Privacy & Habeas Data

Colombian Law 1581 of 2012 · Last updated: July 1, 2026

1. Data Controller

Maia Management Group S.A.S. ("Maia"), headquartered in Santa Marta, Magdalena, Colombia, is the data controller for personal data collected through this website (maia-botanicas.com), operated under the Maia Botánicas commercial brand.

Controller contact: privacy@maia-management.com

2. Data We Collect

We collect only the data you voluntarily provide through the site's forms (contact and sample-pack request):

• Your name and your bar/restaurant's name
• WhatsApp number
• Email address (optional on the contact form)
• City and business type
• Categories of interest and your message

Forms are processed by Netlify Forms (our hosting provider). We also record anonymous first-party usage events (page view, catalog click) to run the business — no advertising profiles.

Only if you accept the cookie notice do we load Google Analytics 4 with anonymized IP for aggregate usage statistics. If you reject it, it never loads.

3. Purpose of Processing

We use your data exclusively to:

• Respond to your commercial inquiry or sample-pack request
• Coordinate shipping and follow up on wholesale orders
• Follow up on active commercial proposals
• Improve the site and catalog (aggregate data)

4. Legal Basis

Processing is based on your express consent when submitting a form (authorization checkbox), in accordance with Colombian Law 1581 of 2012 (General Personal Data Protection Regime), its Regulatory Decree 1377 of 2013, and the GDPR where applicable.

5. Data Sharing

We do not sell, lease, or share your personal data with third parties, except:

• Technical providers needed to operate the site (Netlify for hosting and forms; Supabase for operational records)
• Google Analytics for aggregate usage analysis (only with your consent)
• Carriers (Servientrega / Coordinadora) with the minimum data needed to deliver your order
• When required by law or a competent authority

6. Data Retention

We retain your contact data for as long as necessary to manage your inquiry and, if a commercial relationship is established, while it remains active plus a 5-year period for archiving and legal obligations.

7. Your Rights

Under Colombian Law 1581 of 2012, you have the right to:

• Know what data we hold about you (access)
• Correct inaccurate or incomplete data (rectification)
• Request deletion of your data (erasure)
• Object to the processing of your data (objection)
• Withdraw your consent at any time

To exercise these rights, write to privacy@maia-management.com with the subject "Personal Data Protection". We reply within the legal terms (10/15 business days).

8. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss or disclosure, including HTTPS connections, security headers, and restricted system access.

9. Cookies and Analytics

The site runs on essential cookies. Google Analytics 4 only loads if you press "Accept" on the cookie notice; you can reject it without losing any site functionality. To change your decision, clear this site's data in your browser and choose again.

10. Changes to This Policy

We may update this policy periodically. Substantial changes will be communicated through this website. The "last updated" date indicates the most recent revision.

11. Contact

privacy@maia-management.com · botanicas@maia-management.com
Maia Management Group S.A.S. · Santa Marta, Magdalena, Colombia