Habeas Data Policy

1. Purpose

This policy explains how individuals may exercise their rights under Colombian data protection law.

2. Rights of Data Subjects

Under Law 1581 of 2012, individuals have the right to:

• Know whether their data is being processed
• Access their personal data
• Update or correct inaccurate data
• Request deletion when applicable
• Revoke authorization when applicable

3. Types of Requests

A. Inquiries (Consultas)

Requests to access personal data.

Response time:
10 business days.
If additional time is needed, up to 5 additional business days.

B. Claims (Reclamos)

Requests for correction, updating, deletion, or reporting non-compliance.

Response time:
15 business days.
If additional time is required, up to 8 additional business days.

If incomplete, the claimant will be notified within 5 business days.

4. How to Submit a Request

Email: [PRIVACY@PLASTICSURGEONS.COM.CO]
Subject Line: Habeas Data Request

Include:

• Full name
• Identification number
• Clear description of the request
• Supporting documentation

If acting on behalf of another person, proof of authorization is required.

5. Escalation

If unsatisfied with our response, individuals may file a complaint with the Superintendence of Industry and Commerce (SIC), after completing the internal request process.