Privacy policy
PRIVACY NOTICE
Bellaplus S.A.S., a company incorporated in Colombia and domiciled at Cra 19B #84-31, Edif. Almirante, Office 402, Bogotá, telephone number (601) 371-9812, identified by Tax Identification Number (NIT) 901.140.480-0 and contact us at support.afnan.com, hereinafter referred to as "Bellaplus," acts as the Data Controller responsible for processing personal data belonging to third parties. In compliance with Statutory Law 1581 of 2012, regulated by National Decree 1377 of 2013 and Decree 1074 of 2015, as well as the constitutional principles concerning privacy, the protection of personal information, and the right to habeas data, Bellaplus hereby makes this Privacy Notice available to all data subjects.
Your personal data will be processed responsibly for the purpose of carrying out Bellaplus's corporate activities, in accordance with applicable legal and security standards. In general, your data will be used for the following purposes, as further described in Bellaplus's Personal Data Processing Policy, which is available to the public:
•Maintaining contact with and keeping records of users, customers, employees, suppliers, contractors, and other relevant parties.
•Sending correspondence and communications concerning matters of interest relating to Bellaplus and the services it provides.
•Fulfilling legal, contractual, accounting, and tax obligations.
•Requesting the preparation of quotations, proposals, and purchase or service orders.
•Paying and collecting invoices issued in favour of or payable by Bellaplus.
•Monitoring the proper performance of services provided in connection with Bellaplus's corporate activities.
•Maintaining contact for follow-ups or studies aimed at improving service delivery.
•Responding to petitions, complaints, claims, inquiries, and requests submitted by data subjects.
Personal data voluntarily provided by users and contained in confidential information will be used to provide services and content that are more personalized and better suited to their needs, preferences, and interests. Bellaplus will provide such services with the user's express consent.
The specific purposes applicable to each database are detailed in the Personal Data Processing Policy adopted by Bellaplus.
In accordance with applicable law, data subjects may choose whether to provide sensitive personal data. If they choose to do so, they acknowledge that Bellaplus will process such data subject to strict confidentiality and security standards, taking into account its sensitive nature.
Data subjects may consult Bellaplus's Personal Data Processing Policy at any time through the company's website and may exercise their rights to access, rectify, update, and request the deletion of their personal data, subject to the applicable requirements and procedures established by Bellaplus. Requests can be submitted at support.afnan.com.
For further information, the policy is available for consultation and inquiries at support.afnan.com.
GUARANTEE OF ORIGINALITY
All our products are original and have been acquired within the applicable economic and legal framework, meaning they may be freely marketed within the relevant market. None of our products has been modified or tampered with, and all comply with the applicable trademark regulations.
All products offered for sale are 100% original and are in perfect condition, just as you would find them at your usual perfumery.
We do not sell testers or products without their original packaging, as we believe doing so could damage the image of the perfumery and negatively affect our business reputation. We would also like to remind customers that the purchase or sale of perfume testers or display samples is illegal.
PERSONAL DATA PROCESSING POLICY
Bellaplus S.A.S., a company incorporated in Colombia and domiciled at Cra 19B #84-31, Edif. Almirante, Office 402, Bogotá, telephone number (601) 371-9812, identified by Tax Identification Number (NIT) 901.140.480-0 contact us at support.afnan.com, hereinafter referred to as "Bellaplus," hereby establishes and makes public the principles and guidelines under which it will process the personal data it collects in the course of its corporate activities, acting both as the Data Controller and as the Data Processor responsible for handling such information.
This policy is based on Statutory Law 1581 of 2012, regulated by National Decree 1377 of 2013 and Decree 1074 of 2015, together with the applicable supplementary regulations and constitutional principles concerning the protection of privacy, personal data, and the right to habeas data.
1. SCOPE OF APPLICATION
This policy applies to the processing of personal data carried out within Colombian territory, as well as to processing activities involving a Data Controller and/or Data Processor located outside Colombian territory when Colombian law applies by virtue of international treaties, contractual relationships, or other applicable circumstances.
