Política de tratamiento de datos personales

1. Data controller

Tisanas Orquídea S.A.S., the company behind Orquídea Infusiones, headquartered in Bogotá D.C., Colombia, is responsible for processing the personal data collected through this website, contact channels, commercial forms, purchases, customer service, and digital communications.

• Address: Carrera 72i #37D-53 Sur, Bogotá D.C., Colombia.
• Phone: (601) 451 3380.
• Contact email: servicioalcliente@orquideainfusiones.com.
• Business WhatsApp: +57 313 204 0539.

2. Legal framework

This policy follows Statutory Law 1581 of 2012, Decree 1377 of 2013, Regulatory Decree 1074 of 2015, and other Colombian rules governing personal-data protection, habeas data, and data-subject rights.

3. Personal data we may collect

Depending on our relationship with you, we may collect your name, identification document when needed for billing or dispatch, email, phone, shipping or billing address, city, purchase information, order history, messages submitted through forms, commercial preferences, browsing data, cookies, IP address, device identifiers, and data needed to prevent fraud or meet legal obligations.

We do not request sensitive data unless strictly necessary for a specific purpose and you provide prior, express, and informed authorization when required by law.

4. Purposes of processing

Personal data may be processed to:

• Process purchases, payments, billing, dispatch, returns, and after-sales service.
• Answer contact requests, PQRs, wholesale quotes, B2B, private-label, hotel, HORECA, retail, and distributor requests.
• Manage relationships with customers, suppliers, partners, and prospects.
• Send transactional information, order confirmations, service communications, and updates related to your requests.
• Send commercial communications, promotions, content, surveys, or product information when authorized or otherwise permitted by law.
• Analyze site operation, improve user experience, measure campaigns, maintain security and performance, prevent fraud, and create aggregated statistics.
• Meet legal, accounting, tax, regulatory, contractual, and authority requirements.

5. Cookies and similar technologies

This site runs on Shopify and may use cookies, local storage, browser cache, and similar technologies needed to operate the store, retain your cart, maintain sessions, process payments, remember preferences, measure performance, improve the experience, and, when authorized, provide personalized analytics or advertising.

You can accept or reject non-essential cookies through the site's cookie notice, or manage and delete cookies in your browser settings. Some technical cookies are necessary for the store to work correctly.

6. Data-subject rights

Data subjects may access, update, correct, request proof of authorization, learn how their data is used, file complaints with the Superintendence of Industry and Commerce, withdraw authorization, and request deletion when permitted by law.

7. Requests, complaints, and withdrawal procedure

To exercise your rights, write to servicioalcliente@orquideainfusiones.com with your full name, contact details, a clear description of the request, and documents supporting your identity or representation when applicable.

Requests will be handled within the time limits established by Law 1581 of 2012. Complaints will follow the applicable legal procedure. If information is missing, we may request additional details to process the request correctly.

8. Processors, third parties, and transfers

To fulfill these purposes, we may share data with processors and suppliers that support our operation, including Shopify, payment gateways, logistics companies, analytics tools, technology providers, communications providers, accounting, tax, or legal advisers, and competent authorities when legally required.

For national or international transmissions or transfers, we will seek to apply reasonable contractual, technical, and organizational safeguards to protect information under applicable Colombian law.

9. Security and retention

We adopt reasonable administrative, technical, and physical safeguards to protect personal data against loss, alteration, unauthorized consultation, use, or access. Data is retained only as long as needed for the processing purposes and for legal, contractual, accounting, tax, or claim-defense obligations.

10. Changes to this policy

We may update this policy to reflect legal, operational, or technological changes. The current version will remain available on this website. When changes are material, we will seek to communicate them through reasonable channels.