Business model data policy (the antifraud purpose is authorized with the Club Conditions)

Taply publishes it, with the business's details, at https://club.gettaply.com/datos/{policyRef} (one per business) when the business adopts it.

Version 2 · Adopted by {razon_social} on {fecha_adopcion}.

Personal data processing policy of {negocio}

1. Controller

{razon_social} ({negocio}), {tipo_documento} {documento}, domiciled at {direccion}, email {correo_datos} and phone {telefono}, is the controller of its customers' personal data. It handles personal data inquiries and claims at that email and that phone.

2. What data we process

Name, WhatsApp number and other contact details, the messages you send us on WhatsApp, Instagram, Facebook or our website chat, your birthday (day and month) if you give it to us, your Club visits and rewards, your notification preferences and the answers to our form's questions. If you authorize it as their mother, father or legal representative, some minimal data about your son or daughter.

3. What we use it for

• Serving you and answering your messages, including through our virtual assistant with artificial intelligence. The assistant introduces itself as such, uses only the data we enable for it, makes no decisions that affect you legally and does not ask for or store sensitive data in the chat. You can ask to be served by a person, and from your Club card you can turn off the assistant's use of your data without losing your membership.
• Managing your Club membership: confirming your WhatsApp, recording your visits, giving you your rewards and issuing your Apple Wallet or Google Wallet card if you save it.
• Sending you the Club notices you choose and, if you authorize us separately, promotions.
• Personalizing our service, for example greeting you on your birthday.
• The purposes of our form: {proposito}.
• Preventing fraud in the Club and complying with the law.

4. Children's data

Only their legal representative registers it, with their express authorization, after listening to the child according to their maturity. Providing it is voluntary and the adult's membership does not depend on it. We ask for the minimum (name, age, birthday and simple options) and use it only for their card and benefits in the Club, their birthday greeting and personalized service with their representative (our assistant only uses it when talking with that representative on WhatsApp), respecting the child's best interests and rights. We never use it in public replies or in advertising.

5. Sensitive data

Answering questions about sensitive data is not mandatory; if you decide to do so, we only use it for what the question states.

6. Your rights

To know, update, rectify and delete your data; request evidence of your authorization; know how we have used it; revoke the authorization when you have no legal or contractual duty to remain in the database; access your data free of charge; and file complaints with the Superintendencia de Industria y Comercio after consulting us or filing a claim with us (Ley 1581 de 2012, art. 8).

7. How to exercise them

From «Tus datos» on your Club card you can ask us to delete your data or write to us on WhatsApp; you can also write to {correo_datos}, call {telefono}, ask our assistant in the chat (it passes it on to our team) or write to Taply at support@gettaply.com, which forwards it to us. We answer inquiries within 10 business days at most and claims within 15 business days at most; if we need more time we tell you why and answer within 5 or 8 more business days at most, respectively. On your card you can also view and correct your data, control your notices and turn off our assistant's use of your data.

8. Who else processes it

Taply (Jesus Auriol Villamarin Ortiz, an individual) operates our Club and our assistant on our behalf and relies on providers that process data in the United States and other countries, under contracts that require them to protect it. By accepting the Club Conditions you authorize Taply to also keep, as controller, an identifier to prevent fraud on its platform. See the details in Taply's Personal Data Processing Policy.

9. How long we keep it

While you are our customer or a Club member and until you ask for it to be deleted. Your son's or daughter's data, while you are our customer or a Club member, until you ask for it to be deleted or until they turn 18, whichever comes first; if we only have their age, we calculate that date from the age you gave us. If we do not know their age, it is kept until you ask for it to be deleted or your relationship with us ends. When we act on an erasure request, we remove your identifying data from our operational records. We keep a secret-key-derived identifier computed from your WhatsApp number only while you need it to claim rewards you have already earned and, for up to 24 months, to honor your opt-out from messages and to enforce a closure of your membership for misuse that is still in force, plus the evidence of your authorizations and requests for 5 years.

10. Effective date

This policy applies from {fecha_adopcion}, and our customer database will remain in force while {negocio} carries on its activity. We will notify you of any substantial change before applying it and will ask you for a new authorization if the purpose changes.