Privacy Policy
Last updated: September 2, 2025
Contact email:hola@b2box.app
PRIVACY POLICY – COLOMBIA
Responsible: B2BOX S.A.S. (NIT: 901974594, Carrera 7 #156, Oficina 2403, Bogotá)
1. Definitions
- Personal data: information linked to a determined or determinable natural or legal person.
- Processing: any operation on personal data.
- ARCO rights: access, rectification, cancellation and opposition.
- Responsible: B2BOX S.A.S.
- Processor: third parties who process data on behalf of B2BOX.
2. Collected data
- Identification: name, corporate name, NIT, address.
- Contact: email, phone.
- Tax and billing data.
- Order and payment data.
- Technical data: cookies, IP, analytics.
3. Purposes of processing
- Manage orders and invoices.
- Coordinate shipments through 3PL.
- Provide support.
- Prevent fraud.
- Send commercial communications, with prior authorization.
4. Consent and revocation
The Client consents by using the platform. They may revoke at any time by writing to hola@b2box.app.
5. Data transfers
Data shared with 3PL, payment gateways, and technology providers. International transfers will be made under what is allowed by the SIC.
6. Retention
- Tax data: minimum 5 years according to DIAN.
- Commercial data: during the contractual relationship.
- Marketing: until revocation.
7. Security
- Data encryption.
- Restricted access.
- Administrative and technological controls.
8. Sensitive data
B2BOX does not request or store sensitive data.
9. Minors
The site is not directed at minors under 18 years of age.
10. Supervisory authority
The data subject may go to the Superintendence of Industry and Commerce (SIC), Carrera 13 No. 27-00, Bogotá.
11. Updates
The policy may be modified at any time. The applicable version will be the one published on the website.
GLOBAL PRIVACY POLICY (ES/EN)
Controller / Responsable: Azia Holding Limited (Reg. No. 77071961, Unit 2508A, 25/F, Bank of America Tower, 12 Harcourt Rd, Central, Hong Kong)
1) Definitions / Definiciones
EN: Personal data: any information relating to an identified or identifiable person or entity. Processing: any operation performed on personal data. Controller: Azia Holding Limited. Processor: third parties handling data on behalf of B2BOX.
ES: Dato personal: toda información vinculada a persona física o jurídica identificada o identificable. Tratamiento: operaciones realizadas sobre datos. Responsable: Azia Holding Limited. Encargado: terceros que procesan datos en nombre de B2BOX.
2) Data collected / Datos recolectados
EN: Identification (company name, tax ID, address), contact (email, phone), billing, orders, payments, cookies, IP addresses, analytics.
ES: Identificación (razón social, número fiscal, dirección), contacto (correo, teléfono), facturación, pedidos, pagos, cookies, IP, analíticas.
3) Purpose of processing / Finalidades
EN: Orders, billing, FOB shipping coordination with Buyer's 3PL, support, fraud prevention, marketing with prior consent, compliance with legal obligations.
ES: Gestión de pedidos, facturación, coordinación de envíos FOB con el 3PL del Comprador, soporte, prevención de fraude, marketing con consentimiento previo, cumplimiento legal.
4) Consent and withdrawal / Consentimiento y revocación
EN: By using the platform, Buyer consents to processing. Consent may be withdrawn at any time by writing to hola@b2box.app, without retroactive effect.
ES: Al usar la plataforma, el Cliente consiente el tratamiento. El consentimiento puede revocarse en cualquier momento escribiendo a hola@b2box.app, sin efectos retroactivos.
5) Data transfers / Transferencia de datos
EN: Data may be shared with payment processors, hosting providers, and the Buyer's chosen 3PL. Transfers outside Hong Kong may occur under GDPR-like safeguards.
ES: Los datos podrán compartirse con procesadores de pago, proveedores tecnológicos y el 3PL designado por el Cliente. Pueden realizarse transferencias fuera de Hong Kong bajo estándares similares al GDPR.
6) Retention / Conservación
EN: Data retained as long as necessary for tax/legal obligations. Marketing data kept until consent is withdrawn.
ES: Los datos se conservarán el tiempo necesario para cumplir obligaciones fiscales/legales. Los datos de marketing se conservarán hasta revocación del consentimiento.
7) Security / Seguridad
EN: Technical and organizational measures (encryption, restricted access, monitoring) are implemented to protect against unauthorized access.
ES: Se aplican medidas técnicas y organizativas (cifrado, acceso restringido, monitoreo) para proteger los datos frente a accesos no autorizados.
8) Sensitive data / Datos sensibles
EN: No sensitive data (health, religion, biometrics) is collected.
ES: No se recolectan datos sensibles (salud, religión, biométricos).
9) Minors / Menores de edad
EN: The platform is not directed at minors under 18.
ES: La plataforma no está dirigida a menores de 18 años.
10) Supervisory authority / Autoridad de control
EN: Data subjects may bring claims before Hong Kong Privacy Commissioner for Personal Data (PCPD).
ES: Los titulares pueden presentar reclamos ante el Privacy Commissioner for Personal Data (PCPD) de Hong Kong.
11) Updates / Actualizaciones
EN: This policy may be updated. The version published on the website applies.
ES: Esta política puede modificarse. La versión aplicable será la publicada en el sitio web.
If you have any questions about this document, you can contact us through oursupport page.