Ecavalores
Privacy Policy
Last updated: January 5, 2026
1. Data controller
Ecavalores S.A.S., with Tax ID (RUC) 1793214567001 and registered office at Av. República del Salvador N35-84 and Suecia, Onix Building, 8th floor, Quito, Ecuador, is the controller of your personal data.
2. Data we collect
We collect identification data (name, ID, passport), contact data (email, phone, address), financial data required for KYC compliance and anti-money laundering, and technical browsing data (IP address, cookies, device type).
3. Purpose of processing
Your data is used to: (a) provide crowdlending services, (b) verify your identity, (c) comply with tax and UAFE obligations, (d) send commercial information if you have given consent, and (e) improve platform security and performance.
4. Legal basis
We process your data based on Ecuador's Organic Personal Data Protection Act (LOPDP), the Monetary and Financial Organic Code, and your explicit consent where applicable.
5. Third parties and transfers
We only share data with authorised entities: notary offices, the Property Registry, KYC verification providers, payment processors authorised by the Superintendency of Banks, tax authorities (SRI) and the Financial and Economic Analysis Unit (UAFE).
6. Retention period
We retain your data during the term of the contractual relationship and for ten (10) years afterwards, as required by Ecuadorian anti-money laundering regulations.
7. Your rights
You may exercise the rights of access, rectification, update, deletion, opposition, portability and withdrawal of consent by writing to privacidad@ecavalores.com. We will respond within a maximum of fifteen (15) business days.
8. Security
We apply TLS 1.3 encryption, two-factor authentication, annual ISO 27001 security audits and strict access controls in line with current Ecuadorian regulations.
9. Supervisory authority
If you believe your rights have not been respected, you may file a complaint with the Superintendency of Personal Data Protection of Ecuador, based in Quito.
10. Updates
We may update this policy. The current version will be published on this page along with its update date.