Privacy policy

Last Updated: July 21, 2025
Operating Entity: Tendencias Promoda S.A.S. d/b/a PALMACEA (“Palmacea,” “we,” “us,” “our”)

This Privacy Policy explains how Palmacea collects, uses, discloses, and protects personal data when you visit our websites, use our mobile experiences, interact with our online services, purchase our products, or otherwise engage with us (collectively, the “Services”). By using the Services, you agree to this Privacy Policy and our Terms and Conditions.

Regional Notices. Additional disclosures may apply depending on where you live. See Section 12 (Your Privacy Rights by Region) for specific rights for residents of the United States (including California) and Mexico.

1) Definitions

“Personal Data” means information that identifies, relates to, describes, or could reasonably be linked to an identified or identifiable natural person (e.g., name, email, shipping address, phone, purchase history, identifiers, device data, user-generated content).
“Sensitive Data” includes data that may present higher privacy risks (e.g., health information, biometric identifiers, precise geolocation).
“Processing” means any operation performed on Personal Data (collection, storage, use, disclosure, transfer, deletion).
“Controller/Responsible Party (Responsable)” means the entity that determines purposes and means of processing Personal Data (Palmacea).
“Processor/Encargado” means a third party that processes Personal Data on behalf of the Controller.
“Minor/Child” refers to an individual under 13 years of age in the U.S. (COPPA) and under 18 years in Mexico (LFPDPPP), subject to applicable law.

2) Scope and Purpose

This Policy applies to all Personal Data we process across our operations and databases, including data from customers, site visitors, applicants, vendors, and partners. We process Personal Data for the purposes described in Section 5 under appropriate safeguards.

3) Principles

We process Personal Data according to principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability. We implement reasonable technical and organizational measures to secure Personal Data and restrict access on a need-to-know basis.

4) Lawful Bases (Overview)

Depending on your location, we rely on one or more of the following bases: your consent; performance of a contract; compliance with legal obligations; our legitimate interests (e.g., securing our Services, preventing fraud, improving customer experience); or other bases permitted by applicable law.

5) Categories of Personal Data We Collect and Purposes

Data You Provide: identification and contact data (name, email, phone, shipping/billing address), account credentials, order details, returns/exchanges information, customer service communications, reviews and UGC (user-generated content), marketing preferences.
Payment Data: tokenized payment information provided via our payment processors; we do not store full card numbers.
Automatically Collected Data: device identifiers, IP address, approximate location, session logs, usage data, and cookie/SDK information.
Sensitive Data: generally not required; if processed (e.g., health/sizing notes you voluntarily provide), we do so only where necessary and with appropriate safeguards.

Primary Purposes:

Provide, personalize, and operate the Services and fulfill orders.
Customer support, returns/exchanges, and warranty administration.
Payment processing and fraud prevention.
Marketing and promotions (including email/SMS with your consent where required).
Analytics, product improvement, and security monitoring.
Compliance with legal obligations and enforcement of our Terms.

6) Cookies, Pixels, and Similar Technologies

We use cookies and similar tools to enable core functionality (e.g., cart, checkout), measure performance, and personalize content/ads. Where required by law, we will obtain your consent for non-essential cookies. You can manage preferences via our cookie banner/settings and your browser/device controls. Disabling cookies may affect the site’s functionality.

7) Disclosures and International Transfers

We share Personal Data with:

Service Providers/Processors (e.g., payment gateways, cloud hosting, customer support tools, logistics and carriers such as FedEx, analytics and advertising partners) under contracts that limit use to our instructions.
Affiliates and Strategic Partners where necessary for operations.
Authorities where required by law, to protect rights, or to address fraud/security.
Business Transfers (e.g., merger, acquisition, asset sale), subject to continuity of protections.

Because we operate internationally, we may transfer Personal Data to countries outside your own (including to Colombia and the U.S.). We implement appropriate safeguards for cross-border transfers consistent with applicable law (e.g., contractual protections).

8) Children’s Privacy

Our Services are not directed to children under 13 in the United States, and we do not knowingly collect Personal Data from them without verifiable parental consent (per COPPA). In Mexico, we process minors’ data only with appropriate consent and in their best interest, in line with applicable law. If you believe a child provided data without required consent, contact us (Section 15) to request deletion.

9) Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No system is 100% secure; please use strong passwords and safeguard your account credentials.

10) Retention

We retain Personal Data only for as long as needed for the purposes described here, including to comply with legal, accounting, or reporting requirements, resolve disputes, and enforce agreements. When retention ends, we delete or de-identify data in a secure manner.

11) Your Choices

Marketing Communications: You can unsubscribe via the link in our emails/SMS or by contacting us.
Cookies/Tracking: Manage via our cookie banner and browser/device settings.
Account: You may update certain information in your account settings or by contacting Customer Support.

12) Your Privacy Rights by Region

A) United States (including California)

Depending on your state, you may have rights to access, correct, delete, and obtain a portable copy of certain Personal Data; to opt out of specific processing such as targeted advertising, sale/share of Personal Data, or certain profiling; and to appeal our decisions.
For California residents (CCPA/CPRA), you also have the right to know categories/specific pieces of Personal Data collected, sources, purposes, and categories of third-party disclosures; rights to delete/correct; to opt out of “sale”/“sharing” (as defined by law); and to limit use/disclosure of Sensitive Personal Information. We do not provide discriminatory treatment for exercising your rights.

To exercise rights, see Section 15 (How to Contact Us). We may verify your request and, where allowed, respond within the statutory period. You may use an authorized agent as permitted by law.

B) Mexico (LFPDPPP – ARCO Rights)

Mexican residents have ARCO rights: Acceso, Rectificación, Cancelación y Oposición al tratamiento de sus datos. También pueden revocar su consentimiento y limitar el uso o divulgación de sus datos, salvo excepciones legales (por ejemplo, cumplimiento contractual u obligaciones legales). Para ejercer estos derechos, contáctanos (Sección 15). Atenderemos tu solicitud dentro de los plazos de ley e indicaremos requisitos de identidad/representación y, en su caso, los medios para la entrega de información.

13) Source of Funds; Fraud and AML Screening

To protect our customers and comply with applicable laws, we may perform checks to help prevent fraud, money laundering, and other illicit activity (e.g., screening transactions, verifying certain information, consulting public or restricted lists), and may decline or cancel orders consistent with legal requirements.

14) Changes to This Policy

We may update this Policy periodically. If we make material changes, we will post the updated Policy and revise the “Last Updated” date. Continued use of the Services after changes take effect constitutes acceptance.

15) How to Contact Us (Rights Requests & Questions)

Privacy Requests / Data Subject Rights: privacy@palmacea.com
Customer Support: support@palmacea.com
Postal Address (Controller/Responsible Party): Tendencias Promoda S.A.S., Bogotá, Colombia (operational headquarters)

When contacting us about your rights, please include your full name, contact information, the country/state where you reside, and a description of your request. We will respond within the timeframe required by applicable law.

Regulatory Contacts (Informational):

U.S. (California): You may contact the California Privacy Protection Agency regarding CCPA matters.
Mexico: You may contact the INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) about data protection concerns.

16) Additional Notices

Third-Party Links/Services. Our Services may link to third-party sites/services. Their privacy practices are governed by their own policies.
Do Not Track. Our Services do not respond to browser DNT signals at this time.
No Sale to Data Brokers. We do not sell Personal Data to data brokers as that term is commonly understood. Where a jurisdiction defines “sale” or “share” more broadly (e.g., California), you may still opt out using the methods provided in Section 12.

Annex: Summary of Categories and Typical Disclosures (U.S. CCPA Mapping)

Identifiers & Contact Data: collected; shared with service providers (fulfillment, payments, support, marketing) and carriers (e.g., FedEx).
Commercial Information (orders, returns): collected; shared with service providers for fulfillment and analytics.
Internet/Device Activity: collected via cookies/SDKs; shared with analytics/advertising partners as permitted.
Geolocation (approximate): collected via IP; used for fraud prevention, localization, and logistics.

Sensitive Personal Information: generally not collected; if processed, limited and subject to enhanced safeguards.

Search Products