The provisions of this policy apply to all personal data databases held by Bellaplus, whether it acts as the Data Controller and/or the Data Processor.
2. PROCESSING AND PURPOSES
When acting as the Data Controller and/or Data Processor, Bellaplus will collect, store, process, use, manage, circulate, and transmit personal data, as well as maintain records of visitors to its website. These activities will be carried out in strict compliance with applicable legal requirements and for the following purposes, as appropriate.
2.1. DATA OF BELLAPLUS EMPLOYEES
a) To create and maintain an individual file for each employee containing their personal information for internal record-keeping purposes.
b) To fulfil the legal obligations assumed by Bellaplus towards its employees in connection with the performance of their employment contracts.
c) To maintain records relating to occupational health and safety, including, but not limited to, fitness-for-work assessments, workplace accident investigations, and evaluations relating to prolonged general illnesses.
d) To complete the relevant employee registrations and affiliations required under employment contracts, including the registration of beneficiaries designated by employees.
e) To process payroll, pay employment benefits, and make social security contributions.
f) To assign user accounts and corporate email accounts.
g) To prepare and send correspondence for the purpose of communicating matters of interest between employees and the employer.
h) To access and maintain employees' employment, academic, and disciplinary records.
i) To issue employment certificates and references.
j) Upon termination of an employment contract, to retain the relevant information for the period required to fulfil legal obligations or where such information may be requested by a judicial or administrative authority.
k) To register and monitor employees in order to safeguard the security of individuals and property within Bellaplus's premises.
l) To respond to petitions, complaints, claims, and requests submitted by employees.
2.2. DATA OF USERS AND/OR CUSTOMERS
a) To create and maintain records containing the contact details of users and/or customers for internal personal data management purposes.
b) To monitor the proper provision of services in connection with the company's corporate activities.
c) To use personal data voluntarily provided by users and contained in confidential information to deliver services and content that are more personalized and better suited to their needs, preferences, and interests.
d) To conduct follow-ups and studies aimed at improving the services provided by Bellaplus.
e) To respond to petitions, complaints, claims, inquiries, and requests submitted by users.
f) To inform users about prospects, new developments, important events, and other information of interest to them.
g) To send advertising and promotional communications relating to the services provided and promoted by Bellaplus.
h) To fulfil contractual, legal, and tax obligations.
2.3. DATA OF BELLAPLUS SUPPLIERS
a) To create and maintain records containing suppliers' contact details for internal personal data management purposes.
b) To monitor the proper provision of services in connection with the company's corporate activities.
c) To conduct follow-ups and studies aimed at improving the services provided by Bellaplus.
d) To respond to petitions, complaints, claims, inquiries, and requests submitted by suppliers.
e) To fulfil contractual, legal, and tax obligations.
3. RIGHTS OF DATA SUBJECTS
Individuals whose information is contained in databases processed by Bellaplus, whether Bellaplus acts as the Data Controller or the Data Processor, are entitled to the following rights in accordance with the Political Constitution of Colombia and applicable legislation in force.
These rights may be exercised exclusively by the data subject or by individuals duly authorized by the data subject, in accordance with applicable law and this Personal Data Processing Policy.
a) To know, update, and rectify their personal data held by Data Controllers or Data Processors. This right may be exercised, among other circumstances, where the data is partial, inaccurate, incomplete, fragmented, misleading, expressly prohibited from being processed, or processed without authorization.
b) To request proof of the authorization granted to the Data Controller, except where such authorization is not legally required as a condition for processing the data.
c) To request information from the Data Controller or Data Processor regarding how their personal data has been used.
d) To submit complaints to the Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio) concerning violations of this policy or the laws governing the matter.
e) To revoke their authorization and/or request the deletion of their personal data where the processing fails to respect applicable constitutional and legal principles, rights, and guarantees. Such revocation and/or deletion will proceed where the Superintendence of Industry and Commerce has determined that the Data Controller or Data Processor has engaged in conduct contrary to the applicable law and the Constitution.
f) To access their personal data that has been processed, free of charge.
