Personal data processing notice
This notice explains who is responsible for your personal data, what we do with it, and how you can exercise your rights over it at any time.
To exercise any of your rights, write to hola@creaycocina.com with the subject Personal data. It costs nothing and you do not need to give a reason.
Who is responsible
The party responsible for processing your personal data is SI LO IMAGINAS LO CREAS INC, trading as Crea & Cocina, which operates the website www.creaycocina.com.
- Email. hola@creaycocina.com
- Telephone. +57 305 291 7333
- United States. 2125 NW 115th Ave, Miami, FL 33172
- Colombia. Calle 10 # 32-115, Local 130, Medellín, Antioquia
What data we collect
- Identification and contact: name, identification document, email address, telephone number.
- Delivery: shipping address, city, country and any instruction you give us for the delivery.
- Transactional: order history, amounts, payment method used and invoicing data. We do not store your full card number: payments are processed by our payment providers.
- Browsing: pages visited, device and approximate location, collected through cookies and analytics tools so the store works and we can improve it.
What we use it for
- Processing your order, charging for it, dispatching it and tracking the delivery.
- Answering your questions, requests, complaints and claims.
- Managing the warranty, returns and technical service of your equipment.
- Sending you information about your purchase, and, only if you have authorised it, commercial communications about products, offers and content. You can unsubscribe from these at any time, from the link in each message or by writing to us.
- Complying with our accounting, tax and legal obligations.
- Understanding how the store is used, in aggregate form, to improve it.
We do not sell your personal data, and we do not share it with third parties for purposes other than those described here. We do share it with those who make the service possible — carriers, payment platforms, invoicing and email providers — strictly for what each needs to do its part.
Your rights
Whatever country you are in, you can:
- Know what data we hold about you and obtain a copy of it.
- Update and correct it when it is incomplete, partial or inaccurate.
- Delete it, when there is no legal or contractual duty requiring us to keep it.
- Revoke the authorisation you gave us.
- Object to it being used for commercial communications.
- Request proof of the authorisation you granted.
- Complain to the data protection authority of your country.
Access to your own data is free of charge.
How to exercise them, and how long we take
Write to hola@creaycocina.com stating what you want and attaching an identification document so we can confirm it is you. We will answer within these terms:
- Enquiries: within ten (10) business days. If we cannot answer within that time we will tell you why and answer within five (5) further business days.
- Claims: within fifteen (15) business days. If we cannot answer within that time we will tell you why and answer within eight (8) further business days.
By country
- Colombia. This processing is governed by Law 1581 of 2012 and Decree 1377 of 2013. The supervisory authority is the Superintendencia de Industria y Comercio (SIC), to which you may complain once you have filed your claim with us.
- Mexico. You may exercise your ARCO rights — access, rectification, cancellation and objection — through the same channel. The supervisory authority is INAI.
- United States. Depending on your state, you may have additional rights over the sale and sharing of your data. We do not sell personal data.
International transfers
Our store runs on Shopify and we use service providers located in various countries, which means your data may be processed outside your country of residence. We require from each of them security and confidentiality standards equivalent to those described here.
How long we keep it
We keep your data for as long as your relationship with us is active, and after that for the period required by the accounting, tax and warranty obligations applicable to each country. Once those terms have expired, we delete it or anonymise it.
Security
We apply technical and administrative measures to protect your data against loss, misuse and unauthorised access. The site operates entirely over an encrypted connection, and access to the data is restricted to the people who need it to do their work.
Minors
Our store is not directed at children. We do not knowingly collect data from minors. If you believe a minor has given us their data, write to us and we will delete it.
Changes
If we change this notice we will publish the new version on this page. We recommend you check it from time to time.
Related
You can also read our Privacy policy, our Terms and Conditions, and file a formal request through our PQRS channel.