1. Data controller
HAYAI S.A.S. ("HAYAI"), incorporated in Colombia and based in Bogotá D.C., is the controller of personal data collected through its digital channels (website, mobile apps, APIs, and support channels).
2. Definitions
Terms such as personal data, processing, database, owner, and data subject follow the meanings set out in Law 1581 of 2012 and its regulations.
3. Data we collect
We may collect identification, contact, geolocation, transaction, device, and support data needed to provide the service, comply with the law, and keep our platforms secure.
4. Purposes of processing
We process data to create and manage accounts, assign and track deliveries, process payments, prevent fraud, improve the product, and send operational or (where allowed) marketing communications.
5. Lawful basis and consent
Processing may rely on the data subject’s consent, contract performance, legal obligation, and our legitimate interest, as applicable. You may withdraw consent for optional processing where the law allows.
6. Sensitive data
We only collect sensitive data when strictly necessary, with the guarantees required by law and explicit authorization where needed.
7. Data subject rights
You may request access, update, rectification, deletion, proof of authorization, information on use, revocation of consent, and other rights under applicable law, subject to legal exceptions.
8. How to exercise your rights
Contact us at the addresses below. We will respond within the legal timeframe and may request information to confirm your identity.
9. Transfers and recipients
We may share data with service providers, payment partners (e.g. Wompi), and authorities when the law requires. Transfers to third countries, if any, will follow the rules of Law 1581 and related guidance.
10. Security
We apply technical, organizational, and administrative measures appropriate to the risk, including access controls, encryption in transit where applicable, and staff training.
11. Retention
We keep data for as long as needed for the purposes described and for legal, accounting, and dispute-resolution periods, then delete or anonymize it when appropriate.
12. Minors
Our services are not directed at children under 14 (or the age set by law). We do not knowingly collect data from minors without lawful consent.
13. Cookies
We use cookies and similar technologies as described in our Cookie Policy. You can manage browser settings; disabling essential cookies may break login and core features.
14. Changes to this policy
We may update this policy. We will post the new version on the site and, for material changes, notify you by reasonable means when required.
15. Supervisory authority
You may file a complaint with the Superintendence of Industry and Commerce (SIC) or the authority in charge of data protection in Colombia.
16. Acceptance
By using HAYAI after being informed of this policy, you accept its terms. For privacy requests: privacidad@hayai.com.co