line “Privacy Rights.” We respond within a maximum of 10 business days.

7. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration. This includes the use of encrypted connections (TLS/HTTPS), access controls on our database, and periodic audits of our service providers.

However, no system is infallible. In the event of a security breach affecting your data, we will notify you as promptly as possible.

8. Changes to This Policy

We may update this policy from time to time. When we do, we will publish the new version on this page along with the update date. We recommend reviewing it periodically. If the changes are significant, we will notify you by email if we have your contact details.

9. Contact

For any inquiry regarding privacy or data protection, write to us at hola@raicesyhorizontes.com. We assist in Spanish and English.