Legal
Privacy Policy
What we collect, why, and the choices you have. We collect as little as we can.
DRAFT — for legal review before trading begins. Not yet approved.
Who we are
[LEGAL ENTITY NAME], trading as COLOMÍA. Registered address: [ADDRESS]. Company number: [NUMBER]. Contact for privacy matters: [EMAIL].
What we collect and why
Forms. When you contact us, join the early-access list, register for event updates, or send a collaboration enquiry, we collect the details you type (name, email, message and any optional fields). We use them only to reply to you and, if you ticked the consent box, to send you the updates you asked for. Submissions are processed by Netlify Forms on our behalf.
Newsletter consent. We only send marketing emails if you tick the consent box. You can unsubscribe at any time using the link in any email or by contacting us.
Browser storage. Your bag, wishlist and language, region and currency preferences are stored in your browser's local storage so they persist between visits. This information stays on your device and is not sent to us.
Analytics. We do not currently run analytics or advertising cookies. If that changes we will update this policy and ask for consent where required.
Hosting. The site is hosted by Netlify, which processes standard server logs (including IP addresses) to deliver the site securely.
Legal basis
Replying to your message: our legitimate interest in responding to you. Marketing emails: your consent. Fulfilling orders (once we trade): performance of a contract and legal obligations such as tax records.
How long we keep data
Enquiries: [X months]. Newsletter subscriptions: until you unsubscribe. Order records: as required by law [typically 6–7 years].
Your rights
Under UK GDPR and EU GDPR you can ask to access, correct, delete or export your data, or object to or restrict processing. Contact [EMAIL]. You can also complain to the ICO (UK) or your local supervisory authority (EU).
International transfers
Our hosting and form providers may process data outside the UK/EU under appropriate safeguards (standard contractual clauses). [Confirm provider details.]
Changes
We will post any changes here with a new review date.
Highlighted text in [brackets] marks details that must be completed and reviewed by a legal adviser before this policy takes effect.