Legal
Privacy Policy
Personal data processing in accordance with Law 1581 of 2012.
Privacy and Personal Data Processing Policy
Last updated: October 16, 2026.
This policy explains how SANTO CARBON AHUMADORES SAS processes the personal data of people who visit ahumadoressantocarbon.com, purchase products, request a quote, contact us through our channels, or use the AI chat. Data is processed in accordance with Law 1581 of 2012, Decree 1074 of 2015, and applicable Colombian regulations.
This policy does not replace the authorization that must be obtained when required by law. By providing personal data through our channels, you authorize its processing for the stated purposes, except in cases where the law permits data processing without authorization.
Data Controller
The controller responsible for processing your personal data is SANTO CARBON AHUMADORES SAS, identified by NIT (tax ID) 901672004-0, with its registered address at Cl. 46 #40-71, Medellín, Antioquia, Colombia.
For inquiries, complaints, updates, corrections, deletion, or revocation of authorization, email us at santocarbonbarriles@gmail.com or contact us at +573184865611.
Data We Collect
Depending on how you interact with us, we may process:
- Your name, mobile phone number, email address, and messages sent through forms, WhatsApp, or chat.
- Order details: products, quantities, totals, payment status, delivery address, department, municipality, neighborhood, and delivery notes.
- Your identification document, only when you optionally provide it for electronic invoicing.
- Campaign attribution information, such as UTM, gclid, or fbclid, and a hashed version of your IP address, to measure campaigns and prevent abuse.
- Messages you write in the AI chat and actions requested in it, such as receiving guidance or adding products to your cart.
- Information related to your use of the site when you accept analytics or advertising cookies.
We do not receive or store complete card details. Online payments are processed by the enabled payment gateways.
Purposes of Processing
We process your data to:
- Create, confirm, prepare, ship, and track your orders.
- Send transactional emails about order status: received, confirmed, being prepared, shipped with a tracking number, and delivered.
- Manage payments, exchanges, returns, exercises of the right of withdrawal, warranties, requests, and complaints.
- Issue electronic invoices when you request that your identification document be included.
- Respond to inquiries, quote requests, and contact messages.
- Provide guidance through the AI chat and, when you request it, help add items to your cart.
- Prevent fraud, abuse, and unauthorized use of the site.
- Measure campaign performance and improve the site through analytics and advertising, only when you consent to those cookies.
Service Providers and Data Transmission
We may transmit strictly necessary data to service providers acting on behalf of SANTO CARBON AHUMADORES SAS to provide the services described:
- Vercel: website hosting.
- Supabase: database.
- Wompi and Mercado Pago: online payment processing.
- Resend: transactional email delivery.
- OpenAI: operation of the AI chat.
- Google, through Google Tag Manager and its tools: analytics and advertising, only with your consent.
- Envía, Interrapidísimo, Coordinadora, and Agilex: order delivery and tracking.
We do not sell or rent your personal data. We only share the information necessary for each purpose, to fulfill legal obligations, or when authorization or a legal basis permits it.
Security and Retention
We apply reasonable administrative, technical, and personnel measures to protect data against unauthorized access, loss, alteration, disclosure, or misuse.
We retain data for as long as necessary to fulfill the purposes described, meet legal, accounting, tax, contractual, or consumer protection obligations, resolve requests, and exercise or defend rights. Afterward, the data will be deleted, anonymized, or securely retained when there is a legal retention obligation.
Your Rights as a Data Subject
As a personal data subject, you may:
- Know, update, and rectify your data.
- Request proof of authorization, subject to legal exceptions.
- Be informed about how your data has been used.
- File complaints with the Superintendencia de Industria y Comercio for violations of applicable regulations.
- Revoke authorization or request deletion of your data when applicable.
- Access personal data that has been processed, free of charge.
How to Exercise Your Rights
Send your request to santocarbonbarriles@gmail.com with the subject line “Personal Data Protection”. Include your name, contact method, a clear description of your request, and any applicable supporting documents. We may request reasonable information to verify your identity or authority to act as a representative.
Inquiries will be addressed within a maximum of ten (10) business days from receipt. If we cannot respond within that period, we will inform you of the reason and the new response date, which may not exceed five (5) additional business days.
Complaints concerning updates, rectification, deletion, revocation, or dissatisfaction will be addressed within a maximum of fifteen (15) business days starting on the day after receipt. If we cannot respond within that period, we will inform you of the reason and the new response date, which may not exceed eight (8) additional business days.
Effective Date and Changes
This policy takes effect on October 16, 2026. We may update it when our practices, service providers, or applicable regulations change. The current version will be available on this site with its update date.
