Privacy policy

Document that applies to purchases and use of the Villavo Express website.

This policy explains how we process your personal data when you visit this site, create an account or make a purchase, in accordance with Colombian Law 1581 of 2012 (Habeas Data), Decree 1074 of 2015 and the rules that complement them.

1. Data controller

2. Data we collect

Identification and contact: name, ID number when required for invoicing, email and phone.
Delivery and billing: addresses and data needed to ship and invoice your order.
Transactional: products purchased, amounts, payment status and payment method used. Your card details are processed directly by the payment platform.
Technical and browsing: IP address, device and browser type, pages visited and data obtained through cookies.
Communications: messages, inquiries, claims and reviews you send or post.

We do not request sensitive data. If you decide to share it, you are not obliged to do so and we will only process it to handle your request.

3. Purposes of processing

Manage your account and process orders, payments, deliveries, invoicing and returns.
Handle requests, complaints, claims and warranty requests.
Send you communications about the status of your orders and service notices.
With your authorization, send you offers, news and advertising by email, messaging or other channels. You can withdraw this consent at any time.
Analyze the use of the site and improve products, services and the shopping experience.
Prevent fraud and ensure the security of transactions and of the site.
Comply with legal, accounting and tax obligations, and respond to requests from competent authorities.

4. Authorization

We process your data with your prior, express and informed authorization, which you give by registering, accepting this policy or making a purchase. We do not need authorization in the cases the law exempts, for example, information required by a public entity in the exercise of its functions.

5. Processors and third parties we share data with

To fulfil the purposes above we may share the strictly necessary data with payment platforms, carriers and logistics operators, technology, hosting, email and analytics providers, and authorities when the law requires it. We require these third parties to maintain confidentiality and adequate security measures. We do not sell your personal data.

Some providers may store information on servers outside Colombia. In those cases we seek to ensure they offer an adequate level of protection, as required by law.

6. Your rights as a data subject

Know, update and correct your personal data.
Request proof of the authorization you gave.
Be informed, upon request, about how your data has been used.
File complaints with the Superintendence of Industry and Commerce for violations of the law.
Revoke the authorization and request deletion of your data when legal principles, rights and guarantees are not respected, or when there is no longer a legal or contractual duty to keep it.
Access your personal data being processed free of charge.

7. How to exercise your rights

Send your request to [email protected] or to the address Carrera 20C #26-10 Barrio La Vainilla, stating your name, ID number, the contact details to reply to you and a clear description of your request.

Inquiries: answered within ten (10) business days at most, extendable by five (5) more business days if we tell you the reasons.
Claims for correction, update or deletion: answered within fifteen (15) business days at most, extendable by eight (8) more business days if we tell you the reasons.

If you are not satisfied with the answer, you may file a complaint with the Superintendence of Industry and Commerce (https://www.sic.gov.co/) once this procedure has been completed.

8. Information security

We apply reasonable technical, human and administrative measures to protect your data against unauthorized access, loss, alteration or misuse. No system is completely invulnerable; if an incident affecting your data occurs, we will act as required by law.

9. Retention

We keep your data for as long as necessary for the purposes described and for the periods required by accounting, tax and consumer protection rules. After that we delete or anonymize it.

10. Minors

This site is not directed at minors and we do not knowingly collect their data. If you are a parent, guardian or representative and believe a minor has given us data, write to us so we can delete it. When processing data of children or adolescents is necessary, it will be done respecting their best interests and with the authorization of their legal representative.

11. Cookies

We use cookies and similar technologies. See the cookies policy published in this section to learn which types we use and how to manage them.

12. Changes to this policy

We may update this policy for legal or operational reasons. The current version is the one published on the site. If a change substantially alters the purposes of processing, we will let you know and, where applicable, request a new authorization.

This English text is provided for convenience. In case of discrepancy, the Spanish version prevails.