1. IDENTIFICATION OF THE DATA CONTROLLER

O66Y, identified with NIT 1006170352-9, with address in Cali, Colombia, is the data controller for personal data collected through our digital platform o66yverse.com.

Contact:
Email: o66yverse@gmail.com
Phone: +57 302 2484801

2. SCOPE OF THE POLICY

This policy applies to all personal data collected by O66y through our website, forms, email, WhatsApp, and other digital channels.

3. KEY DEFINITIONS

Personal Data: Information that identifies or allows the identification of a natural person.

Processing: Any operation performed on personal data, including collection, storage, use, transmission, or deletion.

Data Subject: The natural person to whom the personal data belongs.

Controller: The entity that determines the purpose and means of processing.

Processor: The person who processes data on behalf of the controller.

4. PRINCIPLES OF DATA PROCESSING

Our processing is based on: Legality, Purpose, Freedom, Veracity, Integrity, Confidentiality, Restricted Access and Circulation, Security, and Accountability.

5. PURPOSES OF PROCESSING

We collect personal data for:

• Processing purchases and product deliveries
• Sending order confirmations and shipping updates
• Commercial communications and marketing (with prior authorization)
• User behavior analysis and service improvement
• Compliance with legal and tax obligations
• Customer service and query resolution
• Fraud prevention and platform security

6. RIGHTS OF DATA SUBJECTS

In accordance with Law 1581 of 2012, you have the right to:

• Know what personal data we hold about you
• Request access to your information
• Request correction of inaccurate or incomplete data
• Request deletion of data when appropriate
• Revoke authorization for data processing
• File complaints with the Superintendency of Industry and Commerce (SIC)

7. PROCEDURE FOR EXERCISING RIGHTS

To exercise your rights of access, correction, deletion, or revocation, send a written request to o66yverse@gmail.com with your full name, identification number, and a clear description of your request. We will respond within a maximum of ten (10) business days.

8. SECURITY MEASURES

We implement technical, administrative, and physical measures to protect your data against unauthorized access, alteration, loss, or disclosure. These include encryption, restricted access, periodic audits, and staff training.

9. DATA TRANSFER AND TRANSMISSION

Your personal data will not be transferred to third parties without your prior consent, except when required by law or to fulfill contractual obligations (logistics providers, payment processors, etc.). In these cases, we require confidentiality commitments.

10. USE OF COOKIES

Our platform uses cookies to improve your browsing experience, remember preferences, and analyze site usage. You can configure your browser to reject cookies, although this may affect the functionality of the site.

11. EFFECTIVENESS AND UPDATES

This policy comes into effect from its publication date and will be updated when necessary. We will notify you of significant changes via email or by publishing them on our website.

Last updated: April 19, 2026