Legal

Privacy policy

Personal data processing policy · Version 0.1 (draft), October 2026

TODO: draft to be reviewed by Mateo’s lawyer before publishing; fill in legal name, NIT and address.

1. Who is responsible for your data

Alta Gama Luxury Rentals [TODO: legal company name, NIT and registered address], Medellín, Colombia. Contact for data-protection requests: ceo@altagamarentals.com · WhatsApp +57 314 814 4060.

2. Legal framework

This policy follows Colombian Law 1581 of 2012 on personal data protection and Decree 1377 of 2013 (compiled in Decree 1074 of 2015).

3. What data we collect

Only what you choose to give us: name, email, phone/WhatsApp, travel dates, group size, occasion and the messages you write in the forms, the planner or the concierge chat. To comply with Colombian regulations, guests who book also provide ID or passport details at check-in. This website stores your language preference in your browser (local storage); it does not use advertising cookies. [TODO: update if Google Analytics / Meta Pixel are added.]

4. Why we use it

To answer your request, prepare quotes and proposals, manage your booking and stay, comply with legal duties (guest registration and migration reports), and — only with your consent — send you offers.

5. Who we share it with

With service providers that help us operate: WhatsApp/Meta (messaging), our web hosting provider, our email provider, the AI provider that powers the concierge chat when enabled (messages are sent without your contact details unless you write them), and the providers of experiences you request. Some of them are outside Colombia, so data may be transferred internationally under adequate safeguards. We never sell your data.

6. Your rights

You can know, update, rectify and delete your data, request proof of your authorisation, be informed about how it is used, revoke your authorisation and file complaints with the Superintendence of Industry and Commerce (SIC) after contacting us first.

7. How to exercise them

Write to ceo@altagamarentals.com. Queries are answered within 10 business days and claims within 15 business days, as set by articles 14 and 15 of Law 1581 of 2012.

8. Retention & security

We keep data only as long as needed for the purposes above and legal obligations, with reasonable technical and organisational safeguards.

9. Minors

Our services are for adults. We do not knowingly collect data from minors.