Personal data protection policy

Identification of the data controller

Fundación Loros — Not-for-profit entity · NIT 901.597.480-2.
Registered with the Cámara de Comercio de Cartagena.
Recognized by CARDIQUE as a Network of Friends of Wildlife — Resolution No. 1972 of December 28, 2022.
Address: Villanueva, Bolívar, Colombia.
Contact: info@loros.org · WhatsApp +57 320 696 0469.

Definitions

For the purposes of this policy, and pursuant to article 3 of Colombian Law 1581 of 2012:

• Data subject: the natural person whose personal data is being processed.
• Personal data: any information linked or that may be associated with an identified or identifiable natural person.
• Processing: any operation on personal data, including collection, storage, use, circulation, or deletion.
• Sensitive data: data that affects the privacy of the data subject or whose misuse may lead to discrimination (racial origin, political or religious beliefs, health data, biometric data, among others).

Purposes of processing

We process your personal data for the following purposes:

• Managing donations and issuing tax certificates.
• Coordinating volunteering and educational programs.
• Sending institutional communications (newsletters, acknowledgments, updates).
• Responding to inquiries, requests, and information petitions.
• Meeting legal, accounting, and tax obligations.

Data we collect

We only collect data necessary for the purposes above:

• Identification: name and document number.
• Contact: email, phone, and address.
• Transactional: amount, date, and reference of the donation.

We do not collect sensitive data.

Data subject rights

As the data subject, under article 8 of Law 1581 of 2012, you have the right to:

• Access, update, and rectify your personal data.
• Request proof of the authorization granted for processing.
• Be informed of the use given to your data.
• File complaints with the Superintendencia de Industria y Comercio (SIC) for violations of the law.
• Revoke the authorization and request deletion of your data, when applicable.
• Access your personal data subject to processing free of charge.

Contact channel

To exercise your rights, write to info@loros.org. We will respond within the following timeframes:

• Inquiry: 10 business days (article 14 of Law 1581).
• Complaint: 15 business days (article 15 of Law 1581), extendable by 5 additional business days with prior notice to the data subject.

Transfer to third parties

To operate the site and process donations, we share data with the following processors:

• Bold: payment processing.
• Supabase: technical infrastructure for the site.

These third parties process the data solely under our instructions and in accordance with their own security policies.

Security and term

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or alteration. We retain data during the active relationship with the data subject and for an additional 5 years to comply with tax obligations. This policy remains in force until a new version is published.

Acceptance and changes

By using the site, donating, or subscribing to our communications, you accept this policy. When we make material changes, we will notify active donors by email.

Last updated: May 2026.