Privacy Policies

We are OPERACIÓN MALVA SAS , identified with Nit. 901.338.363-9, acting as Responsible and KRONO TIME SAS , as Manager, a company registered in Colombia with NIT. 900.296.271-4, with office at Carrera 19 No. 82-85 of. 702, Bogotá DC, Colombia, hereinafter ("we", "our", "ours", "or Data Controller"); we are committed to the Protection of your Personal Data and Privacy, in compliance with Statutory Law 1581 of 2012 General Regime of
Personal Data Protection Regulation (GDPR).

The Personal Data Protection and Privacy Policy provides information about the collection, storage, use, circulation, and deletion of data; it also informs you of the purposes of its processing and, finally, enables you to exercise your legal rights to access, update, and correct your data. You can exercise your rights by emailing compliance@kronotime.com.co.

Please validate the Terms and Conditions regarding activities, programs, and offers. For more information about our privacy practices in other jurisdictions, we apply the policies described in this notice in a particular country or region only as permitted by the laws of those jurisdictions. Otherwise, we will respect and act in accordance with your legal rights.

Products offered by KRONO TIME SAS, which operates https://malvaonline.com/ , cannot be used by minors for purchase orders.

When you interact with us, whether through https://malvaonline.com/ or by contacting us via WhatsApp, email, social media, or phone calls.

WE COLLECT INFORMATION THAT YOU PROVIDE US:

By registering on our Website, placing an order for products, completing any online forms (such as registration forms, contests, and surveys), opting to receive our newsletters and special offers, participating in contests or promotions, interacting on social media with our Website, interacting with us (via WhatsApp, Email, Social Media, Phone calls).

Depending on the information you provide, this information may include: your name, address or physical location, telephone number and email address, date of birth, gender, purchasing information, purchasing preferences, images, and financial information solely related to electronic billing.

INFORMATION OUR IT SYSTEMS COLLECT ABOUT YOU : Each time you visit our Website, certain information will be automatically created and recorded by our IT systems.

We supplement the data you provide us with data from public data services, such as public or social graphic data, in order to offer you Content and promotions that are of benefit to you. We will add this data to your customer account information to better understand user interests and provide more relevant product recommendations and ads.

Device information : The information that comes from your device may differ depending on your operating system (for example: PC, Mac, iPhone, Android, or other), but includes the type of device you have (an iPhone 6s or a Samsung Galaxy S7, for example), the device's IP address and location, the browser you use, your mobile network provider (for mobile devices), the pages you've visited, your time zone and country, and download error and crash reports.

INFORMATION WE COLLECT IN-STORE: At MALVA , we're always looking for new opportunities to improve your shopping experience, and this extends to your in-store experience. You may also provide us with information in-store if you make a purchase using a credit or debit card, complete a survey or questionnaire, enter a contest or promotion, give us feedback, or if you interact or correspond with us in-store. When you use a Wi-Fi-enabled device, it may provide certain information, which will differ depending on your device and settings. The data that may be collected includes:

The type of device you have, the device identifier/Media Access Control (MAC) address, the proximity of the device to the access point, the location of the device, and when and for how long the device was connected to the Wi-Fi network.

However, you can prevent your information from being collected by turning off your device's Wi-Fi function. We may also record your interactions with products to improve your in-store experience, providing you with more personalized service during and after your visit.

You have legal rights and conditions regarding the personal information we hold about you, which we detail below.

Access free of charge to the data provided that has been processed.

The Owner may consult his/her personal data free of charge: (i) at least once every calendar month, and (ii) every time there are substantial modifications to the Information Processing Policies that motivate new consultations.

Know, update, and rectify your personal data with the Data Controller or Data Processor. You have the right to "correct" any personal data we have about you that is incorrect. You can edit your personal information in your "My Account" settings. You can also request a correction by emailing compliance@kronotime.com.co .

WITHDRAWAL OF AUTHORIZATION: You may withdraw your consent at any time by changing your marketing preferences in "My Account," unsubscribing at the bottom of any email you receive, or by emailing us at compliance@kronotime.com.co

The request for consultation, update, rectification, deletion, will be formulated by means of a request addressed to the Controller or the Data Processor, with the identification of the Owner, the description of the facts that give rise to the claim, the address, and accompanying the documents that you want to assert.

