Ecadrio · 2026
Privacy Policy
Last updated: 12 January 2026
At Ecadrio S.A.S. ("Ecadrio", "we") we respect your privacy and protect your personal data under Ecuador's Organic Law on the Protection of Personal Data (LOPDP) and other applicable regulations. This policy explains what data we collect, the purposes for which we collect it, how long we keep it and what your rights are.
1. Data controller
Ecadrio S.A.S., Tax ID 1793219847001, with registered office at Av. República del Salvador N34-183 y Suiza, Mansión Blanca Building, 6th floor, Quito, Ecuador. Data Protection Officer (DPO) contact email: [email protected].
2. Data we collect
We collect: (i) identification data (first and last name, national ID or passport, date of birth); (ii) contact data (email, phone, address); (iii) financial and patrimonial data required for KYC/AML compliance; (iv) browsing data (IP address, device, cookies); (v) any data you voluntarily provide, for example when subscribing to our newsletter.
3. Purposes
We process your data to: (i) subscribe you to the newsletter and send you Ecadrio commercial communications; (ii) create and manage your investor account; (iii) comply with legal obligations before UAFE, SRI and SCVS; (iv) prevent fraud and money laundering; (v) improve our services through web analytics.
4. Legal basis
Applicable legal bases are: your explicit consent (newsletter, marketing), contract performance (investor account), compliance with legal obligations (KYC, AML) and legitimate interest (security and service improvement).
5. Retention period
We keep data for as long as needed to meet the stated purposes and afterwards for the legal retention periods (up to ten years for tax and AML matters under current Ecuadorian law). After that, data is deleted or anonymised.
6. Recipients
Your data may be shared with: (i) competent public bodies (SRI, UAFE, SCVS) when required by law; (ii) technology providers (hosting, email, analytics) acting as processors under contract; (iii) fiduciary entities and notaries involved in the operation. We do not sell data to third parties.
7. International transfers
Some providers (cloud hosting, email, analytics) may be located outside Ecuador. In those cases we require appropriate contractual safeguards in line with articles 55 et seq. of the LOPDP.
8. Your rights
You may exercise your rights of access, rectification, deletion, objection, portability, restriction and not to be subject to automated decisions, by writing to [email protected] with a copy of your ID. If you feel your rights have not been honoured you may file a complaint with Ecuador's Superintendence for the Protection of Personal Data.
9. Security
We apply reasonable technical and organisational measures (encryption in transit and at rest, access control, activity logs, staff training) to protect your data from unauthorised access, loss or alteration.
10. Changes to this policy
We may update this policy. The current version will be posted on this page along with the last-updated date. If changes are material we will notify you by email.