Habeas Data

01 Identity of the Data Controller

The entity responsible for the collection and processing of personal data is:

Alliance Contact Solutions acts as data controller in the terms established by Article 3 of Colombian Law 1581 of 2012, and is responsible for ensuring that any processing of personal data under its charge complies with the principles of legality, purpose, freedom, accuracy, transparency, restricted access, security, and confidentiality.

02 Purposes of Data Processing

Alliance Contact Solutions processes personal data exclusively for the following purposes:

• Responding to commercial inquiries and requests for information about our BPO and contact center services.
• Preparing and delivering technical and economic proposals to potential clients.
• Managing contractual relationships with clients and suppliers.
• Conducting recruitment and selection processes for candidates who apply to work with us.
• Sending communications of commercial interest, provided the data subject has given prior authorization.
• Complying with legal, regulatory, and contractual obligations applicable to our operations in Colombia and internationally.
• Improving the quality of our services and user experience on the website.
• Statistical analysis for internal planning and operational improvement purposes.

03 International Data Transfers

As a company providing services to international clients, particularly in the United States, Alliance Contact Solutions may transfer personal data to recipients located outside Colombia. Such transfers are subject to the following conditions:

• International transfers are carried out only when the recipient country provides an adequate level of data protection, or when appropriate safeguards are established through data transfer agreements.
• For operations involving U.S.-based clients or contacts, we comply with applicable federal regulations including the Telephone Consumer Protection Act (TCPA), which regulates telephone communications and requires prior written consent before contacting individuals via automated calls or text messages.
• We adhere to the CAN-SPAM Act for all commercial electronic communications directed to U.S. recipients, ensuring the right to opt out and proper identification of the sender.
• Data shared with third-party processors is governed by data processing agreements that impose equivalent data protection obligations.
• We do not sell, rent, or transfer personal data to third parties for their own commercial purposes without the explicit authorization of the data subject.

All international transfers are documented and registered in our internal records of processing activities, in compliance with Article 26 of Colombian Law 1581 of 2012.

04 Rights of Data Subjects

In accordance with Articles 8 and 21 of Colombian Law 1581 of 2012, all data subjects whose personal information is processed by Alliance Contact Solutions have the following rights:

05 Procedure to Exercise Rights

To exercise any of the rights described above, the data subject or their legal representative must submit a written request to Alliance Contact Solutions through the contact channel established in this policy. The request must include:

• Full name and identification document of the data subject.
• Description of the right or rights to be exercised.
• Supporting documentation, if applicable (e.g., proof of identity, legal representation).
• Contact information for receiving the response.

Requests will be processed within the following timeframes, in accordance with Colombian Law 1581 of 2012:

• Inquiries (Consultas): Response within ten (10) business days from receipt of the request. This term may be extended by five (5) additional business days when justified.
• Claims (Reclamos): Response within fifteen (15) business days from receipt. This term may be extended by eight (8) additional business days when justified, with prior notification to the data subject.

06 Contact Channel

All requests, inquiries, or claims related to the exercise of data protection rights must be submitted through the following official channel:

07 Validity and Updates

This Habeas Data Policy enters into force on the date of its publication on the Alliance Contact Solutions website and remains in effect indefinitely until replaced or revoked by a subsequent version.

Alliance Contact Solutions reserves the right to update or modify this policy at any time to reflect changes in applicable legislation, our operational practices, or regulatory recommendations. Any modifications will be published on the website with the date of the most recent update.

The continued use of our services or website after the publication of an updated version constitutes acceptance of the new terms of this policy. We recommend that data subjects review this document periodically.