Privacy Policy

At TrulyNuts®, we are committed to the highest standards of data ethics and digital dignity. Your privacy is not a commodity—it’s a cornerstone of our trust. This Privacy Policy outlines, with precision and transparency, how we collect, process, and protect your personal data in compliance with global data protection regulations, including but not limited to the GDPR, CCPA, and Colombian Habeas Data Law.

  1. Data Controller Identity

TrulyNuts S.A.S., Transversal 1 Este # 68-50, Bogotá, Colombia.
Contact: privacy@trulynuts.com

  1. Scope of Data Collection

We collect personal data through direct interactions (orders, subscriptions) and automated tools (cookies, analytics). This includes:

  • Full name and contact information
  • Payment identifiers (processed through PCI-compliant platforms)
  • Behavioral data (page interactions, time on site, click paths)
  1. Purpose of Processing

Your data is processed under lawful bases: contractual necessity (order fulfillment), legitimate interest (performance analytics), and consent (marketing communications). We use data to:

  • Execute and ship your purchases
  • Enhance customer experience through behavioral insight
  • Manage customer support and legal compliance
  • Send curated content and offers with opt-in permission
  1. Data Sharing and International Transfers

We never sell data. We only disclose information to:

  • Logistics providers (DHL, FedEx, Servientrega)
  • Payment processors (Stripe, PayPal, Wompi)
  • Cloud platforms (Shopify, MetaPixel, Google Analytics)
    All vendors comply with international data protection safeguards, including SCCs or adequacy decisions.
  1. Data Retention and User Rights

We retain personal data only as long as necessary. Users may request access, rectification, erasure, data portability, or restriction of processing at any time via our data request portal.

  1. Children’s Privacy

Our services are not intended for users under 18. We do not knowingly collect data from minors.

  1. Amendments

We reserve the right to revise this policy to reflect legal updates or operational changes. Users will be notified via email or platform alerts.