Habeas Data — Personal Data Processing

In compliance with Law 1581 of 2012 (Colombian Personal Data Protection Statutory Law) and Decree 1377 of 2013, Skin & Pixel Lab S.A.S. (hereinafter "the Company"), as Data Controller, informs about the processing of personal data collected through the xkinlab.com platform.

1. Data Controller

2. Purpose of processing

Personal data collected is processed for the following purposes:

3. Rights of the data owner

As a personal data owner, in accordance with article 8 of Law 1581 of 2012, you have the following rights:

4. Procedure to exercise rights

To exercise any of your rights, the data owner or their successors may send a written request to legal@xkinlab.com indicating:

Inquiries will be addressed within a maximum of 10 business days. Complaints will be addressed within a maximum of 15 business days, counted from the day following the date of receipt.

5. Data transfer and transmission

The Company may share your personal data with third-party processors (hosting providers, payment gateways, email services, etc.) under strict confidentiality agreements and always in accordance with authorized purposes.

6. Security measures

The Company adopts reasonable technical, human and administrative measures to protect personal data against alteration, loss, unauthorized consultation or fraudulent use.

7. Validity

Personal data processing will be maintained for the time necessary to fulfill authorized purposes and applicable legal obligations. This policy is effective from its publication at xkinlab.com/habeas-data.

8. Protection authority

If you believe your rights have been violated, you can file a complaint with the Superintendence of Industry and Commerce (SIC):

9. Contact

For any request related to your personal data: