Legal
Privacy policy and processing of personal data
How we collect, use and protect your personal data, and how to exercise your rights.
How we collect, use and protect your personal data, and how to exercise your rights.
Effective: April 1, 2025 · Last updated: August 24, 2026 · Reviewed and approved by legal counsel in Colombia and the United States.
This Privacy Policy explains how SCITIS collects, uses, discloses, retains, and protects personal information through its website, contact and recruitment channels, and related business communications.
SCITIS operates through two companies. The company responsible for processing your personal information depends on where you are located when you interact with us, unless a different entity is identified at the point of collection.
| Your location | Responsible entity (controller) |
|---|---|
| United States | Scitis LLC A company organized under the laws of the State of Florida 3564 Avalon Park E Blvd, Orlando, FL 32828, United States +1 (786) 794-4652 | legal@scitisgroup.com |
| Outside the United States | Scitis Group S.A.S. NIT 900.959.913 Calle 3 Sur # 43A-52, Medellín, Antioquia 050021, Colombia +57 304 654 2584 | legal@scitisgroup.com |
The country field in our contact form helps us identify the responsible entity and apply the appropriate privacy requirements. The SCITIS entities may also support one another in responding to inquiries and delivering services, subject to applicable law and appropriate safeguards.
We do not request sensitive personal information through our general contact forms, such as information about health, racial or ethnic origin, sexual orientation, political or religious beliefs, or biometric data. Please do not include such information unless it is necessary and we have specifically asked you to provide it through an appropriate channel.
For individuals located in the United States, we process personal information for the purposes described in this Policy, including to respond to requests, take steps requested before entering into a business relationship, provide and administer services, maintain security, comply with law, and pursue legitimate business purposes that are consistent with your reasonable expectations. We seek consent where required by applicable law.
Where Colombian law applies, Scitis Group S.A.S. processes personal information in accordance with Law 1581 of 2012 and its implementing rules. Processing is generally based on the prior, express, and informed authorization of the data subject, unless an exception recognized by applicable law applies. Where authorization is collected electronically, we may retain evidence of when and how it was provided and the version of the notice or policy presented.
Marketing preferences are separate from an acknowledgment that you have read this Policy or from authorization needed to handle a request. Where we ask for marketing consent, the choice will not be preselected. You may unsubscribe at any time through the link in the message or by contacting legal@scitisgroup.com. Transactional or service-related communications may continue where appropriate.
We use cookies and similar technologies for essential website functions and to understand website use. We may use Google Analytics 4 or comparable analytics services, subject to our configuration, consent tools, and applicable law. These services may process device, usage, and online identifier information in the United States and other locations where they or their subprocessors operate.
SCITIS does not sell personal information for money. Whether a particular analytics or advertising technology constitutes a ‘sale,’ ‘sharing,’ or targeted advertising under an applicable U.S. state law depends on the technology’s actual configuration and the law that applies. Our Cookie Policy and any available consent controls describe the technologies currently used and your choices. If we introduce advertising, remarketing, or similar features, we will update our disclosures and controls as required.
For more information, see our Cookie Policy: https://www.scitisgroup.com/en/legal/cookies/.
We disclose personal information only as reasonably necessary for the purposes described in this Policy, including to the following categories of recipients:
Our providers may process information in the United States, Colombia, and other countries in which they or their subprocessors operate. Their specific processing locations may change over time.
Because SCITIS works with providers and affiliated operations in more than one country, personal information may be accessed, transmitted, transferred, stored, or otherwise processed outside the country where it was collected. Privacy and data protection laws in those locations may differ.
Where Colombian law applies, SCITIS will address international data transmissions and transfers in accordance with Law 1581 of 2012, Decree 1074 of 2015, applicable regulatory guidance, and any available statutory exceptions or required contractual arrangements. The legal characterization and safeguard used will depend on the recipient’s role and the circumstances of the disclosure. Counsel should validate this section against SCITIS’s actual vendor arrangements and data flows before publication.
