June 2026

RoundCode, its collaborators, and associates are committed to complying with Article 15 of the Political Constitution of Colombia, which protects the fundamental right of individuals to privacy and good name, as well as the rights to know, update, and rectify information that has been collected about them in databases and files of public and private entities, together with the regulations that develop this constitutional principle.

In furtherance of this commitment, RoundCode has adopted this binding policy to establish mechanisms that guarantee the security and confidentiality of the personal data of its clients, collaborators, suppliers, associates, and third parties with whom it maintains a commercial or administrative relationship. RoundCode collects information and keeps it updated for the purpose of carrying out its corporate purpose, complying with accounting, administrative, and legal obligations, conducting commercial activities, promoting its services, and, in general, performing any activity aimed at fulfilling its corporate purpose.

Personnel responsible for collecting personal data undertake to maintain the confidentiality of all personal data collected by and for RoundCode. Failure to comply with this duty shall give rise to the corresponding administrative investigations and sanctions, as applicable.

RoundCode has designated personnel responsible for handling complaints and claims. Therefore, any third party who considers that their right to the confidentiality of their personal data has been affected may submit the corresponding complaint to the following email address: [email protected].

RoundCode informs that the provision of personal data is voluntary and therefore requires prior authorization from the individual providing the information. Such data shall be used solely for the purposes described in this policy, in accordance with the constitutional principles that protect personal data privacy. Consequently, personal data shall be collected, processed, stored, and used in compliance with the constitutional principles of privacy, non-discrimination, legality, rectification, and correction. RoundCode shall keep a copy of the authorization, and the data subject may obtain a copy thereof.

The information collected by RoundCode shall at all times be accurate, complete, truthful, up to date, verifiable, and understandable. RoundCode shall take the necessary measures to prevent any risk of error, alteration, or falsification of the information.

The data subject may, at any time, request that RoundCode update their personal data and inform them of the personal information collected, as well as the processing carried out on such information.

RoundCode only allows access to personal information to:

Data subjects have the right to:

Data subjects may request information related to their personal data by sending an email to [email protected], including their full name, identification number, contact information for response (email address, physical address, telephone number), and a detailed description of their request.

If the data subject acts through a representative, an original power of attorney with personal presentation before a notary public must be submitted to the following address: Carrera 10 # 93 – 51, Bogotá, Colombia.

RoundCode shall process the request within ten (10) days from the date of receipt and shall provide a response no later than the tenth (10th) day following receipt of the request. Corrective measures, if applicable, shall be implemented within five (5) days following the response or earlier if possible. If additional information is required to process the request, RoundCode shall contact the data subject or their representative immediately. If the requested information is not provided within two (2) months, the request shall be deemed concluded.