Privacy policy

Xbien, a cross-border investment and business advisory firm based in Medellín, Colombia, is the controller of the personal data collected through this site.

For any question about this policy or your data, write to us through the contact form or reply to any email you have received from Xbien.

Data you give us when you fill in a form: name, email address, country, company or project, sector, capital sought, area of interest and the message you write.

Technical data attached to the submission: site language, the page you sent the form from, browser (user agent) and the date and time of submission. We do not collect sensitive data or data from minors.

Browsing data: the site uses no tracking cookies and no third-party analytics. It only stores your theme (light/dark) and language preference in your browser.

To respond to your request and get in touch about investment opportunities, projects seeking capital or general enquiries.

To send you a confirmation email when we receive your message.

To keep an internal record of conversations with investors and businesses so we can follow up properly.

With your permission, to send occasional updates about Xbien and the Colombian market. You can unsubscribe at any time.

We process your data with your prior, express and informed consent, which you give by ticking the consent box on each form, in accordance with Colombia's Law 1581 of 2012, Decree 1377 of 2013 and related regulations.

If you write to us from outside Colombia, we apply the same safeguards and, where applicable, those of your own jurisdiction (for example, the GDPR in the European Union).

We do not sell or transfer your data to third parties. It is only processed by the technology providers we need to run the site, under contracts that require them to protect it: web hosting (Vercel), database (Supabase) and email delivery (Resend).

These providers may process data on servers outside Colombia, mainly in the United States and Brazil. By accepting this policy you authorize that international transfer.

We will only disclose data to authorities when required by law.

We keep your data while there is an active relationship with you or a legitimate follow-up interest, and for up to five years after the last contact, unless you request deletion earlier or a legal obligation requires us to keep it longer.

As the data subject you may, at any time and free of charge: access, update and correct your data; request proof of the consent given; be informed about how it has been used; withdraw consent and request deletion; and file complaints with Colombia's Superintendencia de Industria y Comercio (SIC) for breaches of the law.

To exercise them, write to us through the contact form or reply to any Xbien email stating your request. We answer enquiries within ten (10) business days and claims within fifteen (15) business days, as required by law.

We apply reasonable technical and organizational measures to protect your data: encryption in transit (HTTPS), database access restricted to the server and authorized staff, and providers with recognized security certifications.

We may update this policy to reflect legal changes or changes in our services. The current version will always be published on this page with its update date. If a change is material, we will notify you by email before it takes effect.