Personal data processing policy

Last updated: October 8, 2026

This is a courtesy translation. In case of any difference, the Spanish version prevails. Read in Spanish

This policy explains how we process the personal data of those who use Corplat Cursos, in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other rules that amend or complement them.

1. Data controller

• Corplat, NIT 1088328824
• Email: info@corplat.com
• Phone: 3054373602

2. What data we process

If you have an account

• Name, email, profile photo (if you upload one or sign in with Google) and preferred language.
• Your password, which we store irreversibly encrypted: nobody can read it, not even Corplat.
• If you sign in with Google or Facebook: the identifier of your account in that service, your name, email and photo.

If you buy or take courses

• Your purchases (course, price, date and payment status). Your card or bank details are received by MercadoPago; Corplat does not know them.
• Your progress in each course, your certificates, and the questions, answers and reviews you publish.

If you apply to be an instructor

• Public profile (name, headline, biography, photo, links), career, education, certifications, sample video and portfolio links.
• Your résumé and certificates as PDF or image, your country and your phone.
• The details to pay you (payment method, bank, account or phone number, holder and ID), which we store encrypted.

Technical data

• Cookies strictly necessary for the platform to work: the session, protection against form forgery and your language. We do not use third-party advertising or analytics cookies.
• Technical logs (IP address, date and time) for the security of the service.

We do not request sensitive data as defined in article 5 of Law 1581 of 2012.

3. What we use it for

• Creating and managing your account and letting you sign in.
• Processing your purchases, giving you access to courses and sending you receipts.
• Recording your progress and issuing and verifying your certificates.
• Publishing your questions, answers and reviews, with your shortened name.
• Evaluating instructor applications, publishing the profile of approved instructors and paying them their earnings.
• Sending you emails about your account, purchases, courses and activity that concerns you (answers to your questions, decisions about your courses).
• Handling your inquiries and complaints, preventing fraud and complying with legal, accounting and tax obligations.

We do not sell or rent your personal data.

4. Who we share it with

To provide the service we work with these providers, which process data on our behalf:

• MercadoPago: payment processing.
• Bunny.net: storage and streaming of course videos.
• Google: Google sign-in (if you choose it) and email delivery.
• The server provider where the platform is hosted.

Some of these providers may store information outside Colombia. By accepting this policy you authorize that transfer, which is made with providers that offer adequate levels of protection. Instructors see the shortened name of their students in their sales, reviews and questions. We may also hand over data to authorities when a rule or a court order requires it.

5. Your rights

As the data subject you have the right to:

• Know, update and correct your personal data.
• Request proof of the authorization you gave us.
• Be informed about the use we have made of your data.
• Revoke the authorization and request the deletion of your data, when there is no legal or contractual duty to keep it.
• Access your personal data free of charge.
• File complaints with the Superintendence of Industry and Commerce, after completing the inquiry or complaint procedure with us.

You can update your name, photo and language at any time from "My account".

6. How to exercise them

Write to info@corplat.com from your account's email, stating your name, what you request and, if it is a complaint, the facts behind it.

• Inquiries: we answer them within ten (10) business days of receipt, extendable by five (5) more business days if needed, informing you of the reason.
• Complaints (correction, update, deletion or breach): we handle them within fifteen (15) business days, extendable by eight (8) more business days, informing you of the reason.

7. Security

We protect your data with reasonable technical and organizational measures: encrypted connection, irreversibly encrypted passwords, encrypted bank details, instructors' documents in private storage and access restricted to the team that needs it.

8. Retention

We keep your data while you have an account and, afterwards, for as long as accounting, tax and consumer protection rules require, or as needed to handle claims.

9. Minors

The platform is intended for adults. Minors may only use it with the authorization of their legal representative, who exercises their rights.

10. Validity and changes

This policy is in force from the date shown at the top. If we change it substantially, we will notify you by email before applying the changes. Your data will be processed for as long as necessary for the purposes described.