Privacy policy

Who is responsible for your data

Chocolates Flores Medellín is the data controller for the personal data we collect on this site, via WhatsApp or at our shop.

• Trade name: Chocolates Flores Medellín.
• Shop: Cra. 81 #34A-49, Laureles - Estadio, Medellín, Antioquia, Colombia.
• Opening hours: Every day, from 8:00 a.m. to 8:00 p.m.
• WhatsApp: 319 216 1731.
• Email: ventas@chocolatesfloresmedellin.com.
• Website: chocolatesfloresmedellin.com.

What data we collect

We only ask for what we need to sell and deliver a gift. Depending on the case, that includes:

• From the buyer: name, ID number when invoicing requires it, phone number, email and address.
• From the recipient: name, delivery address, phone number and any directions you add to help us get there.
• From the order: products, personalizations, the card message, the delivery date and time slot, and your purchase history.
• From browsing: pages viewed, products viewed, device and approximate location data provided by the browser, through cookies and analytics tools.
• From conversations: what you write to us on WhatsApp, through the contact form or by email.

We do not store your card details. When you pay online, that information is sent encrypted to the payment gateway, which processes it and is responsible for it.

Nor do we ask for sensitive data —health, ethnic origin, religious or political beliefs, biometric data— and you don't need to provide it to make a purchase.

When you give us someone else's data

Almost all of our orders are for someone else, so much of the data we receive belongs to third parties. By providing it, you declare that you are authorized to do so, and we use it solely to coordinate and carry out that delivery.

If you are that person and want to know who gave us your data, or ask us to delete it, message us: you have the same rights as the buyer.

What we use it for

• To prepare, coordinate and deliver your order, and keep you updated on its status.
• To contact you if something about the order needs to be confirmed or if there's an issue with the delivery.
• To issue purchase records and meet our accounting and tax obligations.
• To handle your questions, complaints and claims, and keep a record of how they were resolved.
• To understand how the site is used in order to improve it: which pages are viewed, which products are searched for, where checkout is abandoned.
• To send you news and promotions, only if you subscribed to the newsletter. You can unsubscribe at any time.

On what authorization

We process your data with your authorization, which you give us when you place an order, contact us or subscribe to the newsletter, and in cases where the law requires us to retain it (for example, sales records).

This authorization is freely given and you may revoke it, except for what we need to fulfill an ongoing contract or a legal obligation.

Cookies and analytics

The site uses its own cookies so the cart and session work, and Google analytics cookies to measure, in aggregate, how people browse and which products are of interest.

You can block or delete cookies from your browser. If you block the site's own cookies, the cart and checkout will stop working properly.

Who we share it with

We do not sell or rent personal data. We share it only with those who help us operate, and only what they need for their part:

• The site's hosting and email provider.
• The payment gateway, to process the transaction.
• Couriers and delivery partners, with the delivery details.
• Analytics and messaging tools, such as Google and WhatsApp.
• Authorities, when required by law or a court order.

Where it's stored and for how long

Some of these providers host information on servers outside Colombia, which involves an international data transfer; by accepting this policy you authorize it, and we require those providers to meet security standards equivalent to our own.

We keep the data for as long as our relationship with you lasts and afterward, for as long as accounting, tax and commercial regulations require us to retain it. Once that period ends, we delete or anonymize it.

How we protect it

The site runs over an encrypted connection, access to information is restricted to those who need it for their work, and passwords are stored encrypted. No measure is foolproof, but we regularly review access and backups.

Your rights

As the data subject, you may access, update and correct your data, request proof of your authorization, be informed about how it's used, file complaints with the Superintendence of Industry and Commerce, revoke your authorization and request deletion of your data when there is no legal duty to retain it.

To exercise these rights, write to ventas@chocolatesfloresmedellin.com or WhatsApp 319 216 1731, stating your name, your request and a contact detail. The procedure and timelines are detailed in the personal data processing policy.

Minors

This site is intended for adults, and we do not knowingly collect data from minors. If we find that we have recorded a minor's data without the authorization of their parents or guardians, we delete it.

Effective date

This policy is effective from its publication and may be updated when our operations or the applicable regulations change. The current version is always the one published on this page.

Last updated: August 15, 2026.