At Arimatea, we recognize the importance of privacy and the responsible processing of personal information.
This Privacy and Personal Data Processing Policy establishes the guidelines applicable to the collection, storage, use, circulation, updating, transmission, transfer, deletion and, in general, processing of personal data related to the activities of ARIMATEA ARCHIVUM.
This Policy is adopted in accordance with the Political Constitution of Colombia, Law 1581 of 2012, Decree 1074 of 2015, and any other regulations that amend, supplement, or regulate the Colombian personal data protection regime.
1. Data Controller
The controller responsible for the processing of personal data is:
Name or Business Name: ARIMATEA ARCHIVUM
Tax Identification Number (NIT): 57290660-1
Address: Calle 25 No. 19B-36, El Porvenir
Location: Santa Marta, Magdalena, Colombia
Telephone: +57 302 252 2054
Email: [email protected]
This email address is also one of the channels available for submitting requests related to the processing of personal data.
2. Scope
This Policy applies to the processing of personal data for which ARIMATEA ARCHIVUM acts as the Data Controller.
It covers, as applicable, information obtained through arimatea.co, purchasing processes, communications with our customers, forms, information requests, and other channels made available by Arimatea.
3. Personal Data We May Process
Depending on the data subject's relationship with Arimatea and the services used, we may process information such as:
Arimatea will seek to collect only information that is adequate, relevant, and necessary for the corresponding purposes.
Information directly related to payment instruments may be processed by financial institutions, payment gateways, or other service providers authorized to manage the transaction, in accordance with their own terms and privacy policies.
4. Purposes of Processing
Personal data may be processed, as applicable, for the following purposes:
Purchase and order management: to process purchases, confirm orders, manage payments, prepare shipments, and carry out the activities necessary to complete a transaction.
Shipping and delivery: to provide logistics operators with the information strictly necessary to manage the delivery and tracking of orders.
Customer assistance: to respond to inquiries, requests, petitions, exchanges, returns, warranties, and other communications related to our products and services.
Invoicing and legal obligations: to prepare and retain documents required for accounting, tax, commercial, and legal purposes.
Security and prevention: to help protect the website, transactions, and our customers against misuse, fraudulent transactions, or activities that may compromise their security.
Website operation and improvement: where applicable, to analyze technical information related to the operation, navigation, and performance of our digital channels.
Marketing communications: to send news, launches, editorial content, invitations, or other communications related to Arimatea when the corresponding authorization has been obtained or another legal basis permits such communications.
Data subjects may request to stop receiving marketing communications through the mechanisms provided in each communication or by contacting us directly.
5. Authorization for Processing
Where required by Colombian law, Arimatea will obtain the data subject's prior and informed consent for the processing of personal data.
Authorization may be obtained through written or electronic means, or through unequivocal conduct that reasonably demonstrates that consent has been granted and allows such authorization to be consulted subsequently.
The data subject's silence or inactivity will not be considered authorization.
There are circumstances expressly provided for by law in which authorization is not required, including certain requests from public or judicial authorities acting within the scope of their legal powers.
6. Rights of Data Subjects
In accordance with Colombian law, data subjects may, as applicable:
7. Inquiries, Requests and Complaints
Data subjects, their successors, representatives, or other legally authorized persons may submit inquiries or complaints regarding their personal data through:
Email: [email protected]
Telephone: +57 302 252 2054
The request must allow the data subject to be identified and clearly state the purpose of the inquiry, request, or complaint.
When necessary to protect personal information, Arimatea may request reasonable documentation or information to verify the identity of the applicant or the legal authority under which they are acting.
Inquiries and complaints will be addressed within the time limits established by applicable Colombian law.
8. Sensitive Personal Data
Arimatea does not seek to collect sensitive personal data through its online store unless such information is strictly necessary for a legitimate purpose and its processing is permitted under applicable law.
Where the processing of sensitive personal data requires authorization, the data subject will be informed that providing such information is optional, and the corresponding authorization will be requested.
9. Personal Data of Children and Adolescents
Arimatea does not direct its online store toward children or adolescents and does not seek to knowingly collect their personal data.
If it becomes necessary to process information relating to minors, such processing will be carried out with respect for their prevailing rights and in accordance with the conditions established by Colombian law.
10. Data Processors and Service Providers
In carrying out our activities, certain service providers may process personal data on behalf of Arimatea, including, as applicable:
Where these third parties act as Data Processors, they must process personal information in accordance with the authorized purposes and applicable security and confidentiality obligations.
11. Transmission and Transfer of Personal Data
When necessary to provide our services or carry out the purposes described in this Policy, personal data may be transmitted or transferred to service providers or third parties located in Colombia or other countries.
Arimatea will adopt the appropriate measures to ensure that such operations are carried out in accordance with applicable Colombian personal data protection legislation.
12. Information Security
Arimatea adopts reasonable administrative, technical, and organizational measures designed to protect personal data against loss, alteration, unauthorized or fraudulent access, consultation, use, or disclosure.
However, no system for storing or transmitting information over the Internet can guarantee absolute security.
13. Data Retention
Personal data will be retained for as long as reasonably necessary to fulfill the purposes for which it was collected and to comply with applicable contractual, accounting, tax, or legal obligations.
Once the purpose justifying the processing no longer exists and there is no legal or contractual obligation requiring the information to be retained, it will be handled as appropriate in accordance with applicable law.
14. Cookies and Similar Technologies
The Arimatea website may use cookies and similar technologies necessary for its operation and, where applicable, to remember preferences, analyze website performance, or provide certain functionalities.
Specific information regarding these technologies, their purposes, and the options available for managing them will be provided in our Cookie Policy.
Where applicable law requires consent for certain technologies, such consent will be managed through the mechanisms made available on the website.
15. Third-Party Links and Services
Our website may integrate or contain links to services provided by third parties.
When a user leaves the Arimatea environment or interacts directly with an independent third-party service, the processing of information may be subject to that third party's own policies and terms.
We recommend reviewing such policies where applicable.
16. Amendments to this Policy
Arimatea may amend this Privacy and Personal Data Processing Policy when necessary due to regulatory, technological, commercial, or operational changes.
Any amendments will be published on the website and, where the nature of the change so requires, additional notification or authorization mechanisms required under applicable law will be implemented.
17. Effective Date
This Privacy and Personal Data Processing Policy becomes effective upon its publication.
Databases and personal information processed by Arimatea will remain in effect for the period necessary to fulfill the authorized purposes and applicable legal obligations.
Last updated: August 2026.
