Privacy and data protection policy
This policy explains what personal data we collect, what we use it for, who we share it with and how you can exercise your rights. It applies to this website and to any channel through which Excolbi handles a request.
In force since 26 August 2026
Data controller
The controller of your personal data is Excolbi S.A.S. (Exportadora Colombiana de Bienes), a company domiciled in Medellín, Antioquia, Colombia.
For any matter concerning your personal data, write to info@excolbi.com. That is the official channel for requests, queries and complaints on data protection.
Legal framework
This policy is governed by Colombian Law 1581 of 2012 on the protection of personal data and by Decree 1074 of 2015, which implements it.
The supervisory authority is the Superintendency of Industry and Commerce (Superintendencia de Industria y Comercio), to which you may submit a complaint if you consider your rights have not been upheld.
What data we collect
We neither ask for nor need sensitive data — racial or ethnic origin, beliefs, health, biometric data — to provide our services. Please do not include such data in your communications.
We collect only the data we need in order to handle your request:
- Identification and contact data: name, company, email address, phone number and country, when you provide them through the quote form or when you write to us.
- Shipment data: origin, destination, type of goods, approximate weight or volume, and any detail you share so that we can quote.
- Technical browsing data: what your browser sends automatically when visiting the site. This site installs no analytics or advertising cookies; the detail is in the cookie policy.
What we use your data for
We do not use your data to send unsolicited marketing, and we do not pass it to third parties for advertising purposes.
- Responding to your quote or advisory request and following up on it.
- Providing the contracted logistics or foreign trade service, including handling documents before the customs authorities.
- Meeting the legal, accounting and tax obligations that apply to us as a Colombian company.
- Keeping a record of the commercial relationship while it remains active.
Who we share it with
A foreign trade operation necessarily involves sharing certain data with third parties in order to be carried out. Specifically, and only to the extent strictly necessary:
- Customs and control authorities in Colombia and in the destination country, where the operation requires it.
- Airlines, shipping lines, freight agents and carriers moving the goods.
- Technology providers hosting the site and the corporate email, and those we use to log enquiries and share them out among our advisers (Zapier and the logging spreadsheet), acting as data processors.
International transfers
Given the nature of the service, your data may be transferred to third countries where the logistics operation requires it: the destination of the goods and the entry authorities are outside Colombia.
Such transfers are limited to what is indispensable to carry out the operation you have contracted or asked us to quote.
How long we keep it
We keep your data for as long as the commercial relationship lasts and, afterwards, for the periods required by Colombian accounting, tax and customs regulations.
Where a quote request does not become an operation, the data is kept only for a reasonable period to follow up commercially and to assist you if you write to us again.
Your rights
To exercise any of them, write to info@excolbi.com stating your name, the right you wish to exercise and the data concerned. We will handle your request within the periods set by law.
As the data subject, Law 1581 of 2012 grants you the following rights:
- To know, update and rectify your personal data.
- To request proof of the authorisation you granted for the processing.
- To be informed of the use made of your data.
- To lodge complaints with the Superintendency of Industry and Commerce for breaches of the law.
- To withdraw your authorisation and request deletion of your data, where no legal or contractual duty requires us to keep it.
- To access free of charge the data that has been processed.
Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. The site is served entirely over an encrypted connection.
No measure is infallible: should we detect an incident affecting your personal data, we would inform you and report it to the authority in accordance with the applicable regulations.
Changes to this policy
If this policy changes, we will publish the updated version at this same address and amend the effective date shown at the top. We recommend reviewing it periodically.