Data Privacy Policy

This is the Data Privacy Policy (the "Policy") of WriterTek ("WriterTek," "the Company," or "the Data Controller"), which provides you with the relevant information about the processing of Personal Data that we carry out through our website and in the course of providing our medical affairs, scientific writing, and consulting services to the pharmaceutical and healthcare industry, in accordance with Colombian Law 1581 of 2012, Decree 1074 of 2015 (which compiled Decree 1377 of 2013), and other applicable Colombian data protection regulations.

1. Identification of the Data Controller

Below are the details of the Data Controller responsible for the processing of Personal Data:

2. Definitions applicable to this Policy

For the purposes of this Policy, the following terms shall be understood in accordance with the legal definitions of Law 1581 of 2012 and Decree 1074 of 2015. In the event of any contradiction between these definitions and those contained in applicable law, the legal definitions shall prevail.

• Authorization: the Data Subject's prior, express, and informed consent to carry out the Processing of their Personal Data.
• Privacy notice: communication addressed to the Data Subject informing them of the existence of this Policy, how to access it, and the purposes of the Processing of their Personal Data.
• Database: an organized set of Personal Data subject to Processing by WriterTek.
• Personal Data: any information linked to, or that can be associated with, an identified or identifiable natural person, such as name, email address, phone number, company, and job title.
• Sensitive Data: data that affects the Data Subject's privacy or whose misuse may lead to discrimination, such as racial or ethnic origin, political affiliation, religious or philosophical beliefs, membership in unions or social organizations, and data concerning health, sexual life, and biometric data. WriterTek does not request or collect this type of data through its website.
• Data Processor: a natural or legal person who, on behalf of WriterTek, carries out the Processing of Personal Data (for example, providers of hosting, email, messaging, or meeting-scheduling services).
• Data Controller: a natural or legal person who decides on the Database and/or the Processing of Personal Data; for the purposes of this Policy, WriterTek.
• Data Subject: a natural person whose Personal Data is subject to Processing by WriterTek, whether a client, prospective client, supplier, contractor, or website visitor.
• Processing: any operation performed on Personal Data, such as collection, storage, use, circulation, transmission, transfer, or deletion.
• Transmission: the communication of Personal Data by WriterTek to a Data Processor, within or outside Colombia, for the latter to carry out Processing on behalf of WriterTek.
• Transfer: the sending of Personal Data by WriterTek to a recipient who, in turn, acts as a Data Controller, within or outside the country.

3. Purposes of the Processing of Personal Data

WriterTek processes Personal Data according to the interest group to which the Data Subject belongs and their relationship with the Company, as described below.

3.1. General purposes, applicable to all Data Subjects

• Recording Personal Data in WriterTek's systems and platforms (contact form, email, WhatsApp, meeting-scheduling calendar).
• Responding to inquiries, quote requests, and messages received through the "Contact Us" form, WhatsApp, or email.
• Scheduling meetings or diagnostic calls through tools such as Google Calendar or similar.
• Sending communications related to the business relationship, including information about services, project follow-up, and billing.
• Informing about substantial changes to this Policy.
• Handling petitions, complaints, and claims submitted by Data Subjects.
• Complying with legal, accounting, tax, or regulatory obligations applicable to WriterTek.
• Any other purpose expressly authorized by the Data Subject at the time their data is collected.

3.2. Clients and prospective clients (website contact form)

Through the "Contact Us" page, WriterTek collects data such as full name, company or laboratory, job title, email address, phone/WhatsApp number, service of interest, and the message or project description. This data is processed for the following purposes:

• Evaluating the request and preparing a personalized quote for the service of interest (scientific evidence mapping, medical/technical dossier, scientific articles and manuscripts, medical presentations, medical Q&A, regulatory claims matrices, training, digital educational content, AI opportunity assessment, or experiential learning sessions, among others).
• Managing the business relationship and following up on contracted projects, including checkpoints, deliverables, and billing.
• Maintaining communication by email, phone, or WhatsApp regarding the status of requests or projects.
• Sending information about new services, content, or news from WriterTek, when the Data Subject has authorized it.

3.3. Suppliers and contractors

• Managing the contractual relationship, including payments, billing, and compliance with obligations.
• Evaluating the quality of services provided to WriterTek.
• Providing or requesting information of general or commercial interest related to the contractual relationship.

