Privacy Policy

1. Data Controller

The DeportID platform is operated by Rambit S.A.S., a commercial company legally constituted in the Republic of Colombia, identified with NIT 901.442.697-8 and domiciled in Bogotá, Colombia. The Controller is committed to protecting the privacy and personal data of its users.

2. Information We Collect

By using third-party login (Google or Facebook), we exclusively access:

• Identity: Full name for your registration in official match reports.
• Contact: Email address for administrative and security communications.
• Image: Profile picture to generate your player's "Digital Passport."
• For the specific treatment of data from users under 18, please refer to Section 3 of this Policy.

3. Children's Privacy

3.1 Commitment to protecting minors

DeportID recognizes the importance of protecting the privacy of minors and complies with Law 1581 of 2012 and its Regulatory Decree 1377 of 2013 regarding the processing of minors' data. For users in other jurisdictions, DeportID applies equivalent standards aligned with COPPA (USA), GDPR (European Union), and LGPD (Brazil) with respect to minors' data.

3.2 Data we collect from minor users

From users under 18 years of age, DeportID exclusively collects:

a) Name and profile picture (obtained from the authentication provider: Google or Facebook, or provided directly).

b) Year and month of birth (for age verification; the day is not collected).

c) Sports statistics generated on the platform: goals, matches played, tournaments participated in, usual playing position.

d) Team identifier(s) to which the minor user belongs.

DeportID does not collect from minor users: national identification number, physical address, phone number, real-time geolocation, or financial information of any kind.

3.3 Legal basis for processing

The processing of personal data of users under 18 years of age is carried out exclusively on the basis of the informed and express consent of their authorized guardian, obtained through the process described in the Terms and Conditions.

DeportID keeps a record of such consent, including: email address of the authorized guardian, date and time of authorization, and IP address from which it was granted.

3.4 Purpose of processing

Data from minor users is used exclusively for:

a) Enabling their participation in sports tournaments on the platform.

b) Displaying sports statistics to authenticated members of their team.

c) Identifying the user within the platform for team and tournament management.

Data from minor users is not used for: targeted advertising, commercial profiling, behavioral analysis for marketing purposes, or sharing with third parties for commercial purposes.

3.5 Visibility restrictions

Minor user profiles are private by default. Please refer to Section 10 of the Terms and Conditions for details on applicable restrictions. Minor users' data is not indexed by external search engines.

3.6 International transfers

Minor users' data, like that of all users, may be processed on servers located outside Colombia (currently: Supabase, with servers in the United States or the European Union). These transfers are carried out under the guarantees described in Section 6 of this Policy and with appropriate security measures.

3.7 Data retention

Minor users' data is retained while the account is active. When:

a) The authorized guardian requests account deletion, data will be deleted within a maximum of 30 business days.

b) The minor user turns 18, their account will automatically transition to adult account status without data loss, unless the user themselves requests deletion of historical data.

c) A minor account remains inactive for more than 24 months, DeportID may delete it after notifying the registered email address.

3.8 Rights and contact

To exercise rights over a minor user's data (access, rectification, deletion, or objection), the authorized guardian must write to privacidad@deportid.com with the subject: "Minor user data — [minor's name]". DeportID will respond within a maximum of 10 business days.

4. Processing of Children and Adolescents' Data

The processing of personal data of minors is governed exclusively by what is established in Section 3 of this Privacy Policy and in articles 7 and 12 of Law 1581 of 2012. The legal basis for processing is the informed and express consent of the authorized guardian, as described in that section.

5. Purpose of Processing

The collected data is strictly used for:

For minor users, the legal basis for processing is exclusively the consent of the authorized guardian, in accordance with Section 3 of this Policy and articles 7 and 12 of Law 1581 of 2012.

• Management of sports profile and real-time statistics.
• Registration and identity validation in tournaments managed by third parties.
• Communication of payment status, schedule changes, and security alerts.
• Compliance with legal obligations and requirements from competent authorities.

6. Storage and International Data Transfer

Information is stored encrypted on Supabase servers. The User acknowledges and accepts that the use of these cloud service providers may involve an international transfer of data to servers located outside of Colombia (mainly in the United States), carried out under international security standards.

7. Owner Rights (Habeas Data)

As the data owner, you have the right to know, update, rectify, and delete your information, as well as to revoke the granted authorization. These rights can be exercised at any time through profile settings or by direct communication to our official channels.

8. Data Deletion (Meta/Facebook Requirement)

To request the deletion of data associated with social networks, the user can access the configuration section on the platform or follow the procedure detailed in our Data Deletion section. Requests will be processed within a maximum period of 48 business hours.

9. Contact for Data Protection

For any inquiry, complaint, or exercise of your Habeas Data rights, the official service channel is: `contacto@deportid.com` with the subject "Exercise of Rights Law 1581".

10. Cookies and Similar Technologies

DeportID uses strictly necessary cookies for the operation of the platform (session management, security) and analytics cookies to improve the service. We do not use advertising cookies or share browsing data with advertising networks. Users can manage their cookie preferences through their browser settings. Rejecting strictly necessary cookies may prevent the platform from functioning correctly.

11. Changelog

Version 2 — May 29, 2026: Section on minors and parental consent added in compliance with Law 1581 of 2012 and international standards for the protection of minors' data (COPPA, GDPR, LGPD).