If you do not become a client, we generally retain identifiable contact and lead information for up to two years after our last meaningful interaction with you, unless a shorter or longer period is required or permitted by law. A meaningful interaction may include a substantive communication, meeting, proposal, or other active business exchange; automated messages or passive website activity do not necessarily restart this period.
If we enter into a contractual relationship, we retain relevant information for the duration of that relationship and thereafter for as long as necessary to meet legal, accounting, tax, contractual, dispute-resolution, and recordkeeping obligations. Information relating to unsuccessful candidates may generally be retained for up to two years, subject to applicable employment and privacy law and any earlier valid deletion request.
Cookie and analytics retention periods may vary by technology and configuration and are described, where appropriate, in our Cookie Policy. We may retain aggregated or de-identified information where it can no longer reasonably be linked to an individual.
We use reasonable technical, administrative, and organizational safeguards designed to protect personal information. Depending on the system and risk, these measures may include encryption in transit, access controls based on role, enhanced authentication, confidentiality commitments, vendor oversight, backups, monitoring, and incident-response procedures.
No method of transmission or storage is completely secure. If a security incident affecting personal information occurs, we will investigate, mitigate, document, and provide notifications to affected individuals and competent authorities where required by applicable law.
Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; to withdraw consent or authorization; to object to or restrict certain processing; or to opt out of certain disclosures, targeted advertising, profiling, or marketing. These rights may be subject to exceptions and verification requirements.
Certain U.S. state privacy laws may provide additional rights to residents of those states when their applicability requirements are met. Where a law applies to SCITIS and your request, we will honor the rights and appeal procedures required by that law. This Policy does not make a categorical statement that a particular state law, including the California Consumer Privacy Act as amended or the Florida Digital Bill of Rights, does or does not apply in every circumstance.
Where Colombian law applies, you may have the right to know, update, and correct your personal information; request proof of authorization, except where authorization is not legally required; be informed about the use made of your information; submit complaints to the Superintendence of Industry and Commerce for violations of applicable law; withdraw authorization and/or request deletion where legally available; and access your personal information free of charge, as provided by law.
Email legal@scitisgroup.com and include your name, the right you wish to exercise, the personal information concerned, and sufficient detail for us to understand and respond to your request. We may ask for information reasonably necessary to verify your identity, authority, or relationship with SCITIS. An authorized representative may submit a request where permitted by law, subject to appropriate verification.
We will respond within the period required by the law applicable to your request. For requests governed by Colombian law, the following statutory framework generally applies:
| Request type | Initial response period | Permitted extension |
|---|---|---|
| Consultation — access or information about data held | Up to 10 business days from receipt | Up to 5 additional business days, with notice and reasons before the initial period expires |
| Claim — correction, update, deletion, or withdrawal | Up to 15 business days from the day after receipt | Up to 8 additional business days, with notice and reasons before the initial period expires |
If a request is incomplete, additional steps or timeframes permitted by applicable law may apply. We will not discriminate against you for exercising a privacy right protected by applicable law.
Our website and services are intended exclusively for businesses, organizations, and individuals who are at least 18 years old and acting in a professional capacity. They are not intended for minors, and SCITIS does not enter into contracts or establish business relationships directly with individuals under 18.
We do not knowingly collect personal information from minors through this website. If we become aware that we have received such information, we will take appropriate reasonable measures, including deleting it where appropriate, in accordance with applicable law.
Where Colombian law applies, SCITIS recognizes the special protection afforded to the personal information of children and adolescents and will comply with the enhanced legal requirements applicable to any exceptional processing of such information.
We may update this Policy from time to time to reflect changes in our practices, technologies, services, or legal obligations. We will update the ‘Last updated’ date and, where required by applicable law, provide additional notice or obtain consent for material changes.
For questions, privacy requests, or concerns, contact the responsible SCITIS entity listed in Section 1 or email legal@scitisgroup.com.
Where Colombian law applies, the competent data protection authority is the Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio). A complaint may be submitted to that authority after the applicable direct consultation or claim procedure with SCITIS has been exhausted, where required by law.