Privacy Policy
Last updated: January 15, 2026
At Hepitosarp S.A.S. (hereinafter "Hepitosarp", "we" or "the Platform"), we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy describes how we collect, use, store, and protect your personal information when you access our website hepitosarp.com and use our real estate crowdlending services.
1. Data Controller
The data controller responsible for your personal data is Hepitosarp S.A.S., domiciled at Av. 12 de Octubre N24-562, Edificio Plaza del Sol, Office 801, Quito, Pichincha, Ecuador. RUC: 1792847563001. You can contact us at privacy@hepitosarp.com.
2. Data We Collect
We collect the following types of information: (a) Identification data: full name, email address provided voluntarily through our contact form. (b) Technical data: IP address, browser type, operating system, pages visited, time spent, and technical cookies necessary for site operation. (c) Communication data: the content of messages you send us through the contact form or by email.
3. Purpose of Processing
We use your personal data to: (a) Respond to your inquiries and information requests about real estate crowdlending. (b) Provide you with relevant information about our services and investment opportunities. (c) Improve user experience on our platform through navigation analysis. (d) Comply with legal and regulatory obligations applicable in Ecuador.
4. Legal Basis for Processing
The processing of your data is based on: (a) Your explicit consent when completing the contact form. (b) Our legitimate interest in improving our services and communicating with potential investors. (c) Compliance with legal obligations under Ecuador's Organic Law on Personal Data Protection (LOPDP).
5. Data Retention
We will retain your personal data for the time necessary to fulfill the purposes described, and in any case, for the legally established periods. Contact data is retained for a maximum of 24 months from the last interaction, unless there is an active contractual relationship.
6. Data Subject Rights
In accordance with the LOPDP, you have the right to: (a) Access your personal data. (b) Rectify inaccurate or incomplete data. (c) Delete your data when no longer necessary. (d) Object to processing in certain circumstances. (e) Request data portability. To exercise these rights, write to us at privacy@hepitosarp.com.
7. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. This includes data encryption in transit (TLS/SSL), access controls, and periodic security reviews.
8. International Transfers
Your data may be stored on servers located outside Ecuador, in jurisdictions that offer an adequate level of data protection. In such cases, we implement appropriate contractual safeguards to ensure the protection of your information.
9. Changes
We reserve the right to update this Privacy Policy. Any significant changes will be communicated through our website. We recommend reviewing this page periodically.