For inquiries with a frequency greater than once per calendar month, the data controller may only charge the owner for the costs of mailing, reproduction, and, where applicable, certification of documents. Reproduction costs may not exceed the costs of recovering the corresponding material.

These rights may be exercised in the case of data that is partial, inaccurate, incomplete, fragmented, misleading, or whose processing is expressly prohibited or unauthorized.

When you ask someone else to make this request on your behalf, that person and/or organization will need to demonstrate valid power of attorney from you.

Please note that in "My Account," you can view your information, primarily your account details (such as name, email, phone number, date of birth), the addresses you use for billing and shipping, your order history, and your shopping preferences.

To respond to your request to exercise these rights, please write to us at compliance@kronotime.com.co . You may exercise your right to file a complaint with the Colombian authority, the Superintendency of Industry and Commerce, Personal Data Protection Delegation, after exercising the admissibility requirement.

To provide you with our services and the website itself—including managing your account, allowing you to place an order, and optimizing your experience.

We also use this data for marketing and advertising purposes. When you have indicated that you would like to receive our marketing communications or when you have made a purchase using our services, we will use your personal information to send you updates, news, and offers via email, postal mail, or other means. We may use your data to send you tailored messages. You can opt out of receiving our email marketing communications by changing your preferences in the profile management section of your account, or by following the opt-out options provided in our promotional emails.

If your country offers such services, we may use your information to provide you with shopping recommendations and services related to your personal style, giving you an enhanced and more interactive shopping experience. These services will be provided in conjunction with third-party providers, who will act as processors and/or data processors of your personal data.

We use third-party service providers to serve you more relevant ads across your devices and on our own websites. In addition to information about your visits to our Website, our service providers may use data about your interactions with other websites or apps to present you with ads for products available on Malva Online . For more information on how to opt out of these targeted ads and how to control the use of cookies, please read the Cookies section of this Privacy Policy.

We also conduct studies, analyses, and surveys about the use of our Website and the visits it receives. We keep track of the time you spend on our Website.

TO REGISTER AND MANAGE YOUR ACCOUNT ON OUR WEBSITE: We collect your name, email address, phone number, date of birth, password, and any additional information you choose to add to your account, such as address and gender. The legal basis is the Personal Data Processing Authorization.

TO FULFILL ORDERS YOU PLACE THROUGH OUR WEBSITE: We collect your name, address, telephone number, and order details, such as the products you are purchasing, size, and price. The legal basis is the execution of the sales contract.

TO RECEIVE YOUR PAYMENT: We collect your credit/debit card number, cardholder name, and payment information. We do not store this data. We only transfer it to our authorized payment providers.

TO PROVIDE OUR CUSTOMER SERVICES: To resolve any issues you may have with our services, update you on any changes to our terms of service, or contact you regarding your experience with us. We collect your name, email address, password, phone number, address, and your contact history.

TO MONITOR THE QUALITY OF OUR CUSTOMER SERVICES: We collect your name, email address, password, phone number and address, your response to our SMS inquiries about the quality of service you received, and your contact history with us (including phone records of our conversations and conversations via email or other instant messaging applications).

TO ADMINISTER, MAINTAIN, AND OPTIMIZE OUR WEBSITE AND OUR SERVICES: We collect information about your devices, including your IP address and the type of device you use, cookie identifiers, and browsing information.

TO SEND YOU MARKETING COMMUNICATIONS AND PERSONALIZED OFFERS: We collect your name, email address, phone number, address, date of birth, purchase history, browsing history and behavior, device information, purchasing preferences, cookie identifiers, internal identifiers, and country.

To conduct electronic direct marketing activities for products and services related to those you have purchased using our website, provided you have authorized or given your consent, to send you special offers and campaigns promoted by Malva® or Malva Department Store®, in cooperation with exclusive partners.

TO MANAGE OUR LOYALTY PROGRAMS: We collect your name, email address, phone number, address, date of birth, purchase history, browsing history and behavior, in-store interactions with products, device information, shopping preferences, username, cookie identifiers, internal identifiers, country, spending level, and items. To enhance your shopping experience.

