Privacy

Controller. Cinnamon Soul, operating in Ibagué, Colombia, is responsible for the processing described here. The channel for privacy questions and complaints is published at the end of this page.

Data processed. Through this site, we collect name, mobile number, address, optional note, requested date, language, and order details. We also retain the minimum technical records needed for security, confirmations, and duplicate-order prevention. The external support channel may process information you send through it under its own terms. We do not request email, a customer account, GPS location, payment details, or advertising data. Do not include unnecessary sensitive information in the note.

Purposes and authorization. We use the data to receive, review, accept, prepare, and deliver the order; contact you when needed to fulfill it; provide support; protect the service; comply with legal obligations; and retain operational records. By submitting the order after seeing this notice, you authorize this processing. We do not use the data for marketing.

Access and third parties. Access is limited to authorized staff and infrastructure, backup, or support-channel providers that need to process the information to operate the service under security and confidentiality duties. We may also disclose it to an authority when required by law. We do not sell personal data.

Retention and security. The retention period depends on what is needed for delivery, support, security, and applicable recordkeeping obligations. Deletion requests are handled when legally available. We use access controls, protected sessions, transport encryption in production, logs without form data, and restricted backups. No system can be guaranteed completely secure.

Your rights. You may know and access your data free of charge, update or correct it, request proof of authorization, ask how it has been used, request deletion or revoke authorization when legally available, and complain to Colombia’s Superintendence of Industry and Commerce after first completing the question or complaint process with Cinnamon Soul.

Procedure. Use the privacy channel to send your name, the specific request, a response channel, and the information needed to verify that you are the data subject. Questions are answered within ten business days and complete complaints within fifteen business days, subject to the extensions allowed by Colombia’s Law 1581 of 2012. This policy applies from July 25, 2026.