Skip to content

Legal

Privacy policy

Da2 Agency 360, a brand of DA2GROUP S.A.S., protects the personal data of clients, prospects, partner agencies, suppliers and visitors. This policy follows Colombian Law 1581 of 2012 and Decree 1377 of 2013 and, where they apply, the EU General Data Protection Regulation (GDPR) and California privacy law (CCPA/CPRA).

1. Data controller

  • DA2GROUP S.A.S., owner of the Da2 Agency 360 brand

  • Colombian tax ID (NIT): 902.071.318-2

  • Address: Carrera 32B # 1H-69, Bogotá D.C., Colombia

  • Privacy contact: contacto@da2group.com

  • Website: da2agency360.com

2. What we collect

  • Contact details: name, company, role, email, phone, country and website.

  • What you tell us: your request, chat messages and files you attach.

  • Digital Presence Score: the website and social profiles you submit, the public results of the audit and, if you request the full report, your email.

  • Commercial data: proposals, contracts, invoices and payment status.

  • Platform data: when an agency or client uses the Agencia 360 platform, the content, calendars, approvals and reports they upload.

  • Browsing data: pages visited, language and device, measured without identifying you (see the Cookie policy).

3. Why we use it and on what legal basis

  • To answer requests, run audits and prepare proposals — steps you ask for before a contract.

  • To provide our services and the platform — performance of a contract.

  • To send marketing content and invitations — your consent, which you can withdraw at any time.

  • To keep the website and platform secure and to produce statistics that do not identify you — our legitimate interest.

  • To meet accounting, tax and legal obligations — legal obligation.

4. When we act on behalf of our clients

When we manage a client's social media, reviews or campaigns, or an agency uses our platform, the data of their own customers and followers belongs to them: we act as a processor, follow their instructions and our contract, keep it confidential and do not use it for our own purposes.

5. Who we share it with

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share it only with providers that help us operate and act as processors under contract and confidentiality: cloud hosting (mainly in the European Union), email, messaging, the social networks you ask us to publish on, and AI model providers that power the chat and content tools (in the United States). We also share data with authorities when the law or a court order requires it.

6. International transfers

We are based in Colombia and work with providers in the European Union and the United States. Transfers are made under contracts that require adequate protection, including the European Commission's standard contractual clauses for data from the European Economic Area, and as allowed by Colombian Law 1581 of 2012.

7. How long we keep it

We keep data while it is needed for its purpose, while our relationship lasts, and for the periods required by accounting, tax and commercial rules. Platform data is returned or deleted when the contract ends, as the client instructs.

8. Your rights

  • Access, correct and update your data, and get a copy in a portable format.

  • Delete your data, or restrict or object to its use, including for marketing.

  • Withdraw your consent at any time, without affecting what was done before.

  • Not to be subject to decisions based solely on automated processing with legal or similarly significant effects.

  • California residents: know what we collect and why, delete, correct, and opt out of the sale or sharing of personal information (we do neither), without being discriminated against for exercising these rights.

  • Complain to a data protection authority: in Colombia the Superintendence of Industry and Commerce (SIC), in the EU your local authority (in Spain, the AEPD).

9. How to make a request

Write to contacto@da2group.com with your name, what you are asking for and how to reach you. We may ask you to verify your identity. Colombian law: we answer queries within 10 business days and complaints within 15 business days (extendable as the law allows). GDPR: within one month. California: within 45 days.

10. Children

Our services are aimed at businesses and adults. We do not knowingly collect data from anyone under 18; if we find any, we delete it.

11. Security

We apply technical, human and administrative measures to prevent loss, unauthorized access or misuse of data, described in Information security. If an incident affects personal data, we notify the competent authority and, when required, the people affected.

12. Changes

We publish any significant change on this page before it applies and, if the purposes change, we ask for your consent again. Last updated: October 26, 2026.

Privacy policy | Da2 Agency 360