Personal Data Processing Policy

1. Data controller

Oftalmoquímica S.A., a Colombian company with tax ID (NIT) 860.527.744-4, domiciled in Bogotá, Colombia, is the controller of the personal data collected through this website.

Address: Carrera 49B #93-81. Phone: (601) 610 7031. Email: servicioalcliente@oftalmoquimica.com. Business hours: Mon–Fri 8:00–17:30.

This policy is issued in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013 and related personal data protection regulations.

2. Personal data we collect

Through this site we collect only the data you voluntarily provide:

• Full name and email address, when you fill in the contact form.
• Mobile phone number, only if you choose to provide it: this is an optional field you need only fill in if you prefer to be contacted that way.
• The content of the message you choose to send us.
• Aggregated, anonymous browsing data (pages visited, country, device type) that cannot identify you.

We do not collect data through advertising or third-party tracking cookies for commercial purposes.

3. Sensitive data and health information

Colombian Law 1581 of 2012 classifies health-related data as sensitive. You are NOT OBLIGED to authorize the processing of sensitive data, nor to provide it.

We recommend that you DO NOT include information about your health status, diagnoses, medical records or treatments in this site's contact form.

If your message concerns a specific medical condition, please consult your ophthalmologist, your treating physician or your veterinarian, who are the only ones authorized to advise you. Oftalmoquímica S.A. is a pharmaceutical laboratory: it provides no clinical services and treats no patients, and this channel is commercial and informational.

Should you nevertheless include health information, we will process it under the reinforced security measures set out in this policy, use it solely to handle your request, and delete it once resolved.

4. Purposes of processing

The data collected is used exclusively for the following purposes:

• To handle and respond to the queries, requests, complaints or claims you submit.
• To send you the information about our products that you have expressly requested.
• To contact you through the means you indicate, in order to follow up on your request.
• To respond to requirements from administrative or judicial authorities and comply with legal obligations, particularly those arising from health and pharmacovigilance regulations.
• To produce aggregated, anonymous site usage statistics that cannot identify individuals.

We do not use your data for purposes other than those stated here, nor do we sell, trade or transfer it to third parties for advertising purposes.

5. Your authorization

Collecting your data requires your prior, express and informed authorization. By checking the acceptance box on the contact form, you grant that authorization under the terms of this policy.

You may at any time request a copy or proof of the authorization you granted, as well as revoke it, under the terms of section 7.

6. Rights of the data subject

Under article 8 of Law 1581 of 2012, as the owner of your personal data you have the right to:

• Access, update and rectify your personal data held by Oftalmoquímica S.A.
• Request proof of the authorization you granted for the processing of your data, except where the law does not require it.
• Be informed, upon request, about how your personal data has been used.
• File complaints with the Colombian Superintendence of Industry and Commerce (SIC) for breaches of Law 1581 of 2012, once the query or claim procedure with us has been exhausted.
• Revoke your authorization and request deletion of your data, where no legal or contractual duty prevents it.
• Access your processed personal data free of charge.

7. How to exercise your rights

The area responsible for handling requests, queries and claims is the Departamento de Servicio al Cliente (Customer Service Department), which you may contact through:

• Email: servicioalcliente@oftalmoquimica.com
• Phone: (601) 610 7031, during Mon–Fri 8:00–17:30
• Postal mail: Carrera 49B #93-81

QUERIES: we will respond within a maximum of ten (10) business days from the day after receipt. If we cannot meet that deadline, we will inform you of the reasons and the date on which your query will be handled, which will not exceed five (5) business days after the original deadline. CLAIMS: if the claim is incomplete, we will ask you to complete the information within five (5) days of receipt; if two (2) months pass without your response, the claim will be deemed withdrawn. The maximum term to resolve a claim is fifteen (15) business days from the day after receipt, extendable by eight (8) further business days, with prior notice of the reasons for the extension.

8. Processors and international data transfers

To operate this site and handle your requests we rely on technology providers acting as data processors, which may be located outside Colombia:

• An email delivery service, used to forward contact form messages to us (servers located in the United States of America).
• A hosting infrastructure and content delivery network provider, required for the site to operate.

By accepting this policy, you expressly authorize the international transfer and transmission of your data to such providers, under article 26 of Law 1581 of 2012, exclusively for the purposes described in section 4 and subject to contractual confidentiality and security commitments.

9. Children's data

This site is not directed at minors and we do not knowingly collect their personal data.

Processing children's data is only permissible where it respects their prevailing rights, serves their best interest, and has the authorization of their legal representative, after the child's right to be heard has been exercised.

If we detect that we have received a minor's data without the corresponding authorization, we will delete it.

10. Information security

We adopt reasonable technical, human and administrative measures to protect your data against tampering, loss, unauthorized or fraudulent access, use or disclosure, including:

• Encryption of site traffic via HTTPS.
• Restricted access to information, limited to staff who need it to handle your request.
• Controls against automated form submissions and rate limits per IP address.
• Operation logs that do not store message content or identifiable data of the sender.

11. Retention period

We will retain your data for as long as necessary to handle your request and thereafter for the period required by applicable legal obligations, particularly health, accounting and pharmacovigilance requirements.

Database validity period: Los datos de quienes lleguen a tener relación comercial con la compañía se conservan mientras dure esa relación y durante los diez (10) años siguientes, conforme al artículo 28 del Código de Comercio y a las obligaciones sanitarias y de farmacovigilancia aplicables. Los datos de las solicitudes de información recibidas por el formulario de contacto que no deriven en relación comercial se suprimen una vez atendida la solicitud y, en todo caso, transcurridos dos (2) años.

Once those periods elapse, the data will be deleted or anonymized.

12. Web analytics and cookies

We use a self-hosted analytics tool that measures site usage in an aggregated, anonymous way: it sets no tracking cookies, builds no advertising profiles and cannot identify visitors.

For that reason, browsing this site does not require a cookie consent banner. This is separate from the data you voluntarily provide in the contact form, which is personal data and is governed by this policy.

The location map on the contact page is served from OpenStreetMap, an open mapping project that sets no tracking cookies and builds no advertising profiles. The accompanying Google Maps links open in a separate window and only if you click them; from that point onward Google's own policies apply, which are separate from those of Oftalmoquímica S.A.

Blog articles may include videos hosted on YouTube. The player is NOT loaded automatically: unless you press play, only a still image is shown and no connection is made to the player. If you choose to play it, the youtube-nocookie.com domain is used, without advertising tracking, and from that point onward Google's policies apply.

13. Effective date and amendments

This policy takes effect on 5 de agosto de 2026.

Any substantial change to the purposes of processing will be communicated to you before it is implemented, through this website or the email address you provided.

We recommend that you review this page periodically for the current version.