PERSONAL DATA PROCESSING POLICY - SEDANKI

1. PURPOSE

The purpose of this Personal Data Processing Policy is to establish the guidelines applicable to the collection, storage, use, circulation, transmission, transfer, updating, and suppression of personal data processed by SEDANKI.

SEDANKI conducts e-commerce activities through a virtual store hosted on Shopify, through which it sells travel accessories and other products offered to consumers.

The processing of personal data will be carried out in accordance with Article 15 of the Political Constitution, Law 1581 of 2012, Decree 1074 of 2015, and other regulations that modify, add to, or replace them.

Law 1581 of 2012 establishes, among others, the principles of legality, purpose, freedom, truthfulness, transparency, restricted access, security, and confidentiality applicable to the processing of personal data.

2. DATA CONTROLLER

The Data Controller is:
Trade Name: SEDANKI
NIT (Tax ID): 39818935-5
Email: servicioalcliente@sedanki.com
Phone: 3144528525

For the purposes of this Policy, when the expression SEDANKI is used, it shall be understood to refer to the commercial establishment or trade name under which the previously identified natural person carries out their activities.

3. SCOPE OF APPLICATION

This Policy applies to the personal data of:

  • Customers.
  • Buyers.
  • Virtual store users.
  • Individuals who request product information.
  • Individuals who contact SEDANKI via WhatsApp, email, social media, or other channels.
  • Suppliers.
  • Commercial partners.
  • Individuals who submit petitions, complaints, claims, or requests.
  • Visitors and users of the virtual store, when personal information is processed.

4. PERSONAL DATA THAT MAY BE PROCESSED

Depending on the interaction with SEDANKI, the following data may be subject to processing:

4.1. Identification Data

  • Full name.
  • Type and number of identification document, when necessary.
  • Username, when applicable.

4.2. Contact Data

  • Email address.
  • Phone number.
  • WhatsApp number.
  • Delivery address.
  • City.
  • Department.
  • Country.

4.3. Purchase-related Information

  • Products purchased.
  • Order number.
  • Date of purchase.
  • Transaction value.
  • Order status.
  • Information related to exchanges, warranties, returns, and refunds.

4.4. Technological Information

When applicable and according to the tools used by the store:

  • IP address.
  • Device information.
  • Browser.
  • Navigation information.
  • Cookies and similar technologies.
  • Statistical information about store usage.

SEDANKI will endeavor to limit the collected information to that which is necessary and relevant for the stated purposes.

5. FINANCIAL DATA AND PAYMENT METHODS

SEDANKI may receive information related to the status of a transaction, including payment confirmation, transaction value, date, and transaction reference.

When payment is processed through a payment gateway or financial institution, the sensitive financial data of the operation may be processed directly by that entity.

SEDANKI will not deliberately store full card numbers, security codes, or other financial credentials when processing is directly handled by the respective gateway or financial institution.

6. PURPOSES OF PROCESSING

Personal data may be processed for the following purposes:

6.1. Purchase Processing

  • Receive and manage orders.
  • Confirm purchases.
  • Verify order information.
  • Process payments.
  • Issue documents associated with the operation.
  • Manage orders and new developments.

6.2. Product Delivery

SEDANKI may provide third parties with the strictly necessary data to effect the delivery of the purchased product. This may include:

  • Logistics operators.
  • Shipping companies.
  • Storage providers.
  • Fulfillment providers.
  • Dropshipping providers.
  • Dispatch providers.
  • Platforms used to manage orders.

7. DROPSHIPPING MODEL

SEDANKI may use dropshipping providers and platforms for the management of certain orders.

Consequently, depending on the product and the operation, the order may be prepared and/or dispatched directly by a provider or third party contracted by SEDANKI.

When it is necessary to transmit personal data to such third parties, SEDANKI will limit the information to that necessary to fulfill the corresponding purpose.

The third party receiving the data must use it exclusively for the authorized, contractually established, or legally permitted purposes.

8. SHOPIFY

SEDANKI's virtual store may be hosted and/or managed through the Shopify platform.

Consequently, certain data may be processed through the technological infrastructure, tools, and services provided by Shopify, in accordance with the conditions and policies applicable to that platform.

SEDANKI will continue to be responsible for the processing of personal data it directly carries out and will endeavor to establish the necessary contractual and operational measures with respect to third parties involved in its operation.

9. CUSTOMER SERVICE PURPOSES

Data may be processed for:

  • Answering inquiries.
  • Managing requests.
  • Addressing PQR (Petitions, Complaints, Claims).
  • Processing warranties.
  • Managing exchanges.
  • Processing returns.
  • Processing withdrawals.
  • Managing refunds.
  • Verifying order information.
  • Tracking deliveries.

