Policies

1. Data controller

• Trade name: Charlot Floral
• Legal name or owner: [COMPLETAR: legal name or name of the individual who owns the business]
• Address: Calle 15 # 3-80, Cartago, Valle del Cauca, Colombia
• Email: charlot.barfloral@gmail.com
• Phone and WhatsApp: +57 322 920 3763

2. Data we collect

• When you buy on the site: full name, ID number, phone, email, how you receive the order (and the address, for delivery), the products in the order and the language you bought in.
• Your ID number is only used for the payment. Once Bold reports the result (approved, rejected or cancelled), we delete it from the order.
• We never receive or store your card or account details: payments are processed by Bold. From Bold we only keep the method you paid with (for example card, Nequi or PSE) and the payment date.
• If you agree to receive promotions: your name, email, language, and the date and exact wording of the consent you gave.
• If you give us your consent in the shop: your name, email and language.

We do not ask for sensitive data.

3. What we use it for

• Handling your orders, payments, deliveries and pick-ups, and emailing you the confirmation and receipt.
• Letting you check the status of your orders.
• Answering your questions, requests, complaints and claims.
• Meeting legal, accounting and tax obligations.
• Only with your prior, express consent: emailing you news and promotions from Charlot Floral.

Consent to promotions is optional: you can buy without giving it, and not giving it changes nothing about your order.

4. Who helps us process it (processors)

We only share your data with the providers we need to operate. They process it on our behalf and only for the purposes in this policy:

• Bold: payment processing.
• Resend: sending order emails and, if you agreed, promotional emails.
• Google Firebase: hosting of the site and of order information.
• Arrierito Digital: the dashboard the business uses to manage its orders and contacts (also hosted on Google Firebase).

Some of these providers store information on servers outside Colombia, for example in the United States. We do not sell or hand over your data to third parties.

5. Your rights

As the data subject you can:

• Access, update and correct your data.
• Ask for proof of the consent you gave us.
• Know how we have used your data.
• Withdraw your consent and ask us to delete your data, except when the law or a contract requires us to keep it (for example, the accounting records of a sale).
• File complaints with the Superintendence of Industry and Commerce (SIC), after first making your request or claim to us.
• Access your data free of charge.

6. How to exercise them

Email us at charlot.barfloral@gmail.com with the subject “Personal data”, your name, the email you bought with and what you need. If we cannot confirm your identity, we will ask for one more detail.

• Requests: we answer within 10 business days at most. If we need more time, we tell you why and answer within the following 5 business days.
• Claims (correct, update, delete or withdraw consent): we answer within 15 business days at most. If we need more time, we tell you why and answer within the following 8 business days. If a claim is missing information, we ask for it within 5 days; if 2 months go by without a reply, the claim is considered withdrawn.

7. Promotions: how to unsubscribe

Every promotional email has an “Unsubscribe” link. Using it stops promotional emails right away. You can also ask for it by writing to the email above.

Unsubscribing does not affect your order emails. If you later tick the box again when buying, you are subscribed again with that new consent.

8. Security and retention

We protect your data by limiting access to the people who need it and by using encrypted connections. We keep order data for as long as the purposes of this policy require and for the periods set by accounting and tax law. Data for promotions is kept until you unsubscribe or ask us to delete it.

9. Effective date

This policy is effective from [COMPLETAR: effective date]. The databases remain in force while the business operates and the purposes described here exist. If we change it substantially, we will publish it on this page.

Last updated: September 28, 2026.