Personal Data Processing Policy

T.I. Cargo Services S.A.S.
Version 1.0 · Effective from its publication on the website: October 23, 2026

This policy explains how T.I. Cargo Services S.A.S. collects, uses, stores and protects the personal data of customers, suppliers, business contacts and website visitors, in compliance with Colombian Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Decree 1074 of 2015).

1. Data controller

Company name: T.I. Cargo Services S.A.S.
Tax ID (NIT): 900.271.168-5
Address: Carrera 106 N. 15-25, Bodega 8 Lote 84, Zona Franca, Bogotá D.C., Colombia
Phone: +57 601 742 9455
WhatsApp: +57 320 347 4955
Website: https://www.tilogistics.com (form at /contact)
Business hours: Monday to Friday, 8:00 to 17:00 (Colombia time)
Area responsible for data protection: Management

T.I. Cargo Services S.A.S. is a freight agent (agencia de carga) with a DIAN resolution. It coordinates its customers' customs processes with authorized customs agencies.

2. Basic definitions

• Personal data: any information that identifies or can identify an individual (for example, name, phone number or email address).
• Data subject: the individual the data belongs to.
• Processing: any operation on the data: collection, storage, use, circulation or deletion.
• Authorization: the data subject's prior, express and informed consent to process their data.
• Controller: whoever decides on the database and the processing (in this case, T.I. Cargo Services S.A.S.).
• Processor: whoever processes data on behalf of the controller.
• Sensitive data: data affecting a person's privacy or whose misuse may lead to discrimination (for example, health, ethnic origin, political or religious views, biometric data).
• Transfer: sending data to another controller, inside or outside Colombia.
• Transmission: sharing data with a processor so it can process it on the controller's behalf.

3. Principles we apply

We process data under the principles of Law 1581 of 2012: legality, purpose, freedom, accuracy/quality, transparency, restricted access and circulation, security and confidentiality. In practice, we only use data for the stated purposes, request authorization when the law requires it, keep data up to date, share it only when necessary and protect it with reasonable measures.

4. Data we process

a) Website quote and contact form: name, company, email, phone/WhatsApp, type of operation, transport mode, route (origin and destination), cargo type and the message you write.

b) WhatsApp conversations and phone calls: phone number, profile name and the content of the messages you send us.

c) Customers and suppliers (freight operations): contact details of representatives and employees; shipper and consignee data; and information contained in the documents needed for transport and customs coordination (for example, commercial invoices, packing lists, transport documents, identification documents and supporting documents required by authorities).

d) Accounting and tax data: as needed to invoice, pay and meet legal obligations.

e) Website browsing data: technical information collected through cookies, as explained in section 14.

5. Purposes

We use the data to:

1. Answer quote requests, inquiries and messages.
2. Provide the contracted international freight and logistics services.
3. Coordinate customs processes with authorized customs agencies.
4. Share the necessary information with carriers, airlines, shipping lines, freight agents abroad, customs agencies and authorities (such as DIAN), as required to perform the service.
5. Track shipments and inform customers about the status of their operation.
6. Invoice, manage payments and meet legal, accounting, tax and customs obligations.
7. Respond to requests from competent authorities.
8. Operate, secure and measure website usage in aggregate (see section 14).

We do not use your data to send advertising or marketing communications.

6. Who we share data with

Because of the nature of international transport, performing the service requires sharing data with the following categories of third parties, only to the extent necessary:

• Road carriers, airlines and shipping lines.
• Freight agents and correspondents in the country of origin or destination.
• Authorized customs agencies.
• Authorities such as DIAN and other entities when required by law.
• Technology providers that serve us (for example, website hosting and communication tools), acting as processors.

We do not sell or rent personal data.

7. International transfers and transmissions

Since we provide international freight services, some data must be sent to third parties located outside Colombia (agents, carriers and authorities in the country of origin, transit or destination). These transfers take place because they are necessary to perform the transport contract or pre-contractual steps requested by the data subject, under the exceptions of article 26 of Law 1581 of 2012, or with the data subject's authorization. Some technology providers may store information on servers outside Colombia; in those cases we require adequate confidentiality and security conditions.

8. Authorization

We request your prior, express and informed authorization, for example through the consent checkbox on the website form, in writing, or through unequivocal conduct (such as messaging us on WhatsApp to request a quote after being shown the privacy notice). We keep proof of the authorization.

Authorization is not required in the cases provided by law, for example: information requested by an authority in the exercise of its duties, public data, or medical or health emergencies.

