✦ Habeas data · Law 1581 of 2012 (Colombia)

Personal Data Processing Policy

Last updated: June 15, 2026

This policy applies to agatamaria.com, agatamariawear.com and to the AI virtual try-on feature. It explains what data we collect, why, and the rights you hold over it.

1 · Data Controller

Brand: Ágata María · Domicile: Bogotá, Colombia · Data contact: datos@agatamaria.com · WhatsApp: +57 300 456 2905.

Ágata María acts as Data Controller under Colombia’s Law 1581 of 2012, Decree 1377 of 2013 and related rules.

2 · Data we collect

Contact & identity: name, email, phone, city/country.
Purchase data: orders, sizes, preferences, history.
Browsing data: cookies, device, analytics (Google Analytics, Meta Pixel, Microsoft Clarity).
Images you upload to the virtual try-on: the photo you upload or take, which includes your facial and body image (sensitive / biometric data), and the AI-generated image produced from it.

Processing sensitive data (your image) is optional: it only happens if you expressly authorize it when using the virtual try-on. You are not required to provide sensitive data.

3 · Purposes

Manage your purchases, shipping and customer service.
Virtual try-on: generate, via artificial intelligence, a preview of how a garment looks on you, from the photo you upload.
Store your photo and the result securely to provide and improve the service.
Only if you authorize it separately: use your image and the result for brand marketing.
Send commercial communications (if you subscribe) and meet legal/accounting obligations.

We do not use your image for purposes other than those authorized.

4 · AI virtual try-on — detail

Your authorization is prior, express and informed, via a mandatory checkbox before generating the image.
Marketing authorization is separate and optional.
Your photo is processed by technology providers acting as Data Processors under contract (AI image-generation and cloud services).
Retention: your original photo and the result are kept for [12] months from generation, unless you authorize marketing use or request earlier deletion. After that they are deleted automatically.
Security: images are stored with restricted access; we keep a record of the authorizations granted as proof of consent.
Minors: the try-on is for adults 18+ only. We do not knowingly process minors’ images.

5 · Your rights (habeas data)

At any time you may: know, update and rectify your data; request proof of the authorization given; be informed about its use; revoke authorization and/or request deletion of your data, including your photo and the generated image, where no legal duty to retain exists; and file complaints with Colombia’s SIC.

To exercise them, write to datos@agatamaria.com with your name, the right you exercise and your request. We reply within legal terms (queries: 10 business days; claims: 15 business days, extendable).

6 · Transfers and processors

We may share data with technology providers (payment gateways, messaging, analytics, AI and cloud storage) only to deliver the service, under agreements requiring confidentiality and security. Some providers may be outside Colombia; in that case we apply the safeguards required by law. We do not sell your data.

7 · Term

This policy is effective from publication. Data is kept for the duration of the relationship and applicable legal terms; try-on images per section 4.

Contact: datos@agatamaria.com · +57 300 456 2905 · Bogotá, Colombia. · Powered by Merlin ✦