Last updated: June 2026.
1. Data Controller
The FOUNDATION FOR COMMUNITY FACTS Hepacom, a non-profit organization registered under ESAL No. S0001780 and belonging to the Special Tax Regime, with its registered office in Itagüí (Antioquia, Colombia) and national scope, is responsible for the processing of personal data provided through hepacom.org and other channels. Contact: contactanos@hepacom.org · gerencia@hepacom.org.
2. Legal framework
This Policy is adopted in compliance with Article 15 of the Constitution, Statutory Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and the instructions of the Superintendency of Industry and Commerce (SIC).
3. Data we collected
According to the channel: identification and contact data (name, document, telephone, email, city); donor data (amount, date, payment method and billing data for the donation certificate); volunteer data (resume, experience, availability); beneficiary family data (socioeconomic information necessary for housing projects); and browsing data (IP, device, cookies).
4. Purposes
Attend to requests and complaints; manage donations and issue the donation certificate for tax purposes; advance the application, selection and execution of decent housing projects; link volunteers and partners; send institutional information and newsletters (with the option to cancel); comply with legal, accounting and tax obligations (DIAN, SIC); and carry out management analysis.
5. Authorization of the holder
By completing any form, checking the acceptance box or voluntarily providing their data, the owner authorizes in a prior, express and informed manner the processing in accordance with this Policy.
6. Rights of the holder (Law 1581/2012, art. 8)
To know, update and rectify your data; request proof of authorization; be informed about the use of your data; file complaints with the SIC; revoke authorization and/or request deletion when there is no legal duty to retain it; and access your data free of charge.
7. Procedure (inquiries and complaints)
Write to contactanos@hepacom.org indicating your name, identification, description of the request and contact information. Inquiries: attended within a maximum of ten (10) business days. Complaints: Requests will be processed within a maximum of fifteen (15) business days (Articles 14 and 15, Law 1581/2012). Once this process is complete, you can contact the SIC (www.sic.gov.co).
8. Security, transfers and preservation
We take reasonable technical, human, and administrative measures. We do not sell data; we may share it with processors (payment gateways, email, web analytics) under confidentiality agreements. Data is retained for as long as necessary for legal purposes and obligations.
9. Validity
This Policy is effective from the date of its publication. Hepacom may modify it; changes will be published on hepacom.org with their update date.