Personal data processing policy

ContiTax S.A.S., tax ID (NIT) 901.948.040-2, domiciled in Medellín, Colombia, is responsible for processing the personal data it collects in the course of its business.

• Email: contacto@contitax.co
• WhatsApp: +57 310 387 0202
• Address: Medellín, Colombia

This policy is issued under Colombian Statutory Law 1581 of 2012, Decree 1074 of 2015 (which incorporated Decree 1377 of 2013) and any rules that amend or supplement them. The Spanish version prevails in case of discrepancy.

• Contact details you share with us via WhatsApp, email or Instagram: name, company, phone, email and a description of what you need.
• Accounting, tax, employment and financial information about our clients and related individuals (for example, employees in payroll processes), needed to provide the services they hire.
• Aggregated, anonymous browsing data about the use of this website, collected with an analytics tool that uses no cookies and does not identify visitors (see section 10).

The contact form on this site does not keep what you write on our systems (only a draft in your browser; see section 10). If you choose a reply on WhatsApp, it only prepares a message and opens WhatsApp so you can decide whether to send it; those messages are also subject to that service’s policies.

If you choose a reply by email, your name, company, email address, service of interest and message are sent to our inbox through Resend (Resend, Inc., United States), an email delivery provider that processes them on our behalf (see section 9). This site keeps no copy.

If you book a meeting from this site, the booking is made on Calendly (Calendly LLC, United States), a scheduling service that processes your name, email address, the answers you give when booking and the meeting time on our behalf (see section 9). The booking page belongs to Calendly and is also subject to its policies, cookies included; this site uses no tracking cookies (see section 10). To know how many meetings are booked and from which link, we record each booking in our analytics (see section 10) with only the type of meeting and the link it came from, not your name or email.

We process personal data to:

• Answer your questions and requests for information.
• Prepare service proposals and manage the commercial and contractual relationship.
• Provide the accounting, tax, electronic invoicing, payroll, social security and outsourcing services hired.
• Comply with legal, accounting and tax obligations, and respond to requests from competent authorities.
• Send information about our services when you have authorized it. You can ask us to stop at any time.
• Improve this website using aggregated usage statistics.

We only process sensitive data when a service requires it (for example, in payroll and social security processes), with your express authorization and solely for that purpose. You are not required to authorize the processing of sensitive data.

Data about children and adolescents (for example, beneficiaries in social security processes) is processed respecting their best interests and fundamental rights, with authorization from their legal representative.

As the data subject, you have the right to:

• Access, update and correct your personal data.
• Request proof of the authorization you gave, except where the law does not require it.
• Be informed about how your data has been used.
• File complaints with the Superintendence of Industry and Commerce (SIC) about violations of the law, after first submitting your inquiry or claim to us.
• Revoke your authorization or request deletion of your data when there is no legal or contractual duty to keep it.
• Access your personal data free of charge.

You can exercise your rights by writing to contacto@contitax.co. Include your name and ID, a description of your request, an address or email for our reply, and any supporting documents.

• Inquiries: answered within ten (10) business days of receipt. If that is not possible, we will explain why and reply within the following five (5) business days.
• Claims (correction, update, deletion or breach): handled within fifteen (15) business days from the day after receipt, extendable by up to eight (8) more business days, in which case we will tell you why.
• If a claim is incomplete, we will ask you to complete it within five (5) days. If two (2) months pass without a response, the claim will be considered withdrawn.

We apply reasonable technical, human and administrative measures to protect personal data against loss, unauthorized access, use or disclosure. Client information is also handled under the professional confidentiality that applies to public accountants.

We may share data with providers that work on our behalf (for example, accounting software, email, meeting scheduling and web hosting), who process it under confidentiality obligations and only for the purposes described here. Some of these providers may store information outside Colombia, in which case we require adequate levels of protection.

We will also disclose data to public authorities when required by law, such as DIAN or UGPP.

This site shows each page in your browser’s language (Spanish or English). It uses a single cookie, and only if you choose a language with the ES/EN switcher: it keeps that choice for a year to show you the site in that language; it holds no personal data and cannot identify or track you. While the tab is open, it also keeps the contact form draft in your browser, so a reload doesn’t lose it; it is deleted when you close the tab and never reaches us. To learn how many people visit it and which sections, frequently asked questions and contact buttons they use, we use Umami, an analytics tool that produces aggregated statistics without cookies and without identifying visitors. We also use it to record, anonymously, the overall result of the “Do I need to file?” tool (whether you need to file, whether you are close to a limit or not a tax resident; never your figures), page load times and any technical errors on the site so we can fix them. Fonts are served from our own domain, with no connections to third parties.

If we add tools that use cookies or personal data in the future (for example, for advertising), we will update this policy and ask for your consent before enabling them.

We keep data for as long as needed for the purposes described and for the periods required by law; for example, accounting books and records are kept for the applicable legal term.

This policy is effective from the update date shown on this page. Any material change will be published here.