Privacy and personal data processing policy

Grupo Empresarial Dezhma S.A.S. acts as the data controller for personal data collected through its online store, forms, WhatsApp, email, social media, events, purchases, and service channels.

Data processed

Dezhma may process identification data, contact information, address, purchase and shipping information, service requests, commercial preferences, digital interactions, IP address, device, and data necessary to prevent fraud. Full financial data is typically processed by payment gateways and not by Dezhma.

Purposes

Manage accounts, orders, payments, invoicing, inventory, shipments, exchanges, warranties, withdrawals, and returns.

Handle inquiries, requests, PQR (petitions, complaints, and claims), and after-sales service.

Verify identity, prevent fraud, and protect site security.

Comply with legal, accounting, tax, and contractual obligations.

Send operational communications about orders and service.

With authorization when required, send news, product launches, promotions, and advertising via email, SMS, WhatsApp, or other means.

Perform analytics, segmentation, measurement, and experience improvement, respecting the data subject's rights.

Data subject rights

The data subject may know, update, rectify, and request proof of authorization; be informed about the use of their data; file complaints with the Superintendence of Industry and Commerce; revoke authorization or request deletion when applicable; and access their data free of charge, in accordance with Law 1581 of 2012 and its regulatory standards.

Inquiries and complaints

Requests can be sent to Contacto@dezhma.co or +57 314 769 7851, indicating name, identification document, contact details, description of the request, and supporting documents. Inquiries will be answered within ten (10) business days, extendable by five (5) business days when necessary. Complaints will be addressed within fifteen (15) business days, extendable by eight (8) business days, after informing the data subject.

Authorization and sensitive data

Processing will be carried out with prior, express, and informed authorization when necessary. The provision of sensitive data or data of minors is optional, except when legally required. Dezhma does not deliberately seek to collect data from minors without the intervention of their representatives and respect for their best interests.

Processors, transmissions, and transfers

Dezhma may share data, to the extent necessary, with payment gateways, Shopify and technology providers, carriers, messaging services, hosting providers, analytics, marketing, accounting, support, and authorities. Some providers may operate outside of Colombia. Dezhma will adopt applicable contractual and legal measures to protect the information.

Security, retention, and validity

Dezhma applies reasonable administrative, technical, and organizational measures. No system is completely infallible. Data will be retained for the time necessary to fulfill the purposes, legal obligations, and defense of rights, and thereafter will be deleted, anonymized, or archived in accordance with the law.

This policy is effective from its publication and will remain valid as long as Dezhma processes data. Substantial changes will be communicated through reasonable means.