Privacy and personal data processing policy

Last updated: August 18, 2026

This English version is provided for information purposes. In the event of any discrepancy, the Spanish version of this Policy shall prevail.

1. IDENTIFICATION OF THE DATA CONTROLLER

MG Global Logistics is responsible for processing the personal data collected through its website, forms, service channels, WhatsApp, email and other means used to provide its services.

Trade name: MG Global Logistics

Email: comercial@mggloballogistics.com

Contact phone: +57 310 876 9676

Scope of operation: Colombia, the United States, China and international operations.

Activity: end-to-end international trade solutions, international purchasing, sourcing, goods inspection, international transport, customs management, consolidation, warehousing, e-commerce logistics, operations financing, insurance and logistics consulting.

Hereinafter, for the purposes of this Policy, it shall be referred to as “MG GLOBAL LOGISTICS”.

2. PURPOSE OF THE POLICY

The purpose of this Policy is to establish the criteria, principles, procedures and measures applicable to the collection, storage, use, circulation, transmission, transfer, updating, retention and deletion of personal data processed by MG GLOBAL LOGISTICS.

MG GLOBAL LOGISTICS recognizes the importance of protecting the privacy of clients, prospects, suppliers, partners, company representatives, website users and any other persons whose personal data may be processed in the course of its activities.

3. LEGAL FRAMEWORK

This Policy is issued in accordance with Articles 15 and 20 of the Political Constitution of Colombia, Statutory Law 1581 of 2012, Decree 1377 of 2013, the provisions incorporated into Sole Regulatory Decree 1074 of 2015, and any other rules that amend, supplement or replace the Colombian personal data protection regime.

MG GLOBAL LOGISTICS will apply, among others, the principles of legality, purpose, freedom, accuracy, transparency, restricted access and circulation, security and confidentiality.

4. PERSONAL DATA WE MAY COLLECT

Due to the nature of the international trade and logistics operations carried out by MG GLOBAL LOGISTICS, different categories of information may be collected depending on the service contracted.

We may process identification data such as first name, last name, type and number of identification document, job title, the company to which the data subject belongs, and data of legal representatives or authorized persons.

We may also collect contact data such as telephone, mobile phone, WhatsApp, email, city, country and any other information necessary to maintain communication with the data subject.

In business operations we may process corporate data such as company name, tax identification number (NIT or equivalent), economic activity, information about suppliers, customers, manufacturers, contacts at origin or destination, and documentation related to commercial operations.

To provide logistics services, we may process data related to goods, suppliers, purchase orders, commercial invoices, packing lists, transport documents, ports and airports of origin or destination, pickup or delivery addresses, customs information, cargo traceability and any other documentation necessary to carry out an international operation.

When the user requests trade finance, financing, insurance or financial structuring services, MG GLOBAL LOGISTICS may request economic, commercial, banking, tax or financial information strictly necessary to analyze, manage or execute the requested service.

Communications with the company may also be retained, including messages sent through forms, email, WhatsApp, phone calls, quote requests, claims, support requests and commercial records related to the relationship between the parties.

Finally, while browsing the website, technical data may be collected such as IP address, browser, device, operating system, pages visited, date and time of access, traffic source and other identifiers used by analytics technologies or cookies.

5. PURPOSES OF PROCESSING

Personal data may be used to manage information and quote requests; identify client needs; prepare commercial proposals; contact prospects; negotiate and execute international purchases; locate and verify suppliers; coordinate goods inspections; consolidate cargo; arrange sea, air or land transport; manage customs procedures; coordinate warehousing, Smart Box, e-commerce and last-mile services; contract insurance; process claims; structure financing alternatives; manage payments related to operations; and track goods.

They may also be used to manage contracts, invoicing, accounting, accounts receivable, contractual compliance, document management, supplier control, customer service and the maintenance of business relationships.

MG GLOBAL LOGISTICS may process data to prevent fraud, identity theft, irregular operations, contractual breaches, and logistics or financial risks, and to comply with applicable legal, regulatory, tax, customs, administrative or judicial obligations.

Where the data subject has authorized it, MG GLOBAL LOGISTICS may use their data to send commercial information about services, news, logistics solutions, specialized content, campaigns, invitations, promotions or information related to international trade.

The data subject may request at any time that commercial communications stop being sent.

6. INTERNATIONAL TRADE OPERATIONS AND INFORMATION SHARING

Due to the international nature of the services offered, some operations require certain information to be communicated to third parties who participate directly in the logistics chain.

MG GLOBAL LOGISTICS may share only the necessary information with manufacturers, suppliers, logistics operators, freight forwarders, shipping lines, airlines, land carriers, depots, warehouses, port operators, airport operators, customs intermediaries, insurance companies, financial institutions, correspondents, international agents, technology companies and any other partners necessary to carry out the contracted operation.

MG GLOBAL LOGISTICS does not sell or trade personal databases to third parties.

Information will be provided to third parties only when there is a legitimate purpose related to the requested service, a contractual or legal obligation, authorization from the data subject, or another circumstance permitted by applicable law.

7. INTERNATIONAL TRANSFER AND TRANSMISSION OF DATA

MG GLOBAL LOGISTICS carries out international operations and may work with suppliers, agents and partners located outside Colombia. It currently has offices in Colombia, the United States and China, and operates in other international markets.

For this reason, when necessary to carry out an international trade operation, certain information may be transmitted or transferred internationally.

MG GLOBAL LOGISTICS will seek to ensure that such operations respect the principles and obligations set forth in the Colombian personal data protection regime and will apply the corresponding rules for international transfers or transmissions of information. To this end, it will observe the provisions of Law 1581 of 2012, Decree 1074 of 2015 and the principle of demonstrated accountability.

