Mi Casa.
Mi Casa.

Idioma

Privacy Policy

Last updated: [DATE — fill in on publish]

Note (remove before launch): NIT is still being issued as part of incorporation — replace [NIT] once assigned. This policy is written to be GDPR-appropriate for EU/Malta customers but is not a substitute for a lawyer's review before processing real customer data at scale.

1. Who is responsible for your data

Mi Casa Col ("Mi Casa"), operated by Mi Casa Oriente S.A.S., domiciled in Oriente Antioqueño, Antioquia, Colombia, NIT [NIT — pending assignment], is the data controller for personal data collected through micasacol.com. Contact: venta@micasacol.com.

2. What we collect

  • Account data: name, email address, password (stored as a salted hash, never in plain text).
  • Order data: shipping address, items purchased, order history.
  • Payment data: we do not store your card number. Payments are processed by Stripe, our payment processor, under its own privacy policy.
  • If you apply to sell on Mi Casa: business name, contact details, and any documents you submit as part of the seller application.
  • Communications: messages you send us, e.g. support requests.
  • Basic technical data (IP address, browser type) for security and to keep the site working, and, where enabled, aggregated analytics on how the site is used.

3. Why we process it (legal basis)

  • Performance of a contract — to process your order, arrange shipping, and provide customer support.
  • Legal obligation — e.g. tax, accounting, and customs/export documentation.
  • Legitimate interest — to keep the site secure and improve it.
  • Consent — for marketing emails, which you can withdraw at any time by unsubscribing.

4. Who we share it with

We share the minimum necessary data with: Stripe (payments), our shipping/logistics providers (to deliver your order), and cloud hosting providers (Google Cloud) who store data on our behalf under a data processing agreement. We do not sell your personal data.

5. International transfers

Because products ship from Colombia, your shipping address is shared with the courier handling international delivery. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required by law.

6. How long we keep it

We keep account and order data for as long as your account is active and afterwards for as long as needed to satisfy tax, accounting, or legal retention requirements.

7. Your rights (EU/UK GDPR)

If you are in the EU/EEA, UK, or a jurisdiction with similar protections, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten"), subject to legal retention needs.
  • Request a portable copy of your data.
  • Object to or restrict certain processing.
  • Withdraw consent to marketing at any time.

To exercise any of these rights, email venta@micasacol.com. If you are in Malta, you also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC).

8. Cookies

We use essential cookies required for the site and shopping cart to function. [FILL IN: if analytics/marketing cookies are added, disclose them here and add a consent banner before enabling them.]

9. Changes to this policy

We may update this policy from time to time; material changes will be posted on this page.

10. Contact

Questions about this policy: venta@micasacol.com.