9. Sensitive data and minors

We do not intentionally collect sensitive data or data of children and adolescents. If, due to the nature of a document, we receive any sensitive data, we will only process it when necessary for the service or required by law, and you are not obliged to provide it. If a minor sends us data, we will delete it once detected, unless there is a legal basis to keep it.

10. Data subject rights

Under article 8 of Law 1581 of 2012, you have the right to:

1. Know, update and correct your data.
2. Request proof of the authorization given, except where it is not required.
3. Be informed, upon request, about how your data has been used.
4. File complaints with the Superintendence of Industry and Commerce (SIC).
5. Revoke the authorization and/or request deletion of your data, where there is no legal or contractual duty to keep it.
6. Access your personal data free of charge.

These rights may be exercised by the data subject, their successors, representative or attorney.

11. How to submit inquiries and complaints

Service channels (Monday to Friday, 8:00 to 17:00, Colombia time):

• Website form: https://www.tilogistics.com/contact — select or write "Data protection" (Protección de datos) in the message.
• WhatsApp: +57 320 347 4955.
• Phone: +57 601 742 9455.
• Written communication addressed to T.I. Cargo Services S.A.S. – Data Protection, Carrera 106 N. 15-25, Bodega 8 Lote 84, Zona Franca, Bogotá D.C., Colombia.

Area in charge: Management.

Your request should include: full name, ID document, a way to reply to you, a clear description of your request and, for complaints, any supporting documents. We may verify your identity before responding.

Inquiries (to learn what data we hold and how we use it): we answer within a maximum of 10 business days from receipt. If that is not possible, we will tell you why and give a new date, no later than 5 additional business days.

Complaints (correction, update, deletion, revocation or alleged non-compliance):

• If the complaint is incomplete, we will ask you to complete it within 5 business days. If 2 months pass without your reply, the complaint will be deemed withdrawn.
• Once complete, we will flag the record as "complaint in process" within 2 business days.
• We answer within a maximum of 15 business days from the day after receipt. If that is not possible, we will tell you why and give a new date, no later than 8 additional business days.

Complaint to the SIC: before going to the Superintendence of Industry and Commerce, you must first complete the inquiry or complaint process with us.

12. Information security

We apply reasonable technical, human and administrative measures to protect data against loss, unauthorized consultation, use or access, for example: access restricted to staff who need it, password use, and confidentiality duties for employees and providers. No system is completely infallible, but we review these measures periodically.

13. Data retention

We keep data for as long as needed for the purposes described, for the duration of the business relationship and for the periods required by applicable legal, accounting, tax and customs rules. After that, data will be deleted or anonymized.

14. Cookies and website analytics

Our website runs on the Wix platform, which uses cookies (small files stored in your browser):

• Essential and functional cookies: needed for the site to work properly and securely (for example, to load pages, submit forms and protect the site).
• Analytics cookies: allow us to measure visits and site usage in aggregate (for example, number of visits or most-viewed pages), through the platform's statistics tool, in order to improve the site.

You can view, block or delete cookies in your browser settings. If you block essential cookies, some site features may not work properly.

15. Data protection authority

The Superintendence of Industry and Commerce (SIC), through its Delegation for the Protection of Personal Data, is the authority that oversees compliance with the law in Colombia (www.sic.gov.co).

16. Changes to this policy

We may update this policy. Material changes will be published on the website before they apply and, where they affect the processing purposes, we will request new authorization if required by law.

17. Effective date

This policy (version 1.0) is effective from its publication on the website, on October 23, 2026. Databases will remain in force for as long as necessary to fulfill the purposes described and applicable legal obligations.

Privacy notice

T.I. Cargo Services S.A.S. (NIT 900.271.168-5), located at Carrera 106 N. 15-25, Bodega 8 Lote 84, Zona Franca, Bogotá D.C., Colombia, phone +57 601 742 9455, as data controller, informs you that the personal data you provide through the website form, WhatsApp, phone or in the course of a freight operation will be used to answer quotes, provide transport and logistics services, coordinate customs processes with authorized customs agencies, share the necessary information with carriers, airlines, shipping lines, agents abroad, customs agencies and authorities (including outside Colombia, when necessary to perform the service), and meet legal obligations. You are not required to answer questions about sensitive data or data of minors. You can know, update, correct and delete your data, and revoke your authorization, through the form at https://www.tilogistics.com/contact (indicating "Data protection"), WhatsApp +57 320 347 4955, phone +57 601 742 9455 or in writing at the address above. The full Personal Data Processing Policy is available at https://www.tilogistics.com/en/politica-de-datos.