3.4. Website visitors and blog / newsletter subscribers

• Managing voluntary subscriptions to WriterTek's blog or newsletter.
• Analyzing website usage through tools such as Google Analytics and Google Search Console, for statistical purposes and site improvement.
• Enabling direct WhatsApp chat when a visitor clicks the corresponding floating button.

In all cases, sensitive Personal Data is not requested through the website. If, in the course of a specific project, it becomes necessary to process additional information, WriterTek will request the corresponding prior, express, and informed authorization.

4. Rights of Personal Data Subjects

In accordance with Article 8 of Law 1581 of 2012, Data Subjects may exercise habeas data rights against WriterTek in order to:

• Know, update, and rectify their Personal Data held by WriterTek, particularly when such data is partial, inaccurate, incomplete, fragmented, or misleading.
• Request proof of the authorization granted to WriterTek, except where the law exempts this requirement.
• Be informed by WriterTek, upon request, about the use given to their Personal Data.
• File complaints with the Superintendencia de Industria y Comercio (Colombia's data protection authority) for violations of Law 1581 of 2012, after first filing a direct claim with WriterTek.
• Revoke authorization and/or request the deletion of data, when Processing fails to respect constitutional and legal principles, rights, and guarantees.
• Access their Personal Data free of charge, at least once a month and whenever substantial modifications are made to this Policy.

5. Department responsible for handling inquiries, petitions, and claims

Data Subjects may exercise their rights by contacting WriterTek through the following channel:

indicating in the subject line "Habeas data – right of access or inquiry" or "Habeas data – complaint or claim," as applicable.

6. Procedure for submitting inquiries and claims

6.1. Inquiries

The Data Subject may consult their Personal Data free of charge by submitting a written request to WriterTek that includes: the Data Subject's full name, identification document, the specific request, a physical or electronic address for notifications, and the requester's signature. WriterTek will resolve the inquiry within a maximum of ten (10) business days from receipt. When it is not possible to address it within that term, the interested party will be informed of the delay and the date on which it will be addressed, which may not exceed the five (5) business days following the expiration of the first term.

6.2. Claims

The Data Subject may file a claim by submitting a written request to WriterTek, indicating: full name, identification document, description of the facts, the specific request (correction, deletion, or revocation of authorization), contact address, and signature. If the claim is incomplete, the interested party will be asked to correct it within the following five (5) business days; if two (2) months pass without a response, the claim will be considered withdrawn. WriterTek will resolve the claim within a maximum of fifteen (15) business days, extendable by up to eight (8) additional business days, providing timely notice of the reasons for any delay.

7. Transfer and Transmission of Personal Data

In the course of providing its services, WriterTek may transmit Personal Data to Data Processors that provide technology services (for example, hosting, cloud storage, email, scheduling tools such as Google Calendar, messaging such as WhatsApp, and marketing tools such as MailChimp or similar), who must comply with this Policy and with the corresponding security and confidentiality measures.

Since WriterTek provides remote services throughout Latin America and other international markets, Personal Data may be transmitted or, where applicable, transferred to third parties located within or outside Colombia. Any international Transfer will be carried out only to countries with adequate levels of data protection, or with the Data Subject's prior express and informed authorization when the destination country does not have such a rating.

8. Use of cookies and tracking technologies

WriterTek's website uses first-party and third-party cookies (such as Google Analytics and Google Search Console) for statistical analysis, traffic measurement, and improving the browsing experience. Users may accept, block, or delete these cookies at any time through their browser settings. Disabling cookies does not prevent browsing the site, although it may affect some functionality.

9. Links to third-party pages

WriterTek's website may contain links to third-party platforms (for example, social media, WhatsApp, or Google Calendar). The relationship between the visitor and such third parties is independent of the relationship between WriterTek and the Data Subject, so we recommend reviewing the privacy policies of each of these sites.

10. Processing of minors' data

WriterTek's services are aimed exclusively at professionals, companies, and institutions in the healthcare and pharmaceutical sector, and are not directed at minors. WriterTek does not knowingly collect Personal Data from minors through its website.

11. Term and modifications to the Policy

This Policy takes effect upon its publication on the website writertek.co on July 15, 2026. WriterTek may modify it at any time to adapt it to regulatory changes or to its operations; any substantial change will be communicated to Data Subjects through the registered contact channels or through a notice published on the website.

Personal Data collected by WriterTek will be retained only for as long as necessary to fulfill the purposes described in this Policy and applicable legal, accounting, or contractual obligations, without prejudice to the Data Subject's right to request its deletion under the terms of Law 1581 of 2012.