TO OFFER YOU PERSONALIZED RECOMMENDATIONS AND ENHANCE YOUR EXPERIENCE: We collect your name, email address, phone number, address, date of birth, purchase history, browsing history and behavior, in-store interactions with products, device information, shopping preferences, user ID, cookie identifiers, internal identifiers, country, spending level, and wealth. To enhance your shopping experience.

Conducting research, analysis, surveys, and questionnaires about your use of our website: We collect your name, address, email address, device information, demographic information (including gender, country of residence, and household income), and survey response content to improve our website and your user experience.

TO ADVERTISE AND RETARGET OUR PRODUCTS AND SERVICES: We collect your email address, cookie identifiers, and information from your devices. To validate the proper functioning of our business.

TO PRODUCE AGGREGATE STATISTICAL REPORTS: We use your order history, ensuring that the results of these reports do not identify you. This is for the proper functioning of our business and to improve our Website.

BUSINESS SERVICE PROVIDERS : To operate properly, we rely on a select number of third parties to provide their services and products. We allow these companies to use your information only as necessary to provide their services and products. Below are the types of providers we rely on:

• Courier companies we use to deliver your products, therefore, need access to your order information, including your name and address. These providers have a global reach, with several local companies that may be involved in the delivery process, depending on your shipping address.


• Payment Gateway Providers, which we use to process your payment information (such as your credit/debit card details).
• Analytics and search engine providers we use to help you improve and optimize the Website. These providers are located in the United States and Europe.


• Customer Service Management Providers allow us to provide our Customer Service services to improve and manage your experience.


• Marketing tool providers that help us boost our marketing.


• Marketing performance providers, who help us deliver advertising tailored to your interests and needs.


• Research and data analytics companies, which we may engage to help us conduct surveys about your use of our Website and services.


• IT/technology providers we use to support and maintain the security of the IT infrastructure that supports our Website and stores our information.

MARKETING ADS: We may share your information with our advertising and social media partners (including Facebook, Instagram, TikTok, Pinterest, and Twitter, depending on which you use) to serve relevant ads about our products, services, and partners, targeted to you and others.

DATA ENRICHMENT SERVICE PROVIDERS: We may enrich, combine, or aggregate the information we have about you with information from other sources, primarily by sharing some of your personal data with select business partners. We do this to better understand your customer profile and interests so that we can provide you with tailored offers and specialized services.

TO COMPLY WITH LEGAL REQUIREMENTS: We will have to share your information if required by law, at the request of a competent authority, or by court order.

AGGREGATE INFORMATION WITH THIRD PARTIES: We may aggregate your data with that of other customers, creating a product purchase database with information about the use of our Website to understand the use of our service and demand for our products.

Although this dataset is aggregated and anonymous, meaning it cannot be individually identified, it provides insight into the use of our Website and may be shared with selected third parties. These third parties may include providers of plugins or similar technologies to help measure traffic; our partners and other suppliers to enable better product storage; and our investors.

Given the purposes set out in this Personal Data Processing and Privacy Policy, the personal data we collect may be transferred, stored or processed in Colombia, the United States, Canada and Europe to service providers that process personal data for us (cloud hosting and backup services, magnetic tape backup servers, commercial platforms, eg Shopify, DITO, mass mailing or marketing, social networks (Meta, TikTok, Google LLC.). In accordance with instructions from the SIC, these jurisdictions offer the same level of data protection as the jurisdiction of origin.

We will retain the data you provide to us for as long as you have an account with us and, thereafter, for as long as you have questions or complaints regarding our services, in addition to any additional maintenance periods to which we are required, in accordance with applicable legal requirements.

Once you have finished using our services, we may store your information in an aggregated, anonymous format for statistical purposes.

The Products and Services are not intended for children and adolescents or minors under 18 years of age. Malva ( www.malvaonline.com and www.malva xxxURL-INTERNACIONALxx .com ) and Kronotime SAS, do not direct their Products and Services to children and adolescents or minors under 18 years of age, if you are under 18 years of age you may require your parents or legal guardians to use our services and / or purchase our products on our website.

If you follow a link to one of those websites, please be aware that our Privacy Policy does not apply to any other website or company. We are not responsible for the treatment or practices of your personal data on those websites, so please check their policies before submitting any personal information to them.

These small text files can help improve your experience on our website and facilitate your interaction with us. This may include storing your location or language preferences, so you don't have to re-enter this information when you return; or to ensure that items you want to purchase don't disappear while browsing our website pages. We also use cookies to deliver ads that are relevant to you.

