Last updated: January 3, 2026
Privacy Policy
1. Data controller
The data controller is Nalvarof Capital Inmobiliario S.A.S., Tax ID 1793214860001, with registered office at Av. Naciones Unidas E7-95 and Shyris, Metropolitan Building, 12th floor, Quito, Ecuador. Contact us at hola@nalvarof.com.
2. Data we collect
We collect data you provide voluntarily in the subscription form (name and email address), as well as technical browsing data (IP address, browser type, operating system, visited pages and access date).
3. Purpose of processing
Data is used to send you educational information about real estate crowdlending, measure site usage, prevent fraud and fulfill legal obligations under the Organic Law on Personal Data Protection of Ecuador (LOPDP) published in Official Gazette Supplement 459.
4. Legal basis
Processing relies on your free and informed consent (Art. 7 LOPDP), the performance of a pre-contractual relationship, and compliance with legal obligations applicable in the Republic of Ecuador.
5. Retention
Newsletter data is retained while your subscription is active. Upon unsubscribing, data is deleted within 30 days at most, unless legally required otherwise.
6. Recipients
We may share data with technology service providers (cloud hosting, email delivery) acting as data processors under a signed contract and standards equivalent to those required by the LOPDP.
7. International transfers
Should we transfer data outside Ecuador, we will only do so to countries or providers with an adequate level of protection or through contractual clauses approved by the Ecuadorian Superintendency for Personal Data Protection.
8. Data subject rights
You may exercise the rights of access, rectification, update, deletion, objection, portability and not to be subject to automated decisions by writing to hola@nalvarof.com. In case of refusal or silence, you may file a claim before the Ecuadorian Superintendency for Personal Data Protection.
9. Security
We apply reasonable technical and organizational measures: TLS 1.3 in-transit encryption, role-based access control, audit logs and encrypted backups in South American data centers.
10. Policy updates
We may update this policy to reflect legal changes or operational improvements. The current version will be published at this same URL indicating the last update date.