Personal data processing policy
Courtesy translation for reference only. The Spanish version, available as a PDF, is the official text.
Download PDF1. Identification of the data controller
ABC Expressions is a Colombian small business dedicated to the production and sale of personalized products, 3D printing, bookbinding, sublimation, graphic printing, laser cutting and engraving, among other creative solutions.
The controller of personal data processing is the natural person who carries out the commercial activity under the name ABC Expressions.
- Trade name: ABC Expressions
- Domicile: Cali, Valle del Cauca, Colombia
- Email: abcexpressionsco@gmail.com
- Contact phone: 3192931740
The email address indicated will be the channel for inquiries, requests and complaints related to the processing of personal data.
2. Regulatory framework
This policy is established in accordance with Law 1581 of 2012, Decree 1074 of 2015 and the other Colombian provisions applicable to personal data protection.
ABC Expressions commits to processing personal information in accordance with the principles of legality, purpose, freedom, truthfulness, transparency, restricted access and circulation, security and confidentiality.
3. Personal data we may collect
Depending on the nature of each request or commercial relationship, ABC Expressions may collect:
- First and last names.
- Identification number, when necessary.
- Phone number and email address.
- City and delivery address.
- Billing information.
- Company name, tax ID (NIT) and business contact details, where applicable.
- Information provided through web forms, email, WhatsApp and social networks.
- Photographs, names, reference images, texts, digital files and designs provided for the production of personalized products.
- Information related to quotes, orders, payments and deliveries.
Only the data that is appropriate and necessary for each purpose will be requested.
ABC Expressions does not usually request sensitive personal data. If it is exceptionally necessary to process information of this nature, the data subject will be informed of its optional nature and the corresponding explicit authorization will be requested, except for legal exceptions.
4. Purposes of processing
Personal data will be used to:
- Receive and respond to requests for information and quotes.
- Manage orders and personalization requests.
- Produce designs and products according to the customer's specifications.
- Communicate with customers to report progress, resolve questions and coordinate deliveries.
- Manage payments, receipts and invoicing.
- Coordinate shipments and scheduled courier deliveries.
- Handle warranty requests, claims and after-sales service.
- Manage commercial relationships with business customers and suppliers.
- Comply with legal, tax and accounting obligations.
- Handle requests related to personal data protection.
ABC Expressions does not currently use its customers' data to systematically send advertising campaigns by email or WhatsApp.
If it implements commercial or promotional communications in the future, it will inform their purposes in advance and obtain the corresponding authorization when required.
5. Photographs and publications of personalized products
ABC Expressions may document its finished work to keep a production record and present examples of its products and creative capabilities.
When a photograph or publication contains personal data that makes it possible to identify a customer or another person, such as faces, names, personal images or other identifiable information, ABC Expressions will request the corresponding authorization before using it for commercial display, portfolio, social media or advertising purposes.
Authorization to produce a personalized product does not automatically imply authorization to publicly disclose the personal data incorporated in it.
Products that do not contain identifiable personal data may be displayed as examples of work, respecting the rights of third parties and the other applicable provisions.
The data subject may request the review or removal of publications involving their personal data, in accordance with applicable law.
6. Processing of data of children and adolescents
When a personalized order involves photographs, names or other personal data of children or adolescents, ABC Expressions will apply the special protection measures provided for in Colombian law.
Their processing must respect the best interests of the minor, their fundamental rights and the authorization requirements of the legal representative, taking into account the minor's right to be heard according to their maturity and autonomy.
ABC Expressions will not publish photographs or other identifiable personal data of minors without first verifying the applicable legal requirements.
7. Rights of data subjects
Personal data subjects may:
- Know, update and rectify their personal information.
- Request proof of the authorization granted, except for legal exceptions.
- Be informed about the use made of their data.
- Access their personal information free of charge under the legal terms.
- Request the revocation of their authorization or the deletion of their data when appropriate.
- File complaints with the Superintendency of Industry and Commerce, after first completing the corresponding procedure with ABC Expressions.
Revocation or deletion will not proceed when there is a legal or contractual duty that justifies retaining the information.
8. Authorization for processing
ABC Expressions will request prior, express and informed authorization for the processing of personal data when legally required.
Authorization may be obtained through physical or electronic means or through legally valid unequivocal conduct that makes it possible to prove the will of the data subject.
Mere interaction with ABC Expressions, the purchase of a product or acceptance of this policy will not by themselves be interpreted as general authorization for any processing of personal data.
Digital forms will inform the data subject about the purposes of processing, their rights and how to consult this policy.
ABC Expressions will keep proof of the authorizations obtained where applicable.
9. Security and confidentiality
ABC Expressions will adopt reasonable technical, human and administrative measures, appropriate to its operation, to protect personal data against loss, alteration, unauthorized access, improper disclosure or fraudulent use.
Access to the information will be limited to the people who need to use it to carry out the authorized activities.
Photographs, files and designs delivered by customers must be used only for the purposes communicated and authorized.
10. Transmission, transfer and disclosure of data
To carry out its activities, ABC Expressions may disclose or make certain personal data available to third parties when necessary and when there is a legal basis that allows it.
These may include:
- Courier companies and delivery operators.
- Payment and invoicing service providers.
- Web hosting, email, digital storage and form providers.
- Technology providers used for communication with customers.
- Competent authorities, in the cases provided for by law.
When these third parties act as data processors, they must comply with the corresponding data protection obligations.
If the use of technology providers involves international data transfers or transmissions, ABC Expressions must verify compliance with the applicable legal requirements.
11. Data retention
Personal data will be retained only for as long as necessary to fulfill the purposes communicated, meet contractual or commercial obligations and observe the applicable legal periods.
Accounting, tax and invoicing information will be retained for the periods established by the corresponding legislation.
Personalization files and photographs supplied by customers will not be kept indefinitely merely because they were received. Their storage will respond to justified needs of production, delivery, warranties or other authorized purposes.
Once the purposes of processing have been fulfilled and when there is no legal obligation to retain it, the information will be deleted or anonymized through appropriate procedures.
12. Procedure for inquiries and complaints
Data subjects or legally authorized persons may submit inquiries or complaints to the email address: abcexpressionsco@gmail.com
The request must contain, as applicable:
- Full name of the data subject.
- Sufficient information to verify their identity or representation.
- Clear description of the inquiry or complaint.
- Contact details to receive a response.
- Supporting documents, when necessary.
ABC Expressions may request reasonable additional information to verify the identity of the requester.
Inquiries: will be handled within ten (10) business days following receipt. When it is not possible to respond within that period, the reasons and the new response date will be communicated, which may not exceed five (5) additional business days.
Complaints: will be handled within fifteen (15) business days counted from the day following receipt, in accordance with the legal rules. When it is necessary to extend the period, the reasons and the new date will be communicated, not exceeding eight (8) additional business days.
If the complaint is incomplete, the requester will be asked to complete it within five (5) days of receipt. If two (2) months pass from the request without receiving the requested information, the requester will be deemed to have withdrawn.
ABC Expressions will apply the other legal rules corresponding to the handling of complaints, including flagging complaints in progress where applicable.
13. Validity and changes
This policy takes effect upon its official publication.
ABC Expressions may modify it to reflect regulatory, technological or operational changes.
Substantial changes will be communicated to data subjects under the terms required by applicable law. When they involve new purposes that require authorization, it will be requested before the corresponding processing is carried out.
Last updated: October 11, 2026.