4. CONFIDENTIALITY OF INFORMATION
Bellaplus will not share confidential information with third parties unless it has received express authorization from the relevant individuals, is required to do so by a judicial or legal order, or considers disclosure necessary to protect Bellaplus's property rights or other rights.
Bellaplus does not sell or rent users' information.
Personal data provided by users will form part of a file containing their profile. Users may request changes and/or updates to some or all of their personal information at any time by contacting us at support.afnan.com or, where applicable, by accessing the form available on the website.
5. MODIFICATION / UPDATE OF PERSONAL INFORMATION
Bellaplus recommends that users update their personal information whenever it changes, as keeping such information current will enable Bellaplus to provide better service.
6. PROTECTION OF PERSONAL INFORMATION
Information provided by users when registering online on the Bellaplus website is protected through technological security measures and may only be accessed by the relevant user using a password.
Users are solely responsible for safeguarding their passwords and account information.
To reduce security risks, Bellaplus recommends that users log out of their accounts and close their browser windows when they have finished their activities, particularly when sharing a computer with another person or using a public computer, such as one in a library or an internet café.
Although Bellaplus has technological protection systems in place, from its servers to its internet connection, no transmission over the internet can be guaranteed to be 100% secure.
7. PROCEDURE FOR HANDLING REQUESTS AND CLAIMS SUBMITTED BY DATA SUBJECTS
In exercising data subjects' fundamental right to habeas data, including the rights of access, consultation, updating, rectification, and cancellation, the following procedure will apply:
a) Rights relating to personal data may be exercised directly by the data subject or by a third party legally authorized to act on their behalf in accordance with Law 1581 of 2012. This status must be established by providing a copy of the relevant identity document and, where a representative has been authorized, the duly executed power of attorney or authorization.
b) Any request to exercise these rights must be submitted through the channel designated by Bellaplus in this Personal Data Processing Policy.
c) Requests to exercise these rights must satisfy the minimum identification and request-specification requirements established under the Code of Administrative Procedure and Administrative Litigation.
d) The deadlines for responding to inquiries and claims, as well as the information that such requests must contain, will be governed by Articles 14 and 15 of Law 1581 of 2012.
Anyone intending to approach the Superintendence of Industry and Commerce to exercise the legal remedies available to data subjects or interested parties must first complete the procedure described in this policy.
8. DESIGNATED CHANNEL FOR RECEIVING HABEAS DATA REQUESTS AND CLAIMS
Bellaplus, acting as either the Data Controller or the Data Processor, will receive requests and claims submitted by data subjects in exercise of their rights through the following channel:
This channel will be managed by Bellaplus's customer service department, which is familiar with its legal obligations and will handle requests submitted through this channel.
9. DATA RETENTION PERIOD
The period for which Bellaplus retains personal data, whether acting as the Data Controller or the Data Processor, will be determined by the purpose for which the data was collected or provided to Bellaplus, as applicable.
Once that purpose has been fulfilled, Bellaplus will proceed to delete, destroy, or return the data, as deemed appropriate.
Nevertheless, Bellaplus acknowledges that certain legal, employment, accounting, and tax obligations require some information to be retained for specified periods. In such cases, Bellaplus undertakes to retain the information solely for those purposes and to implement appropriate technical and security measures to ensure its proper processing.
10. EFFECTIVE DATE
This Personal Data Processing Policy, applicable to Bellaplus in its capacity as both the Data Controller and the Data Processor of third-party information, has been approved and will take effect on Oct 2026.
It will also apply to data collected before that date and will remain in force indefinitely until a substantial amendment is made. Any such amendment will be duly communicated through the channels established for this purpose.