Personal Data Processing and Privacy Policy

Last updated: September 4, 2026.

1. Data controller

NATURA RETREAT S.A.S., Colombian tax ID (NIT) 901909745-1, with principal domicile in Cali, Valle del Cauca, and registered address at CR 2 A 13 OESTE 09, is the controller of personal data collected through naturaretreat.com.co and the channels associated with the project.

Privacy contact: info@naturaretreat.com.co.

2. Applicable framework and scope

This policy is adopted under Article 15 of the Colombian Constitution, Law 1581 of 2012, Decree 1074 of 2015 and any rules that amend or supplement them. It applies to personal data relating to visitors, prospective guests, participants, suppliers, partners, candidates and people interested in the project.

3. Data we may collect

  • Identification and contact data, such as name, email address and telephone number.
  • Information provided in messages, forms and requests.
  • Interests relating to accommodation, experiences, immersions or the project.
  • Technical browsing data, such as IP address, device, browser, cookies and security logs.
  • In separate private processes, information required for identity, onboarding, know-your-customer or source-of-funds checks, when applicable.

4. Purposes of processing

  • To answer enquiries and requests for information.
  • To manage registrations of interest and communications about the estimated opening, services, experiences and immersions.
  • To contact people who voluntarily request information about the project or a private process.
  • To manage relationships with guests, participants, suppliers, partners and other stakeholders.
  • To improve the website, measure its performance and protect its security.
  • To comply with contractual, accounting, tax, regulatory or lawful authority requirements.
  • To retain evidence of authorisations and communications where necessary.

5. Consent, sensitive data and minors

Processing will be based on prior, express and informed consent whenever consent is required. The website’s general forms do not request sensitive data. If a future service requires sensitive information, its optional nature will be explained and explicit consent will be requested. Natura Retreat does not intentionally seek to collect children’s personal data through its general forms.

6. Service providers, transfers and third parties

Natura Retreat may use web hosting, email, form, messaging, security, analytics, document management and technology support providers. These parties may process information only to provide their services and subject to security and confidentiality obligations. International transfers or transmissions will be handled in accordance with applicable Colombian rules.

7. Retention

Data will be retained for as long as reasonably necessary to fulfil the stated purposes, meet legal or contractual obligations and address potential claims. When information is no longer required, it will be deleted, anonymised or stored with restricted access, as appropriate.

8. Your rights

You may access, update and correct your data; request evidence of consent; ask how your information has been used; file complaints with Colombia’s Superintendence of Industry and Commerce; withdraw consent or request deletion where legally available; and access your personal data free of charge.

9. Enquiries and complaints

Requests should be sent to info@naturaretreat.com.co with the subject “Personal Data Protection” and should include your name, contact method, a description of the request and any documents required to verify identity or representation.

Enquiries will be answered within ten (10) business days after receipt, with a possible extension of five (5) additional business days when necessary. Complaints will be answered within fifteen (15) business days following the day of receipt, with a possible extension of eight (8) additional business days where permitted by law.

10. Cookies and similar technologies

The website may use cookies that are necessary for its operation and, where applicable, measurement or analytics tools. You can manage cookies through your browser settings. Disabling certain cookies may affect some website functions.

11. Security

Natura Retreat applies reasonable administrative, technical and organisational safeguards against loss, alteration, unauthorised access or misuse. No system is completely infallible, so safeguards are reviewed and adjusted according to risk and technological developments.

12. Changes and effective date

This policy is effective from September 4, 2026. Material changes will be communicated through the website or available contact channels when required by law.