PERSONAL DATA PROCESSING POLICY

OMARA ANCESTRAL

Effective date: April 10, 2026

1. IDENTIFICATION OF THE DATA CONTROLLER

In compliance with the provisions of Law 1581 of 2012 and Decree 1377 of 2013, we inform you that the entity responsible for the processing of personal data is:

Business name: OMARA ANCESTRAL
Country: Colombia
Contact email: omaraancestraloficial@gmail.com
Phone: +57305 381 27 41

Hereinafter referred to as “THE DATA CONTROLLER.”

2. APPLICABLE LEGAL FRAMEWORK

This policy is governed by:

The Political Constitution of Colombia (Article 15)
Law 1581 of 2012
Decree 1377 of 2013
Other applicable regulations regarding personal data protection

3. DEFINITIONS

For the purposes of this policy, the following definitions shall apply:

Personal data: Any information related to an identified or identifiable natural person.
Data subject: The individual whose personal data is being processed.
Processing: The collection, storage, use, circulation, or deletion of personal data.
Data processor: A third party that processes personal data on behalf of the data controller.

4. PERSONAL DATA COLLECTED

THE DATA CONTROLLER may collect the following data:

First and last name
Identification document (when applicable)
Email address
Phone number
Shipping address
Purchase-related information
IP address and browsing data

Note: Financial information is processed by specialized third-party providers; therefore, THE DATA CONTROLLER does not store credit card or payment method data.

5. PURPOSE OF DATA PROCESSING

The personal data will be used for:

Processing orders and commercial transactions
Managing payments through external platforms
Shipping products
Providing customer service
Sending order-related information
Improving user experience
Complying with legal and tax obligations
Sending commercial information (only if the user authorizes it)

6. DATA SUBJECT AUTHORIZATION

The processing of personal data will be carried out with the prior, express, and informed consent of the data subject.

Such authorization is obtained when the user:

Accepts this policy
Makes a purchase
Fills out forms on the website
Uses the services of the site

7. DATA SUBJECT RIGHTS

The data subject has the right to:

Know, update, and correct their personal data
Request proof of the granted authorization
Be informed about the use of their data
Revoke authorization and/or request deletion of their data
Access their personal data free of charge

8. PROCEDURE TO EXERCISE RIGHTS

To exercise their rights, the data subject may send a request to:

Email: omaraancestraloficial@gmail.com

The request must include:

Full name
Description of the request
Contact information

THE DATA CONTROLLER will respond within the legally established timeframes.

9. TRANSFER AND TRANSMISSION OF DATA

THE DATA CONTROLLER may share personal data with third parties necessary for the operation of the business, such as:

Payment platforms such as Mercado Pago
Technology platforms such as Wix
Courier and logistics services

These third parties act as data processors and are required to ensure the protection of personal data.

10. INFORMATION SECURITY

THE DATA CONTROLLER implements reasonable technical, human, and administrative measures to protect personal information against loss, misuse, unauthorized access, or alteration.

However, it is acknowledged that no system is completely secure.

11. USE OF COOKIES AND SIMILAR TECHNOLOGIES

The website may use cookies to:

Improve user experience
Analyze browsing behavior
Personalize content

The user may disable cookies through their browser settings.

12. DATA OF MINORS

THE DATA CONTROLLER does not intentionally collect data from minors. In the event that such data is collected, express authorization from their legal guardians will be required.

13. DATA RETENTION PERIOD

Personal data will be stored only for the time necessary to fulfill the purposes of processing or legal obligations.

14. CHANGES TO THE POLICY

THE DATA CONTROLLER reserves the right to modify this policy at any time. Any changes will be published on the website.

15. ACCEPTANCE OF THE POLICY

Use of the website implies acceptance of this Personal Data Processing Policy.

Omara Ancestral reaffirms its commitment to protecting the personal information of its users and customers.