Privacy and personal data policy

1. Purpose and scope

Your privacy matters to Easy Trends Agency. This policy explains how we collect, store, use, circulate, transmit, transfer, update and delete the personal data of website visitors, creators, clients, prospects, suppliers and anyone else who deals with us.

The policy is adopted under the Political Constitution of Colombia, Law 1581 of 2012, Decree 1074 of 2015 and any rules that amend, supplement or replace them.

2. Data controller

• Trade name: Easy Trends Agency.
• Address: Zipaquirá, Cundinamarca, Colombia.
• Email: easytrendsagency@gmail.com.
• Phone: +57 317 701 2742.

The registered company name, tax ID and address for legal notices applicable to each contractual relationship are stated in the relevant order or specific agreement and in the payment documents.

Easy Trends acts as Controller when it decides the purposes and means of processing. In campaigns where it processes information following documented instructions from a Brand or client, it may act as Processor, and the agreements signed with that Controller apply in addition.

3. Applicable principles

We process data under the principles of lawfulness, purpose limitation, freedom, truthfulness or quality, transparency, restricted access and circulation, security and confidentiality. We only request information that is adequate, relevant and reasonably necessary for the stated purposes.

4. Data we may collect

• identification and contact details: name, ID document, email, phone, city and address;
• professional and profile information: occupation, biography, portfolio and experience;
• social media data: handle, links, public content, audience, reach and engagement;
• contractual, banking, accounting and tax information needed to contract, invoice and pay;
• communications, requests, authorisations, supporting documents and support records;
• technical and browsing data such as IP address, device, browser, pages visited and security logs;
• image, voice and audiovisual content when you take part in campaigns or authorise us to use them.

Information may come directly from you, from forms, email, contracts, meetings, interactions with our accounts, legitimate public sources, participating Brands and platforms you authorise us to connect.

5. Purposes of processing

We may process your data to:

• answer enquiries, requests, petitions, complaints and claims;
• register, authenticate and administer accounts and profiles;
• assess creators and match them with suitable campaigns;
• manage briefs, deliverables, approvals, metrics and campaign results;
• contact creators, clients and suppliers to carry out a contractual or pre-contractual relationship;
• process payments, invoicing, accounting, withholdings and tax obligations;
• verify identity and prevent fraud, abuse, unauthorised access and metric manipulation;
• operate, measure, protect, maintain and improve the site and our services;
• send commercial information where there is authorisation or a legal basis, always offering an opt-out in each message;
• manage our presence and support on social media;
• exercise or defend rights and meet legal, judicial or administrative obligations.

If we intend to use the information for a new purpose incompatible with those above, we will inform the data subject and request fresh authorisation where required.

6. Authorisation

We request prior, express and informed authorisation through mechanisms that allow later consultation, except where the law does not require it. Unequivocal conduct will only be relied on where it reasonably shows that the data subject authorised the processing; silence is not treated as authorisation.

We keep evidence of the authorisation and of the notice provided. You can request a copy through our support channels.

7. Sensitive data

Sensitive data includes data affecting privacy or whose misuse may lead to discrimination, such as biometric and health data, political views, religious beliefs, union membership and sexual life. You are not obliged to answer questions about sensitive data. We will only process it where strictly necessary, where explicit authorisation exists or where another legal exception applies, and we will state beforehand that answering is optional and explain the specific purpose.

8. Children's and adolescents' data

Our creator services are aimed at people aged eighteen (18) or over. We do not intentionally collect minors' data to register them as creators. If processing is exceptionally necessary and lawful, we will protect their best interests, respect their prevailing rights and obtain their legal guardian's authorisation, listening to the minor according to their maturity. If you believe we have received a minor's data without authorisation, write to us so we can review and delete it where appropriate.

9. Data subject rights

As a data subject you can:

• know, access, update and correct your data;
• request proof of the authorisation, except where a legal exception applies;
• be informed about how your data has been used;
• submit enquiries, complaints and claims;
• withdraw your authorisation or request deletion where applicable;
• access the personal data being processed free of charge;
• file complaints with the Superintendency of Industry and Commerce once the applicable direct procedure has been exhausted.

Withdrawal or deletion does not apply where a legal or contractual duty to keep the information exists. In those cases we limit processing to the purpose that justifies keeping it.

10. Enquiries, claims and responsible area

The administrative area of Easy Trends Agency is responsible for handling data subject rights. Send your request to easytrendsagency@gmail.com with the subject “Data protection”, stating your name, ID, contact details, a description of the request and documents proving your identity or representation.

Enquiries are answered within ten (10) business days of receipt. Where that is not possible, we will explain why and give a new date, no more than five (5) additional business days later.

Claims are handled within fifteen (15) business days from the day after receipt. If a claim is incomplete, we will request the missing information within the following five (5) days. If we cannot reply within the initial period, we will explain why and give a new date, no more than eight (8) additional business days later. Where applicable, we record the note “claim in process” in the database.

11. Recipients and processors

We may share information, as far as necessary, with campaign Brands and clients; hosting, email, storage, analytics, security, communications and support providers; payment processors, financial institutions, accountants and advisers; authorised social platforms; and competent authorities. Our Processors are bound by duties of security, confidentiality, purpose limitation and restricted use.

We do not sell or rent personal data. A Brand that receives data for its own purposes acts as an independent Controller and must communicate its own processing conditions where applicable.

12. International transmissions and transfers

Some technology providers or platforms may process information outside Colombia. International transmissions are covered by contracts requiring compliance with this policy and the applicable protection. International transfers take place with the data subject's authorisation or under a legal exception, respecting the rules on countries with an adequate level of protection and the instructions of the SIC.

13. Cookies, analytics and advertising

The site uses technologies necessary for it to work and, with the required authorisation, may add measurement or advertising tools. These can collect identifiers, IP address, browser, device, pages visited and interaction events.

Details of the cookies installed, their providers, purposes and duration are in our cookie policy, together with instructions for managing or deleting them from your browser. Disabling technical cookies may affect some site functions.

14. Commercial communications

We only send promotional communications where we have authorisation or another legal basis. You can withdraw your consent through the unsubscribe link in the message or by writing to our email address. Opting out of marketing does not prevent operational messages needed for a request, account, contract, campaign or payment.

15. Security and incidents

We apply reasonable administrative, human and technical measures to protect data against alteration, loss, unauthorised or fraudulent consultation, use or access. Access is limited to staff and providers who need it for their duties and who are bound by confidentiality. No system is absolutely invulnerable; we manage incidents and make the reports or notifications required by applicable regulations.

16. Retention and deletion

We keep data for the duration of the relationship with the data subject and for as long as reasonably necessary to fulfil the stated purpose, meet contractual, accounting, tax and legal obligations, resolve disputes and exercise rights. Afterwards we delete, anonymise or block it, unless a duty to retain applies. We periodically review whether the stored data is still necessary and proportionate.

17. Accuracy and third-party data

You must provide accurate information and keep it up to date. If you provide another person's data, you state that you are authorised to do so and that you informed them of this policy where applicable. This does not limit our duty to verify, correct or protect the information under our control.

18. Changes and validity

This policy is in force from 16 September 2026 and remains in force for as long as Easy Trends processes personal data. We may amend it due to legal, technical or operational changes. We will publish the new version and communicate material changes before applying them where they significantly affect the purposes or the rights of data subjects.

This policy is read together with the site's legal notice, cookie policy and terms and conditions.