top of page

Personal Data Protection Policy

Personal Data Processing Policy

Effective Date: February 17, 2021

Last Updated: June 24, 2024

1. Purpose

Brunellia ("Brunellia," "we," "our," or "us") recognizes the importance of protecting personal information and is committed to complying with applicable Colombian data protection laws, including Law 1581 of 2012, Decree 1377 of 2013, and any regulations that amend or replace them.

This Personal Data Processing Policy describes how Brunellia collects, stores, uses, updates, transfers, protects, and deletes personal data.

2. Data Controller

Business Name: Brunellia

Location: Medellín, Colombia

Email: brunellia.flowers@gmail.com

Website: www.brunelliaboutique.com

Brunellia is responsible for the processing of personal data collected through its website, social media platforms, workshops, events, customer communications, and commercial activities.

3. Scope

This Policy applies to all personal information collected by Brunellia from:

  • Customers

  • Website visitors

  • Workshop participants

  • Newsletter subscribers

  • Suppliers

  • Business partners

  • Job applicants

  • Individuals who contact Brunellia

4. Personal Data We May Collect

Depending on your relationship with Brunellia, we may collect:

  • Full name

  • Identification number when legally required

  • Email address

  • Telephone number

  • Billing address

  • Delivery address

  • Company information

  • Purchase history

  • Workshop registrations

  • Payment information processed through third-party providers

  • Communications with customer service

  • Website usage information

  • IP address

  • Cookies

  • Device information

We only collect personal information that is necessary for legitimate business purposes.

5. Purpose of Data Processing

Personal data may be processed to:

  • Process purchases

  • Deliver products

  • Register workshop participants

  • Process payments

  • Provide customer support

  • Respond to inquiries

  • Manage warranties or claims

  • Send transactional communications

  • Send marketing communications with prior authorization where required

  • Improve products and services

  • Analyze website performance

  • Prevent fraud

  • Comply with legal obligations

  • Maintain accounting and tax records

  • Maintain commercial relationships

6. Authorization

Where required by law, Brunellia will obtain your prior, express, and informed authorization before processing your personal data.

Authorization may be obtained through:

  • Website forms

  • Online checkout

  • Workshop registration forms

  • Written consent

  • Electronic communications

  • Other legally acceptable methods

Authorization is not required where Colombian law provides an exception.

7. Rights of Data Subjects

Under Colombian law, data subjects have the right to:

  • Know what personal information Brunellia holds.

  • Update personal information.

  • Correct inaccurate information.

  • Request proof of authorization.

  • Request deletion of personal information when legally applicable.

  • Withdraw authorization when permitted.

  • File complaints with the Superintendence of Industry and Commerce after exhausting the applicable internal procedures.

  • Access personal information free of charge in accordance with applicable law.

8. Data Security

Brunellia implements reasonable administrative, technical, and organizational measures to safeguard personal information against:

  • Unauthorized access

  • Loss

  • Theft

  • Disclosure

  • Alteration

  • Destruction

Although we employ reasonable security practices, no system can guarantee absolute security.

9. Data Sharing

Brunellia does not sell personal information.

Personal information may be shared only with:

  • Payment providers

  • Delivery companies

  • Website hosting providers

  • Technology providers

  • Marketing service providers

  • Professional advisors

  • Government authorities when legally required

All third parties are expected to process information responsibly and in accordance with applicable law.

10. International Transfers

Some technology providers may process personal information outside Colombia.

Whenever international transfers occur, Brunellia will take reasonable steps to ensure that appropriate safeguards are in place.

11. Data Retention

Personal information will be retained only for as long as necessary to:

  • Fulfill the purposes described in this Policy.

  • Comply with legal obligations.

  • Resolve disputes.

  • Maintain business records.

When no longer required, personal information will be securely deleted, anonymized, or destroyed in accordance with applicable law.

12. Procedure for Requests and Complaints

To exercise your rights regarding your personal information, please submit your request to:

Email: brunellia.flowers@gmail.com

Your request should include:

  • Full name

  • Contact information

  • Description of your request

  • Supporting information if applicable

Brunellia will respond within the timeframes established by applicable Colombian data protection laws.

13. Children

Brunellia does not knowingly collect personal information from children under the age of 13 without the authorization required by law.

14. Changes to This Policy

Brunellia reserves the right to modify this Policy at any time.

The updated version will be published on our website with a revised Last Updated date.

15. Contact Information

If you have any questions regarding this Policy or the processing of your personal information, please contact:

Brunellia

Email: brunellia.flowers@gmail.com

Website: www.brunelliaboutique.com

Location: Medellín, Colombia

16. Governing Law

This Policy is governed by the laws of the Republic of Colombia, including Law 1581 of 2012, Decree 1377 of 2013, and any regulations that amend or replace them.

bottom of page