Guatapé Properties (guatapeproperties.com) is operated by Green Mango SAS, the company behind the Colegaje real estate network. This policy explains which personal data we handle when you use this site, why, who we share it with and how to exercise your rights. It follows Colombian Law 1581 of 2012, Decree 1377 of 2013 and Decree 1074 of 2015.
This English text is a courtesy translation. The Spanish version, published at https://guatapefincaraiz.com/privacidad/, is the governing text.
1. Who is responsible
The data controller is Green Mango SAS, domiciled in Guatapé, Antioquia, Colombia. For anything related to your personal data, write to hola@colegaje.co. This policy applies to guatapeproperties.com and to the other sites and tools that Green Mango SAS operates under its own brands.
2. What data we handle
We only process data you give us or that is generated by your use of the site:
- First and last name.
- Phone and WhatsApp number.
- Email address.
- The municipality or area you are interested in and your search preferences: property type, approximate budget, features you are looking for.
- The property details you choose to share when you ask for a valuation or want to list: location, area, price and features.
- The messages you send us through forms, the site assistant or WhatsApp.
- Browsing data collected through cookies and analytics tools: pages visited, device and browser type, approximate IP address and where the visit came from.
We do not ask for sensitive data or data about minors. If we receive it by mistake, we delete it.
3. Why we use your data
- To handle your requests to buy, sell or rent property and answer your questions.
- To send you the property and market information you asked for, through the channel you chose.
- To manage the commercial relationship and coordinate your request with the advisors and partner agencies of the Colegaje network who cover your area.
- To meet legal, accounting and tax obligations.
- To measure, in aggregate, how the site is used so we can improve it.
- To prevent fraud and protect the security of the site and its users.
We do not sell your data, and we do not use it for any other purpose without asking for a new authorisation.
4. How we obtain your authorisation
You authorise us when you submit a form, write through the site assistant or contact us by WhatsApp or email, after reading the notice that accompanies each of those channels. Authorisation is prior, express and informed, and you can withdraw it at any time through the channel in section 6. Browsing data is collected through cookies, which you can manage from your browser as explained in section 9.
5. Your rights
- To access, update and correct your data.
- To request proof of the authorisation you gave us.
- To be informed about how we have used your data.
- To withdraw your authorisation and request deletion of your data, unless a legal or contractual duty requires us to keep it.
- To access your personal data free of charge.
- To file a complaint with the Superintendencia de Industria y Comercio (SIC), Colombia's data protection authority, once you have first raised the matter with us.
6. How to exercise your rights
Write to hola@colegaje.co with the subject "Personal data". Include your name, the phone number or email you used with us, and what you need: a query, a correction, withdrawal of your authorisation or deletion of your data. If you are acting on someone else's behalf, attach the document that authorises you.
We answer queries within ten business days and complaints within fifteen business days, counted from the day after we receive them. If we cannot answer within that time, we tell you why and when we will, never more than five extra business days for queries or eight for complaints. If a complaint arrives incomplete, we ask for what is missing within five days; if two months pass with no reply from you, we treat it as withdrawn.
7. Who we share your data with
To provide the service we rely on providers that act as data processors and only handle data on our instructions: hosting and content delivery, transactional email, messaging and WhatsApp, contact management and analytics tools. Some of these providers operate outside Colombia, mainly in the United States and the European Union; in those cases the transfer is covered by contractual confidentiality and security guarantees equivalent to those required by Colombian law. Brokerage contracts that you or an advisor upload to the platform may be reviewed automatically by a technology provider acting as data processor, solely to verify the authorisation of the listing and without retaining them for any other purpose.
If you record a voice note while listing a property, an automated provider (a data processor) transcribes it and another writes a first text of your listing from it, for that purpose only. This happens only after you tap the record button, with this notice in view. The audio is not kept and neither is the transcript: all that remains of the note is its length and date. That text is yours to correct before you publish.
When an advisor or partner agency of the Colegaje network handles your request, we share only the data needed to handle it, and that partner is bound to treat it under this policy. We may also hand data to authorities when a law or a legal order requires it.
8. Minors
Our services are aimed at adults. We do not knowingly collect data from minors. If a parent or guardian believes a minor has given us data, they can write to the address in section 6 and we delete it.
9. Cookies and analytics
This site uses its own cookies, needed for it to work (session, language, preferences and saved properties), and third-party cookies to measure how the site is used and how our campaigns perform, such as Google Analytics, Google Ads and Meta. These tools give us aggregate information and we do not use them to identify you individually. You can block or delete cookies from your browser settings; some site features may stop working if you do.
10. Security
We apply reasonable technical, human and administrative measures to protect your data: encryption in transit, access limited to the people handling your request, and providers with recognised security standards. No system is infallible; if an incident affects your data, we inform you and report it to the authority when the law requires it.
To keep automated programs from signing up for alerts, the alert forms use Cloudflare Turnstile, an invisible check that looks at technical signals from the browser and the device. Cloudflare handles that data under its Turnstile Privacy Addendum.
11. How long we keep your data
We keep your data for as long as the purpose we collected it for lasts and, after that, for as long as applicable legal, accounting and tax obligations require. Once that period ends, we delete or anonymise it.
12. Term and changes
This policy takes effect on 9 October 2026 and remains in force until we replace or revoke it. Its version is habeas-2026-10-09. If we change it, we publish the new version on this page with its date; if a change materially affects how we handle your data, we let you know through the channels you gave us before it applies.
13. Applicable rules
Article 15 of the Colombian Constitution, Law 1581 of 2012, Decree 1377 of 2013 and Decree 1074 of 2015 (Title 2, Chapter 25), together with the guidance of the Superintendencia de Industria y Comercio.