Personal Data Protection Policy

1. Data controller

[RAZÓN SOCIAL] (business name), Tax ID [NIT], domiciled at [DIRECCIÓN], Colombia (hereinafter, "HAMAKAS" or the "Data Controller"), is responsible for processing the personal data you provide when browsing, registering, placing orders, or contacting us through hamaka.com.co, in compliance with Colombian Law 1581 of 2012 and Decree 1377 of 2013, which develop the constitutional right of Habeas Data.

2. Data we collect

We collect the data you voluntarily provide when placing an order or contacting us, such as: full name, phone/WhatsApp number, email address, shipping address, and city. We do not request sensitive data (health, ethnic origin, political or religious views, among others) and ask that you do not include such data in your messages.

3. Purposes of processing

• Process, confirm, and ship orders placed through our catalog.
• Contact you via WhatsApp or live chat to coordinate purchase details, answer questions, and provide after-sales support.
• Send informational or promotional communications about new products, only if you have given your express consent.
• Comply with legal, accounting, and tax obligations applicable to e-commerce in Colombia.
• Improve the site's browsing experience (aggregated analytics, only if you allow it from the cookie notice).

4. Authorization and consent

By placing an order, writing to us via WhatsApp/chat, or filling out any form on the site, you grant your free, prior, express, and informed authorization for the processing of your personal data under this policy. For marketing communications, we will request your specific consent, which you may revoke at any time.

5. Your rights as a data subject

As the data subject, you have the right to:

• Know, update, and correct your personal data.
• Request proof of the authorization granted.
• Be informed about how your data has been used.
• File complaints with Colombia's Superintendency of Industry and Commerce (SIC) for violations of data protection law.
• Revoke your authorization and/or request deletion of your data, when there is no legal or contractual duty preventing it.
• Access your personal data free of charge.

6. How to exercise your rights

You can exercise your rights by writing to us at [CORREO] or calling [TELÉFONO], indicating your full name, the right you wish to exercise, and attaching a copy of an ID document to verify your identity. We will respond within the terms established by law (inquiries: maximum 10 business days; complaints: maximum 15 business days).

7. Information security

We adopt reasonable technical, human, and administrative measures to protect your personal data against loss, misuse, unauthorized access, or alteration.

8. Validity

This policy takes effect upon publication on hamaka.com.co and remains in force as long as personal data continues to be processed. It may be modified at any time; substantial changes will be published on this same page along with the last-updated date.

Fill in [RAZÓN SOCIAL] (business name), [NIT] (tax ID), [DIRECCIÓN] (address), [CORREO] (email) and [TELÉFONO] (phone) from /board34isu/contenido-sitio before formally launching this site.