At CP&KRELL GROUP COLOMBIA S.A.S., your privacy is important to us. We are committed to handling personal information transparently, securely, and responsibly. This Privacy Policy explains how and why we collect, use, disclose, and safeguard personal information across our website, nearshore staffing, recruitment activities, and business operations.
We serve clients primarily in the United States and work with professionals in Colombia. We comply with data protection and marketing laws to the extent they apply to our operations, including Colombian Law 1581 of 2012 and relevant U.S. requirements.
Effective date: October 9, 2026
Last updated: October 9, 2026
Introduction
CP&KRELL GROUP COLOMBIA S.A.S. (“CP&KRELL,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information transparently and responsibly. This Privacy Policy describes how we collect, use, disclose, retain, and safeguard information through our nearshore staffing, recruitment, business development, and workforce support services. Our operations primarily connect U.S. companies with qualified professionals in Colombia. This policy applies to website visitors, business contacts, job applicants, candidates, and other individuals who interact with us. Applicable privacy laws vary by jurisdiction and activity.
Information We Collect
We may collect business contact information (name, professional title, company, email address, and phone number); client staffing requirements and communications; candidate résumés, work experience, education, qualifications, skills, language proficiency, availability, and compensation expectations; recruitment-related interview notes, assessments, and references; and, when necessary, employment administration information for onboarding, payroll, benefits, or compliance. We may also process device, browser, IP address, and usage information through website infrastructure or technologies actually enabled on our site. We seek to limit sensitive information to what is necessary and legally permitted.
Sources of Personal Information
Information may come directly from you, through job applications and professional profiles, from professional networking platforms, referrals, clients, publicly available professional sources, and authorized service providers. We use third-party tools including Loxo for applications and recruitment management and Calendly for scheduling. The information collected by those providers depends on their respective services and settings.
How We Use Personal Information
We use information to respond to business inquiries, schedule consultations, assess staffing needs, identify and evaluate candidates, arrange interviews, present relevant candidate profiles to prospective clients, administer employment or workforce services where applicable, manage contracts and communications, maintain website security, and meet legal obligations. We may retain candidate information for future relevant opportunities where permitted by law and consistent with applicable authorization. Marketing communications are sent only where legally permitted and subject to applicable opt-out rights.
Legal Basis and Authorization
Our legal grounds depend on the jurisdiction and processing activity and may include consent or authorization, steps before entering a contract, contractual performance, legal obligations, or other grounds recognized by applicable law. For personal information governed by Colombian law, we follow Law 1581 of 2012 and applicable regulations, including authorization and purpose-limitation requirements where applicable. A legal basis recognized elsewhere does not replace an authorization required under Colombian law.
Recruitment and Candidate Sharing
Our staffing services involve evaluating professionals in Colombia and introducing qualified candidates to prospective clients, primarily in the United States. We may share relevant professional information with client organizations for recruitment and hiring evaluation, subject to applicable legal requirements and authorization. We aim to limit disclosures to information relevant to a particular opportunity. Clients receiving candidate information may have independent responsibilities as data controllers, depending on their role and the applicable agreements.
Employment and Workforce Administration
Where CP&KRELL or an applicable affiliated entity provides employment administration, information may be processed for lawful onboarding, payroll, benefits, tax, social security, employment records, and compliance. Employees may receive a separate, more detailed employment privacy notice when required. We do not assume that every candidate becomes an employee of CP&KRELL.
International Data Transfers
Our business involves cross-border processing, especially between Colombia and the United States. Candidate professional information may be shared with U.S. clients evaluating candidates, and service providers may process information in other countries. We apply safeguards and comply with the rules governing international transfers and transmissions under applicable law, including Colombian data protection requirements. Where required, we obtain authorization or use an applicable legal mechanism or exception.
Service Providers and Third-Party Websites
We may use Loxo for recruitment and applications, Calendly for appointment scheduling, and hosting, email, communications, security, or analytics providers as applicable to the technologies actually deployed. These providers may process personal information under their own notices and contractual arrangements. Our website may link to external services; this Privacy Policy does not govern the independent privacy practices of those third parties.
Cookies and Analytics
Our website may use necessary cookies, server logs, or similar technologies for functionality and security. Nonessential analytics or advertising technologies, if implemented, must be disclosed and controlled in accordance with applicable consent and opt-out requirements. Browser settings and any available website preference controls may help manage cookies. The precise cookie inventory should be confirmed against the production website.
Marketing Communications
We may respond to business inquiries and send relevant professional communications where permitted by law. Recipients may unsubscribe from marketing emails using the provided mechanism or by contacting us. If we use text messages or automated communications, we will seek any consent required by applicable law. We do not authorize unrelated third-party marketing using mobile messaging consent information.
Information Sharing and Sale
We may disclose information to prospective client organizations for recruitment, contracted service providers, professional advisers, and competent authorities where legally required. We do not sell personal information for monetary consideration as part of our ordinary recruitment services. Some privacy laws define “sale” or “sharing” more broadly, including certain advertising disclosures; if any such activity applies, we will provide the required notices and opt-out mechanisms.
Information Security
We maintain reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. Safeguards may include restricted access, confidentiality controls, and appropriate provider oversight. No system or electronic transmission can guarantee absolute security.
Data Retention
We retain information for as long as reasonably necessary for recruitment, business operations, employment administration, legal compliance, dispute resolution, and recordkeeping. Retention periods depend on the information, purpose, relationship, and applicable law. Where legally available, individuals may request deletion or suppression, subject to lawful exceptions and recordkeeping obligations.
Your Privacy Rights
Depending on applicable law, you may request access to your information, correction or updating, deletion, withdrawal of consent or authorization, information about processing, and other applicable rights. We may verify your identity before responding and will follow applicable response deadlines. Submit privacy requests to carlos@cpkrell.com.
Additional Notice for Individuals in Colombia
Individuals protected by Colombian data protection law may exercise rights established by Law 1581 of 2012 and applicable regulations, including the rights to know, update, rectify, and request deletion of personal information, obtain information about processing, and revoke authorization where legally appropriate. Where applicable, individuals may submit complaints to the Superintendencia de Industria y Comercio after following the relevant internal procedure.
Additional Notice for U.S. Residents
Residents of certain U.S. states may have additional privacy rights, such as access, correction, deletion, portability, and opt-outs for certain processing activities, subject to applicable statutory thresholds, exemptions, and requirements. We will provide additional notices and mechanisms if the relevant laws apply to our activities. We do not unlawfully discriminate against individuals for exercising applicable rights.
International Visitors
Additional laws, including European data protection laws, may apply depending on where individuals are located and the nature of our activities. Where such laws apply, we will provide the disclosures and safeguards they require. This statement does not mean that every privacy law applies to every CP&KRELL activity.
Children’s Privacy
Our services are intended for businesses and adults pursuing professional opportunities. They are not directed toward children, and we do not knowingly solicit personal information from children through our general business and recruitment channels.
Changes to This Policy
We may update this Privacy Policy to reflect changes in services, practices, technology, or legal requirements. Changes will be posted here with a revised “Last Updated” date. Where required, we will provide additional notice or obtain new authorization.
Contact and Privacy Requests
Data Controller / Responsible Entity: CP&KRELL GROUP COLOMBIA S.A.S.
Commercial Brand: CP&KRELL Outsourcing
Country of Incorporation: Colombia
Company Contact: Carlos Arturo Perez Hoyos
Privacy Email: carlos@cpkrell.com
Contact us by email for privacy inquiries, access, correction, deletion, or other applicable requests.