Privacy and Personal Data Policy

Data controller

KORA SHOPP S.A.S. is the controller of your personal data.

KORA SHOPP S.A.S., a company identified with Colombian tax ID (NIT) 902.114.365-5 and with its address at Calle 25 Sur # 32-23, Neiva, Huila, Colombia, is the controller of the personal data collected through this store and its customer service channels.

KORA operates in the United States and in Colombia. KORA SHOPPING LLC is the parent company, organized in the United States under registration UBI 606212090 (Washington), with its registered address at 7212 Harrow Pl, Arlington, WA 98223-4635, Estados Unidos. KORA SHOPP S.A.S. is its company in Colombia, identified with Colombian tax ID (NIT) 902.114.365-5, registered under matrícula mercantil 0000435099 de la Cámara de Comercio del Huila, with its address at Calle 25 Sur # 32-23, Neiva, Huila, Colombia.

For any matter related to your personal data, write to info.kora.shopping@gmail.com.

This is a translation provided for convenience. For purchases governed by Colombian law, the Spanish version of this document prevails in case of any discrepancy.

What data we collect

Only what we need to sell to you, deliver and assist you. Never your card details.

Only what we need to sell to you and assist you:

• First and last name, and ID document when you provide it.
• Email address.
• Phone number, to coordinate the order and delivery.
• Billing address and delivery address.
• Your order history and Kora Cashback balance.
• The result of your card payments (approved or declined), their reference and amount.

We do not receive, see or store your credit or debit card details (number, expiration date or security code). You enter them directly on our payment processor's secure payment page, and the processor handles them.

We do not collect sensitive data or data from minors. If you believe you gave us any by mistake, write to us and we will delete it.

How we use it

To manage your orders, payments, deliveries and requests. Marketing requires a separate consent.

• Record your order and keep the details of what you bought.
• Process your card payment, or arrange payment by another method with you through WhatsApp.
• Email you a receipt for each status change of your order: received, confirmed, being prepared, shipped, delivered, cancelled or expired.
• Calculate and credit your Kora Cashback balance, and notify you before it expires.
• Manage your shipments: the recipient's name, phone and address go to the carrier so it can deliver.
• Handle your exchange, warranty, withdrawal, refund and claim requests, and provide customer service.
• File claims with the carrier when a product arrives damaged or incomplete, using the evidence you send us.
• Protect transactions and prevent fraud.
• Comply with legal, accounting and tax obligations.

Sending you news, launches and promotions is a different purpose and requires a separate consent: the optional checkbox at checkout, or subscribing from the store. You can withdraw it at any time without affecting your purchases.

Unsubscribing from marketing does not stop your order receipts. Those emails are not advertising: they are the record of what you bought and paid.

Who we share it with

Only with those we need to charge, deliver and run the store. We never sell it.

We do not sell, rent or transfer your personal data to third parties for commercial purposes. It is only known, under our instructions and with no authorization to use it for anything else, by:

• KORA SHOPPING LLC, our parent company in the United States, and its payment processor, when you pay by card: they receive the order data needed to process the charge (name, email, billing address and amount).
• The carrier, to deliver your order.
• The providers of services we need to run the store: platform hosting, email delivery and image storage.

Some of these recipients are in the United States. By accepting this policy you authorize that international data transfer, made for the same purposes and with the same safeguards described here, under article 26 of Colombian Law 1581 of 2012.

Your rights

You can access, update, correct and delete your data, and withdraw your consent, free of charge and at any time.

Colombian Law 1581 of 2012 grants you, at any time and free of charge, the right to:

• Know what data of yours we hold and how we use it.
• Update or correct it when it is incomplete or wrong.
• Request its deletion, unless there is a legal or contractual duty to keep it.
• Withdraw the consent you gave us.
• Be informed, on request, of how your data has been used.
• File complaints with the Superintendence of Industry and Commerce (SIC).

To exercise any of them, write to info.kora.shopping@gmail.com with your name and the right you want to exercise. We answer inquiries within ten (10) business days and claims within fifteen (15) business days from receipt. If we need more time we will explain why and when you will get an answer.

Please note that if you ask us to delete your data, you will lose access to your order history and the Kora Cashback balance linked to your account. We will only keep the sales information that the law requires us to keep for accounting and tax purposes.

How long we keep it

As long as we need it to serve you and for the periods required by law.

We keep your data while you have an active account or while it is needed for the purposes described. After that, only for the periods required by applicable accounting, tax and commercial rules.

Security

Encrypted connection, restricted access and no card data in our systems.

We apply reasonable technical and administrative measures to protect your data: every connection to the store is encrypted, access to the admin panel is restricted by permissions, and passwords are stored encrypted, never in plain text. Details about card payments are in our payment security policy.

No system is infallible. If an incident affecting your personal data ever occurs, we will inform you and report it to the authority as required by law.

Cookies

We only use cookies the store needs to work.

This store only uses strictly necessary cookies: keeping you signed in, remembering the currency and language you chose and keeping the products in your cart. We do not use advertising or third-party tracking cookies, and we do not profile your browsing behavior.

Changes to this policy

We publish every version with its date and notify you of significant changes.

If we change this policy we will publish the new version on this page with its update date. When a change substantially affects the purposes of processing, we will notify you before applying it.