Privacy policy

Personal Data Processing Policy

In force since October 5, 2026.

At SOMOS CACAO SAS BIC we take care of the information of the people who buy from us, write to us, sell us their cacao or work with us. This policy explains what data we collect, what we use it for, and how each person can access it, correct it or ask us to delete it, in accordance with Law 1581 of 2012, Decree 1377 of 2013 and the other Colombian rules on the protection of personal data.

1. Data controller

Company name: SOMOS CACAO SAS BIC
Tax ID (NIT): 901.147.618-1
Domicile: Cúcuta, Norte de Santander, Colombia
Address: Avenida 1 # 31-79, Oficina 204, Condominio Bosques del Venado, Cúcuta
Email: somoscacaocolombia@gmail.com
Phone: +57 311 366 4656

2. What data we collect

Identification and contact details: name, email, phone number, shipping and billing addresses, and identity document when needed for electronic invoicing.
Purchases: products, orders, payments, shipments, returns and the messages you send us. Card details are processed directly by the payment gateways; we do not store them.
Browsing: IP address, device and browser type, pages visited and use of the site, collected through cookies and similar technologies. See section 6.
Partner growers, suppliers and business customers: contact, farm or company, commercial and payment details.
Employees and candidates: the data needed for recruitment and the employment relationship.

We do not ask for sensitive data, such as health information, ethnic origin, religious beliefs or political opinions. If they were ever needed, we would ask for them with express authorization and answering would be optional. Photos and videos in which people appear are published only with their authorization. We do not knowingly collect data from minors.

3. What we use the data for

To process orders and payments, issue the electronic invoice, dispatch and deliver the products.
To handle requests, complaints, claims, warranties and returns.
To send news, launches, promotions and content about cacao by email, WhatsApp or text message, only to those who authorize it. Anyone can stop receiving them at any time.
To measure and improve the website and our products using usage statistics.
To show advertising for our products on social networks and search engines, when the person accepts advertising cookies.
To manage the relationship with partner growers, suppliers and business customers: purchases, payments, contracts and traceability of the cacao by lot. With prior authorization, to tell the story of their farm on our channels and at scorigen.com.
To manage recruitment, hiring and payroll processes.
To prevent fraud, protect the security of the site and comply with legal, accounting and tax obligations.

4. How processing is authorized

We ask for authorization before collecting the data. It may be given in writing, verbally or through unequivocal conduct, such as ticking a box, submitting a form after reading the notice that accompanies it, or accepting cookies in the site's notice. We keep proof of that authorization. Authorization is not required in the cases set out in Article 10 of Law 1581 of 2012, for example when an authority requests the data in the exercise of its functions or when the data is public.

5. Who we share the data with

We do not sell personal data. We share it only with those who help us operate, and only for the purposes of this policy:

Shopify, the platform that hosts the online store.
Payment gateways and financial institutions.
Courier and transport companies that deliver the orders.
Providers of electronic invoicing, accounting and communications, such as email and WhatsApp.
Analytics and advertising tools such as Google, Meta and TikTok, only when the person accepts those cookies.
Authorities, when required by law.

Some of these providers store the information outside Colombia, for example in the United States or Canada. In those cases we require them to protect it with adequate security measures, in accordance with Law 1581 of 2012.

6. Cookies

Cookies are small files that the site stores in the browser. We use three types:

Necessary: they make the store work, for example the cart, checkout and security. They cannot be disabled from the site.
Analytics: they tell us how many people visit the site and how they use it, with tools such as Google Analytics and Shopify statistics.
Advertising: they allow us to show Somos Cacao ads on Facebook, Instagram, TikTok and Google, and to measure their results.

Analytics and advertising cookies are only activated if the person accepts them in the cookie notice. The choice can be changed at any time from the "Cookie preferences" link at the bottom of the page, or by deleting cookies from the browser settings.

7. Rights of data subjects

Any person whose data we process may:

Access, update and correct their data.
Request proof of the authorization they gave us.
Be informed, upon request, of the use we have made of their data.
Revoke the authorization or request the deletion of their data, when there is no legal or contractual duty to keep it.
Consult their data free of charge.
File complaints with the Superintendencia de Industria y Comercio (Colombian data protection authority), after having submitted the query or claim to us.

8. How to exercise these rights

The Management of SOMOS CACAO SAS BIC handles queries and claims about personal data. They can be sent to somoscacaocolombia@gmail.com, by phone at +57 311 366 4656, or in writing to our office. The request must include the full name, identity document, a clear description of what is being requested, and contact details for the reply.

Queries: we reply within a maximum of 10 business days from receipt of the request. If that is not possible, we explain the reason before that period expires and reply within a maximum of 5 additional business days.
Claims to correct, update or delete data, or for a possible breach of this policy: we reply within a maximum of 15 business days from the day after receipt. If that is not possible, we explain the reason and reply within a maximum of 8 additional business days. If the claim is incomplete, we will request the missing information within 5 days. If 2 months pass without receiving it, the claim will be deemed withdrawn.

9. Security and retention

We protect the data with reasonable technical, human and administrative measures to prevent its loss, or unauthorized consultation, use or access. We keep it for as long as it is needed for the purposes of this policy and for the time required by commercial, accounting and tax regulations. After that we delete or anonymize it.

10. Validity and changes

This policy is in force from October 5, 2026. The databases will remain in force for as long as SOMOS CACAO SAS BIC carries on its activity and as long as they are needed for the purposes described. If we make significant changes to this policy, we will publish them on this site before applying them.

Cart