Personal Data Processing

1. Data controller

[COMPANY NAME] S.A.S., Tax ID (NIT) [TBD], domiciled at [ADDRESS], Tierralta, Córdoba, Colombia. Controller contact: [EMAIL] · [PHONE].

2. Data we process and purposes

Account data (name, email, phone): registration management, authentication and communication. Purchase data (shipping addresses, order history): execution of the sales contract, international shipping, invoicing, warranties, withdrawals and reversals. Contact data for support.

We do not sell or transfer your data to third parties for commercial purposes. We share only what is strictly necessary with: Stripe (payment processing), the carrier (delivery) and Supabase (infrastructure), under their own protection guarantees.

3. Consent

Processing is based on your express authorization, granted by ticking the consent checkbox at registration and/or checkout. The date and time of your authorization is recorded as evidence.

4. Your rights (Habeas Data)

Under Colombian Law 1581 of 2012, you have the right to know, update, rectify and delete your data, and to revoke authorization. To exercise them, write to [EMAIL]; we will respond within the legal terms (10 business days for inquiries, 15 for claims).

If you believe your rights have been violated, you may turn to the Superintendencia de Industria y Comercio (www.sic.gov.co).

5. Retention and security

We keep your data while your account is active and for the periods required by accounting and consumer protection rules. We apply technical protection measures: encryption in transit, role-based access control and row-level security in the database.

6. European Union visitors (GDPR)

If you visit us from the EU, you also have the rights of the General Data Protection Regulation (access, portability, objection, restriction). [VALIDATE WITH COUNSEL: legal basis, international transfers and representative if applicable].