Privacy policy

How Aurora Capital collects, uses, protects and shares your personal data, in line with Colombian Law 1581 of 2012 and its implementing rules.

The data controller is Aurora Capital, based in Bogotá, D.C., Colombia. You can write to [email protected] on any matter related to your data. By registering and using the service you authorise the processing described here.

1. Definitions

Personal data is what identifies you, such as your name, email or phone. Usage data is generated as you browse the site. The controller decides why and how data is processed; the processor handles it on the controller's behalf, for example a hosting provider.

2. Data we collect

We collect your first name, last name, phone, email address and the content of your queries or requests. If you complete identity verification, we also process your document, your address and the image from the liveness check. Automatically we record your IP address, device and browser type, the pages visited and the date and time of access.

3. Cookies

We use technical cookies needed for the site to work, such as remembering your language or keeping your session, and measurement cookies that help us understand how the site is used. You can block or delete them from your browser; some features might stop working.

4. Purposes of processing

We use your data to create and manage your account, contact you by phone or email, assign you an account manager, answer queries and complaints, verify your identity, meet legal obligations, prevent fraud and improve the service. With your authorisation we also send commercial information.

5. Legal basis

We process your data on the basis of your prior, express and informed authorisation, performance of the contract or relationship you request, compliance with legal obligations such as anti-money-laundering ones, and our legitimate interest in security and improving the service. Consent for marketing is separate and you can withdraw it whenever you wish.

6. Retention

We keep contact data while you hold an active account and for up to five years afterwards, to handle claims. Verification documents are kept for as long as anti-money-laundering rules require, which may be five years or more. Usage data is kept for shorter periods, generally no more than twenty-four months.

7. Transfers

Some technology providers may be outside Colombia. When we send data abroad we require contractual safeguards equivalent to those of Colombian law and limit the information to what is strictly necessary.

8. Disclosure

We share data with providers who serve us, with companies in our group, with partners who provide trading or payment services when needed for your request, and with authorities that legally require it. We do not sell your data.

9. Security

We apply reasonable technical and organisational measures: encryption of communications and sensitive data, role-based access control, audit logs and backups. No system is infallible, so we also recommend protecting your account with two-factor authentication. More on the security page.

10. Data subject rights

You have the right to know, update and correct your data, to ask for proof of the authorisation, to be informed of how your data is used, to lodge complaints with the Superintendence of Industry and Commerce, to revoke the authorisation and to request deletion when there is no legal duty to keep the data. We answer queries within ten business days and claims within fifteen, when you write to [email protected].

11. Service providers

We work with hosting, email delivery, identity verification, customer service and payment providers. They receive only the data they need for their task and are bound to treat it confidentially.

12. Analytics

We may use analytics tools to measure visits and site performance. This information is processed in aggregate wherever possible and is not used to make automated decisions about you.

13. Advertising and retargeting

If you give your authorisation, we may measure the results of our advertising and show you ads on other sites. You can withdraw consent at any time and set ad preferences in your browser or your advertising provider account.

14. Links to third-party sites

If you follow a link to an external site, that site's own policies apply. We recommend you read them, because we do not control their data handling.

15. Children's privacy

The service is aimed at adults. We do not knowingly collect data from anyone under 18; if we find that a minor registered, we will delete their account and data.

16. Changes to this policy

We may update this policy and will publish the new version on this page. If the change is significant we will tell you by email. The date of the last review is 05/10/2026.

17. Contact us

To exercise your rights or ask about this policy write to [email protected], stating your name, your registration email and what you are asking for.