Cart is empty Privacy Policy
Effective November 9, 2026. This policy explains what personal data we collect on andez.co, why we use it and how you can control it. We follow Colombian law (Law 1581 of 2012 and its regulations) and, for visitors elsewhere, the general principles of data protection laws such as the GDPR.
1. Who is responsible
Jonathan Hernández Clavijo, ID no. 1.088.261.433 (cédula de ciudadanía), address Cra 13 2E-04 Aurora Circunvalar, Portería 3 Bloque 10 Apto 604, Pereira, Risaralda, Colombia, email info@andez.co, phone +57 320 610 0818.
2. What we collect
- Account: name, email, password (stored encrypted), country and language. If you sign in with Google, we receive your name and email from that account.
- Purchases and memberships: name, ID number if the payment requires it, billing and shipping address, city, phone, items bought and payment status.
- Payments: your card or account details are processed by Wompi, PayPal or Wise; we do not store them and only receive the payment confirmation.
- Newsletter: email, language and the lists you subscribe to.
- Comments: what you write and your public name.
- Technical data: IP address, browser, pages viewed and an approximate country derived from the IP, which we use to choose language and currency.
- We do not ask for sensitive data (health, origin, beliefs, biometrics). If you send it to us on your own, we do not use it for any purpose.
3. Why we use your data
- To create and manage your account and membership, and give you the content you are entitled to.
- To process orders, payments, shipping, returns and after-sales support.
- To send you the newsletter and news about the work, if you agreed; you can unsubscribe from every email.
- To moderate the community, prevent fraud and keep the site secure.
- To show the site in your language and currency.
- To measure, in aggregate, how the site is used so we can improve it.
- To meet legal, accounting and tax obligations and answer authorities.
4. Legal basis and consent
Under Colombian law we process your data with your prior, express and informed authorisation, given when you tick the acceptance box at sign-up, purchase or subscription, or send us your data for a request. You can withdraw it at any time by writing to us, unless we must keep the data for a legal or contractual duty. If the GDPR applies to you, our bases are the contract with you (account, orders), your consent (newsletter, analytics cookies), our legitimate interest in running and securing the site, and legal obligations.
5. Your rights
- Know, update and correct your data.
- Ask for proof of the authorisation you gave.
- Know how we use your data.
- Withdraw your consent and ask for deletion when there is no legal duty to keep the data.
- Access your data free of charge.
- Complain to the Colombian Superintendence of Industry and Commerce (SIC) after going through us first.
- If you are in the EU or UK: also ask for restriction, portability or objection to processing, and complain to your local data protection authority.
6. How to use your rights
- Write to info@andez.co with your name, your account email and what you ask. If you act for someone else, attach proof you may do so.
- We answer queries within 10 business days, extendable by 5 more business days if we tell you why.
- We answer claims (correction, update or deletion) within 15 business days, extendable by 8 more business days. If information is missing, we ask for it within 5 days.
7. Who we share data with
We do not sell your data. We share it only with the providers that make the site work, and only as needed:
| Provider | Purpose |
|---|---|
| Hostinger | Website hosting and backups |
| Wompi, PayPal and Wise | Payment processing |
| Site analytics (Site Kit) and Google sign-in | |
| MailPoet | Newsletter and site emails |
| Couriers and postal services | Delivering your orders and postcards |
| Authorities | When a rule or valid order requires it |
Some of these providers have servers outside Colombia. By accepting this policy you authorise the international transmission and transfer of your data for these purposes, and we ask each provider for an adequate level of protection. If you are in the EU or UK, these transfers rely on your consent and on the safeguards each provider offers.
8. Cookies
We use these cookies and similar technologies:
| Type | Examples | Purpose | Duration |
|---|---|---|---|
| Necessary | woocommerce_cart_hash, woocommerce_items_in_cart, pll_language, andez_geo, andez_cookies | Cart, language, country to show currency and language, and remembering your cookie choice | Session or up to 6 months |
| Analytics | _ga and similar (Google) | Counting visits in aggregate (only if you accept) | Up to 2 years |
| Order origin | sbjs_* (WooCommerce) | Knowing where you came from to the shop (only if you accept) | Session or longer |
| Newsletter | mailpoet_* | Recognising subscribers and measuring sends | Varies |
| Wishlist | tinvwl_* | Remembering your list | Session |
Analytics and order-origin cookies are only activated if you tap “Accept” in the cookie notice. You can change your choice at any time from the “Cookies” link in the footer. You can also block or delete cookies in your browser settings; without the necessary ones, the cart and your session may stop working.
9. Security
We use an encrypted connection (HTTPS), encrypted passwords, restricted access to data and regular updates. No system is perfect; if a security breach affects your data we will act at once and tell the SIC and you where required.
10. How long we keep data
While your account is active and as long as needed for the purposes in this policy. Order and payment records are kept as long as accounting and tax rules require. When you ask for deletion, we delete or anonymise whatever we are not obliged to keep.
11. Children
The site is for people aged 18 or over. If we learn that a minor registered without a legal guardian’s permission, we delete their data.
12. California and other regions
We do not sell or share your personal information for advertising. If your local law gives you additional rights, write to info@andez.co and we will handle your request under that law as far as it applies to us.
13. Changes
If we change this policy substantially, we will tell you by email or on the site before it applies. The current version and its date are always on this page. The rules for using the site are in the Terms and Conditions.