Privacy and data processing policy

1. Data we process

• Email address and language preference.
• Products, amounts, discounts, and order status.
• Payment references and status supplied by Bold or Lemon Squeezy, without storing complete card details.
• Tokens, counters, and technical records needed to deliver and protect downloads.
• Reviews, public name, and optional profile photo when you authorize publication.
• Subscription consent and communication records.

2. Purposes

• Process purchases and deliver digital products.
• Send confirmations, download links, and transactional support.
• Prevent fraud, abuse, and unauthorized distribution.
• Meet legal, accounting, and consumer-protection duties.
• Send news and promotions only under separate consent.

3. Legal basis and authorization

We process data needed to perform purchases, meet legal obligations, and answer requests. Marketing requires separate, optional, and revocable consent. We retain consultable evidence of authorizations and the accepted legal version.

4. Service providers

We use Cloudflare for hosting, databases, and private storage; Bold or Lemon Squeezy for payments, depending on the active provider; and Brevo for contacts and transactional or promotional email. These providers process information only to provide their services and may process it in other countries under their safeguards and contracts.

5. Retention and security

We retain order and payment data as needed for support, legal and accounting duties, fraud prevention, and legal claims. Promotional data remains until consent is withdrawn or deletion is validly requested. We use access controls, private links, and download limits.

6. Your rights

• Access, update, and correct personal data.
• Request proof of authorization.
• Learn how information has been used.
• Withdraw consent and request deletion where legally available.
• File a complaint with the Colombian Superintendence of Industry and Commerce after completing the applicable direct procedure.

7. Local storage and cookies

Nilzo uses essential local storage to retain the cart, security, and promotion state. Analytics, campaign attribution, and non-essential marketing remain disabled until you provide consent through the preferences panel. You can change or withdraw that decision at any time from the footer link. Subscribing to promotional email is a separate authorization and does not depend on accepting marketing cookies.

8. Questions and complaints

Send your request to support@tupanitanilzo.com, including your purchase email and a clear description. We may request reasonable information to verify identity before disclosing, correcting, or deleting data.