10. COMMERCIAL AND ADVERTISING PURPOSES

When the data subject grants the corresponding authorization, SEDANKI may use their data to:

  • Send promotions.
  • Inform about discounts.
  • Announce new products.
  • Send commercial campaigns.
  • Carry out marketing activities.
  • Send information about products related to those purchased.
  • Perform commercial and statistical analysis.

Authorization for commercial communications will be independent of that necessary to execute the purchase when legally applicable.

The data subject may request the cessation of commercial communications.

11. COOKIES

SEDANKI may use cookies and similar technologies to:

  • Facilitate the operation of the store.
  • Remember certain preferences.
  • Analyze traffic.
  • Improve user experience.
  • Obtain statistics.
  • Perform advertising or remarketing activities when applicable.

The user may manage certain preferences through their browser settings and/or tools enabled in the store.

When the cookies used involve the processing of personal data, such processing will be carried out in accordance with applicable law and this Policy.

12. SUPPLIERS AND PROCESSORS

SEDANKI may contract third parties to be involved in the operation of the store, such as:

  • Shopify.
  • Droppi.
  • Logistics operators.
  • Carriers.
  • Payment gateways.
  • Technology providers.
  • Storage providers.
  • Customer service providers.
  • Marketing tool providers.
  • Analytics service providers.
  • Dropshipping providers and platforms.

When applicable, these third parties will act as Data Processors and must process the information according to the purposes established by SEDANKI and the applicable legal obligations.

Law 1581 defines the Controller as the one who decides on the database or its processing, and the Processor as the one who processes the data on behalf of the Controller.

13. INTERNATIONAL TRANSFERS AND TRANSMISSIONS

Due to the use of technological platforms and providers located inside or outside Colombia, personal data may be subject to international transmission or transfer when necessary to provide the contracted services.

SEDANKI will adopt the measures and verifications required under Colombian personal data protection legislation.

14. RIGHTS OF DATA SUBJECTS

The data subject may:

  1. Know, update, and rectify their data.
  2. Request information about the processing carried out.
  3. Request proof of authorization when applicable.
  4. Submit inquiries and claims.
  5. Request the suppression of their data when legally appropriate.
  6. Revoke authorization when appropriate.
  7. Access their personal data free of charge.
  8. File complaints with the Superintendency of Industry and Commerce when they believe there has been a violation of applicable legislation.

15. AUTHORIZATION

SEDANKI will request the prior, express, and informed authorization of the data subject when legally required.

Authorization may be obtained through physical, electronic, or digital mechanisms that allow proof of the declaration of will to be retained.

SEDANKI will keep evidence of the authorizations obtained.

16. SECURITY

SEDANKI will adopt reasonable technical, administrative, and human measures to protect personal data against:

  • Unauthorized access.
  • Loss.
  • Alteration.
  • Disclosure.
  • Fraudulent use.
  • Unauthorized processing.

17. PROCEDURE FOR INQUIRIES

The data subject may submit inquiries through:
Email: servicioalcliente@sedanki.com
WhatsApp: 3144528525

The inquiry must contain:

  • Name of the data subject.
  • Identification document.
  • Description of the request.
  • Contact information.

Inquiries will be addressed within the terms established by applicable law.

Law 1581 generally provides a period of ten (10) business days to address inquiries, with the possibility of a five (5) business day extension in legally foreseen cases.

18. PROCEDURE FOR CLAIMS

When the data subject believes that the information should be corrected, updated, or suppressed, or believes that there is a breach of applicable regulations, they may submit a claim. The claim must contain:

  1. Identification of the data subject.
  2. Description of the facts.
  3. Request.
  4. Address or means to receive a response.
  5. Documents supporting the request, when applicable.

SEDANKI will process the claim within the terms established by applicable law.

19. RETENTION

Data will be retained for the time necessary to fulfill the purposes for which it was collected and as long as there are legal, contractual, accounting, tax, or evidentiary obligations justifying its retention.

Once the corresponding purposes have been fulfilled, it will proceed to its deletion, anonymization, or retention when a legal obligation requires it.

20. DATA OF CHILDREN AND ADOLESCENTS

SEDANKI will not deliberately collect personal data of children and adolescents unless there is a legitimate purpose and applicable legal requirements are met.

21. VALIDITY AND MODIFICATIONS

This Policy is effective as of September 1, 2026.

SEDANKI may modify it when necessary due to regulatory, technological, commercial, or operational changes.