Seta Souls logo
Legal

Privacy Policy

Política de Tratamiento de Datos Personales  ·  Effective: March 2026

Seta Souls S.A.S. ("Seta Souls", "we", "us") is committed to protecting your personal data. This Policy explains how we collect, use, store, and safeguard your information, in accordance with Ley 1581 de 2012, Decreto 1377 de 2013, and applicable Colombian data protection regulations. The Superintendencia de Industria y Comercio (SIC) is the supervisory authority for data protection in Colombia.

1. Data Controller

Seta Souls S.A.S.

NIT: [NIT DE LA EMPRESA]

Address: [DIRECCIÓN REGISTRADA]

Data requests: datos@setasouls.com

Phone: [TELÉFONO]

2. Personal Data We Collect

We collect the following categories of personal data:

  • Identification data: full name, national ID number or passport number
  • Contact data: email address, phone number, delivery address
  • Transaction data: order history, purchase values, product selections
  • Payment data: payment method type and last four digits of the card. Full card details are processed exclusively by Bold SAS and are never stored by Seta Souls.
  • Browsing data: IP address, browser type, device information, pages visited, session duration
  • Communication data: messages sent through our contact forms or customer service channels

3. Purposes of Data Treatment

We treat your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Managing payments through our payment processor
  • Coordinating shipping and delivery
  • Sending order confirmations and transactional communications
  • Providing customer service and handling warranty claims
  • Sending promotional and marketing communications (only with your explicit consent)
  • Preventing fraud and ensuring platform security
  • Improving our website, products, and services through analytics
  • Complying with legal and regulatory obligations

4. Legal Basis for Processing

The primary legal basis for processing your data is your prior, express, and informed consent as required by Article 9 of Ley 1581 de 2012. Marketing communications require separate, explicit opt-in consent. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

5. Your Rights

Under Article 8 of Ley 1581 de 2012, you have the following rights:

  • Know: the right to know what personal data we hold about you and why.
  • Update: the right to have your data updated when circumstances change.
  • Rectify: the right to correct inaccurate or incomplete data.
  • Delete (Suprimir): the right to request deletion when treatment is unlawful or the stated purpose has been fulfilled.
  • Revoke: the right to withdraw your consent at any time.
  • Access: the right to obtain a free copy of your personal data.
  • Complain: the right to file a complaint with the SIC (sic.gov.co).
  • Not be subject to automated decisions: the right not to be subject to decisions based solely on automated data processing.

6. How to Exercise Your Rights

To submit a request, email datos@setasouls.com with your full name, ID number, the right you wish to exercise, and any supporting documents.

Consultas (Access requests)

We will respond within 10 business days of receiving your request. If we need more time, we will notify you within that period and may extend by up to 5 additional business days.

Reclamos (Correction, deletion, or revocation requests)

We will respond within 15 business days of receiving your request. If we need more time, we will notify you and may extend by up to 8 additional business days. Escalation to the SIC is available only after exhausting this internal procedure.

7. Third-Party Data Processors

We share your data with the following service providers, each bound by a data processing agreement:

  • Bold SAS: payment processing
  • [OPERADOR LOGÍSTICO]: order shipping and delivery
  • [PROVEEDOR DE ANALÍTICA]: website analytics and performance
  • Vercel Inc.: website hosting and infrastructure
  • [PLATAFORMA DE EMAIL]: transactional and marketing communications

8. International Data Transfers

Some of our service providers operate outside Colombia. All cross-border transfers are made in compliance with Chapter VIII of Ley 1581 de 2012, and only to countries or entities that provide an equivalent level of data protection.

9. Data Retention

We retain personal data for the following periods:

  • Transaction and order data: 5 years (Código de Comercio)
  • Customer contact data: duration of the commercial relationship, plus 5 years
  • Marketing consent records: duration of the commercial relationship, plus 5 years
  • Browsing and analytics data: up to 2 years
  • Payment data: minimum necessary; card data is retained and managed by Bold SAS under their own policies

10. Sensitive Data

Purchases of health-related products may indirectly reveal information about your health. We treat such data with the heightened protection required for sensitive data under Article 5 of Ley 1581 de 2012, and we do not use it for purposes beyond order fulfillment and service improvement.

11. Security

We apply technical and organizational security measures proportionate to the sensitivity of the data we process. In the event of a security incident affecting your personal data, we will notify the SIC within 15 business days of discovery.

12. Changes to This Policy

We may update this Policy periodically. The revised version will be published on this page with an updated effective date. Continued use of our site after any update constitutes acceptance of the revised Policy.

13. Contact

For questions about this Policy or to exercise your rights, email us at datos@setasouls.com.