Personal Data Processing Policy

1. Purpose

Novatierra SAS establishes this policy to inform individuals about the collection, use, storage, protection, and other processing activities involving their personal data.

2. Data Controller

Novatierra SAS, NIT 901475216, headquartered in Cali, Colombia. Contact email:contacto@novatierra.co.

3. Legal Framework

This policy is governed by Article 15 of the Political Constitution of Colombia, Law 1581 of 2012, and the applicable provisions of Decree 1074 of 2015.

4. Personal Data Collected

Through our contact form, we may collect your full name, email address, company name, service of interest, and information voluntarily provided about projects or inquiries.

We do not request sensitive personal data. Users are advised not to include such information in free-text fields.

5. Purposes of Processing

• Respond to inquiries and requests for information.
• Evaluate technology project requirements.
• Coordinate requested meetings and diagnostic sessions.
• Prepare proposals and quotations.
• Follow up on business inquiries.
• Maintain records to comply with applicable legal obligations.

6. Authorization

Where legally required, we will obtain prior, express, and informed authorization to process personal data. Our contact form includes a consent checkbox that users must voluntarily select before submitting their requests.

7. Data Subject Rights

• Access, update, and correct personal data.
• Request evidence of the authorization granted.
• Obtain information about how personal data is used.
• Request deletion or withdraw authorization when legally permitted.
• Access personal data free of charge under applicable law.
• File complaints with the Colombian Superintendence of Industry and Commerce.

8. Inquiries and Complaints

Data subjects may submit requests tocontacto@novatierra.co.

Inquiries will be answered within ten (10) business days, with a possible extension of up to five (5) additional business days under the conditions established by law.

Complaints will be addressed within fifteen (15) business days following the day after receipt of a complete complaint, with a possible extension of up to eight (8) additional business days as permitted by law.

9. Information Security

Novatierra SAS will implement appropriate technical, organizational, and administrative measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure.

10. Technology Providers

We use Formspree as a technology provider to receive and manage contact form submissions. Submitted information may be processed and stored through its technology infrastructure.

Conditions applicable to potential international data transmissions or transfers will be verified in accordance with Colombian law.

11. Data Retention

Personal data will be retained for as long as necessary to respond to requests and comply with applicable legal or contractual obligations. Data will subsequently be deleted or anonymized when appropriate.

12. Cookies

The website may use cookies strictly necessary for its technical operation. If analytics or tracking tools are introduced, the relevant information and authorization mechanisms will be updated as required.

13. Policy Updates

Novatierra SAS may update this policy to reflect regulatory, operational, or technological changes. Significant updates will be communicated through the website.

14. Effective Date

This policy will take effect upon its official approval and publication by Novatierra SAS.

Approval date: October 15, 2025.