Last updated: January 1, 2026
Privacy Policy
This Privacy Policy describes how Ecaluna Inversiones Inmobiliarias S.A.S., with Tax ID 1793218456001 and registered office at Av. República del Salvador N36-140, Quito, Ecuador, collects, uses and protects the personal information of users of the ecaluna.com website, in compliance with the Organic Law on Personal Data Protection of Ecuador (Official Registry Supplement 459 of May 26, 2021) and its Regulations.
1. Data controller
Ecaluna Inversiones Inmobiliarias S.A.S. is the controller responsible for the processing of personal data collected through ecaluna.com. You can contact our Data Protection Officer at privacidad@ecaluna.com or by postal mail at the address indicated above.
2. Data we collect
We collect identification data (first name, last name, ID card or passport), contact data (email, phone, address), financial data for the KYC process (source of funds, declaration of economic activity) and browsing data (IP address, cookie identifiers, pages visited).
3. Purposes of processing
We process your data to manage your account, execute crowdlending transactions, comply with legal obligations (UAFE, SRI, Superintendency of Companies), send you commercial communications if you have consented, prevent fraud and improve our services through web analytics.
4. Legal basis
The legal basis for processing is the execution of a contract (when you contract our services), compliance with legal obligations (financial and tax regulations), your consent (for marketing and non-essential cookies) and Ecaluna's legitimate interest in the security of the platform.
5. Recipients and transfers
We share data with the Superintendency of Companies, Securities and Insurance, UAFE, SRI, bank trustees, law firms, works inspectors and technology providers (hosting in European Union data centers under standard contractual clauses). We do not sell personal data to third parties.
6. Retention periods
We retain the data during the term of the contractual relationship and, thereafter, for ten years as required by anti-money laundering regulations. Marketing data is retained until you withdraw your consent.
7. Rights of the data subject
You can exercise the rights of access, rectification, deletion, opposition, portability and limitation of processing by writing to privacidad@ecaluna.com with a copy of your ID document. You can also file complaints with the Superintendency of Personal Data Protection of Ecuador.
8. Security
We apply reasonable technical and organizational measures: TLS 1.3 encryption, encrypted storage at rest, role-based access controls, annual audits and mandatory information security training for all Ecaluna staff.
9. Changes to this policy
We may update this Privacy Policy to reflect legal or operational changes. We will publish the current version at ecaluna.com indicating the date of the last update and, when changes are substantial, we will notify you by email.