8. SENSITIVE DATA

MG GLOBAL LOGISTICS will not request sensitive data unless strictly necessary for a legitimate purpose related to the contracted service or where another legal basis exists for its processing.

Where information considered sensitive under the law must be requested, the data subject will be informed in advance that answering is optional, and the corresponding authorization will be obtained when required.

No data subject will be required to provide sensitive data when it is not essential for the requested operation or service.

9. DATA OF CHILDREN AND ADOLESCENTS

The services of MG GLOBAL LOGISTICS are mainly aimed at adults, business owners, company representatives and organizations.

MG GLOBAL LOGISTICS does not intend to deliberately collect personal information from minors through its website.

If, exceptionally, it becomes necessary to process information of a minor, their best interests, fundamental rights and the authorizations required by Colombian law will be respected.

10. AUTHORIZATION FOR PROCESSING

Except for the exceptions provided by law, MG GLOBAL LOGISTICS will obtain authorization from the data subject before carrying out processing that requires it.

Authorization may be obtained by physical or electronic means, web forms, email, WhatsApp, contracts, acceptance checkboxes, digital communications or any other mechanism that reasonably evidences the will of the data subject.

The authorization must allow the data subject to know what information will be processed and for what purpose. Authorization will always be prior, express and informed.

11. RIGHTS OF DATA SUBJECTS

In accordance with Colombian law, data subjects may:

  1. Know, update and rectify the personal data processed by MG GLOBAL LOGISTICS.
  2. Request information about how their data has been used.
  3. Request proof of the authorization granted, where legally applicable.
  4. Submit inquiries, requests and claims related to the processing of their information.
  5. Request the deletion of their data where legally appropriate.
  6. Revoke the authorization granted where legally applicable.
  7. Access their personal data that has been processed free of charge.
  8. File complaints with the Superintendence of Industry and Commerce (SIC) when they consider that the personal data protection regime has been violated, once the corresponding procedures before the controller have been exhausted, where required by law.

12. PROCEDURE FOR INQUIRIES AND CLAIMS

Data subjects may submit requests related to their personal data by writing to: comercial@mggloballogistics.com

Suggested subject line: Personal Data Protection Request – MG Global Logistics

The request must allow the data subject to be identified and clearly explain what is required: an inquiry, update, correction, deletion, revocation of authorization or any other matter related to their personal information.

Inquiries will be answered within the maximum legal term of ten (10) business days, subject to the extensions permitted by law when necessary.

Claims will be answered within the maximum legal term of fifteen (15) business days, likewise with the extensions provided by law where applicable. These terms correspond to the procedure established in Law 1581 of 2012.

13. INFORMATION SECURITY

MG GLOBAL LOGISTICS will adopt reasonable administrative, technical and organizational measures aimed at protecting personal data against loss, unauthorized access, alteration, disclosure, misuse or destruction.

Access to information shall be limited to employees, collaborators, suppliers and third parties who need to know it to perform a function related to the service.

However, no technological mechanism can absolutely guarantee the absence of risks associated with electronic systems or transmissions over the Internet.

14. DATA RETENTION

Personal data will be retained for the time reasonably necessary to fulfill the purpose for which it was collected, perform the contractual relationship, meet legal or regulatory obligations, resolve claims and keep the corresponding administrative, accounting, tax, customs or contractual records.

Once the purpose of processing has ended and there is no legal or contractual obligation requiring the information to be kept, MG GLOBAL LOGISTICS may proceed with its deletion, anonymization or blocking, as appropriate.

15. COOKIES AND BROWSING TECHNOLOGIES

The MG GLOBAL LOGISTICS website may use cookies and similar technologies necessary for its proper operation, security, traffic measurement, analytics, performance and improvement of the user experience.

Third-party technology services may also be used to measure visits, analyze aggregate behavior, and manage forms, communications or site features.

Users may delete or block certain cookies through their browser settings. Some site features may be limited as a result of such settings.

Where applicable law requires consent for certain categories of cookies, it must be obtained through the corresponding mechanism.

16. COMMUNICATIONS VIA WHATSAPP, EMAIL AND FORMS

When a user voluntarily contacts MG GLOBAL LOGISTICS via WhatsApp, email, forms or any other digital channel, they authorize the processing of the information provided in order to handle their request and continue the related communication.

The use of these channels does not imply unlimited authorization for commercial purposes other than those disclosed to the data subject.

17. FINANCIAL INFORMATION AND TRADE FINANCE

When a client requests solutions related to trade finance, financing of goods, freight, duties, taxes, insurance or financial structures, MG GLOBAL LOGISTICS may request additional information necessary to assess and process the operation.

This information may be shared with financial institutions, insurance companies, lenders or specialized partners only when necessary to analyze or execute the requested service and in accordance with the applicable authorizations and regulations.

The provision of a logistics service does not in itself imply the approval of financing, credit, insurance or any product offered by a third party.

18. SUPPLIER AND INTERNATIONAL CONTACT INFORMATION

Clients are responsible for ensuring that third-party information they provide to MG GLOBAL LOGISTICS —for example, data of suppliers, manufacturers, business contacts, consignees, recipients or representatives— may lawfully be used to carry out the operation.

MG GLOBAL LOGISTICS will limit the processing of such information to the activities reasonably necessary to provide its services.

19. CHANGES TO THE POLICY

MG GLOBAL LOGISTICS may update this Policy when there are regulatory changes, changes in its services, the incorporation of new technologies or relevant changes in its data processing procedures.

When a change materially affects the authorized purposes or the rights of data subjects, the information or authorization mechanisms required by applicable law will be adopted.

The current version will be available on the official website.

20. EFFECTIVE DATE

This Privacy and Personal Data Processing Policy of MG Global Logistics takes effect on August 18, 2026 and will remain in force for as long as the company processes personal data or until it is replaced by a later version.