We use "cookie" technology to collect information and save your online preferences. Cookies are small pieces of information sent by a web server to a web browser. This allows the server to authenticate the browser's identity on each page. We use the following categories of cookies on our Website:

STRICTLY NECESSARY COOKIES: These cookies are essential, as they allow you to navigate the website and use its features. Without these cookies, services you've asked for, such as remembering your login details or shopping cart items, would not be available.

ANALYTICAL COOKIES: These cookies collect anonymous information about how people use our website. For example, we use analytics cookies to help us understand how customers arrive at, search for, or use our site, as well as highlight areas where we can improve, such as navigation, shopping experience, and marketing campaigns. The data collected by these cookies never shows personal information, and it will never be possible to establish your individual identity. They are also used to help measure the effectiveness of an advertising campaign. You can delete these cookies through your browser settings.

FUNCTIONAL COOKIES: These cookies remember choices you've made, such as the country you're visiting our website from, language, and search parameters, such as product size, color, and style. This allows them to offer you an experience more relevant to your choices and to make your visit more enjoyable. The information these cookies collect may be anonymous, and they cannot track your browsing activity on other websites. You can disable cookies in your browser settings.

TARGETING COOKIES OR ADVERTISING COOKIES: These cookies collect information about your browsing habits with the aim of making advertising more relevant to you and based on your interests. They are also used to limit the number of times you see an ad. These cookies are generally provided by an advertising company. They remember the websites you visit, and this information is shared with other related websites. You can disable these cookies using your browser settings.

You can withdraw your consent to these cookies at any time through the following options:

• Google Analytics cookies on all websites: Please visit Google Analytics Opt-out Browser Add-on;


• Any other type of cookies: You can clear your cookies through your browser settings.

Remember that even if you disable cookies, you will continue to receive online ads. This means that the company or companies you disabled will no longer display ads tailored to your web preferences and usage patterns, so you will see a large number of ads that are irrelevant to you and your preferences.

{"type":"root","children":[{"type":"paragraph","children":[{"type":"text","value":" Keeping you and your personal information safe is very important to us. That's why we protect it by taking these steps:"}]},{"type":"list","listType":"unordered","children":[{"type":"text","value":"\n"},{"type":"list-item","children":[{"type":"text","value":" Using Secure Socket Layer (\"SSL\") encryption to help us encrypt the personal data you submit to us during the purchase or newsletter subscription process, or when interacting with us through the contact form."}]},{"type":"text","value":"\n"},{"type":"list-item","children":[{"type":"text","value":" Requesting a password to access your account on our Website."}]},{"type":"text","value":" "},{"type":"list-item","children":[{"type":"text","value":"Deleting your credit or debit card details to prevent third parties from making a transaction using that card."}]},{"type":"text","value":"\n"},{"type":"list-item","children":[{"type":"text","value":" Permanently monitor our servers\n and IT systems to prevent potential vulnerabilities and attacks."}]},{"type":"text","value":"\n"}]},{"type":"paragraph","children":[{"type":"text","value":" It is very important to keep in mind that, despite these precautions, the transmission of information via the Internet is not completely secure. We cannot guarantee the security of your personal data transmitted through our website, so any transmission is at your own risk. In particular, please be aware that if you voluntarily submit personal information online in an unprotected environment, e.g., using a public Wi-Fi network, this information may be collected and used by others beyond our or your control."}]}]}

We will post any changes to our Personal Data Protection and Privacy Policy on this page and notify you by email. Please check back regularly to stay informed.

This Policy was last updated on March 20, 2025, and is effective as of that date. This is in compliance with Article 13 of Decree 1377 of 2013, or any regulations that modify or supplement it. Personal Data will be processed for the time necessary to carry out the aforementioned purposes and to fulfill them.

This Policy is part of the contracts entered into by OPERACIÓN MALVA SAS , Nit. 901.338.363-9, which involve the Processing of Personal Data. In the event of a substantial modification to this Policy, the Data Subjects must be notified through the website ( www.malvaonline.com and www.malva xxxURL-INTERNACIONALxx .com ) and by email of the Holder.

• Translation from Spanish to English, using Google Translate.