Personal Data Processing Policy

Leer en español

Casa Duque Holdings SAS · Pícaro Gin

This is a courtesy translation. In case of any discrepancy, the Spanish version prevails.

1 · Data controller

Casa Duque Holdings SAS, tax ID (NIT) 901.759.279-4, domiciled in Cali, Colombia, at Av 9a Norte #10N-22, Granada neighborhood, is responsible for processing personal data. Casa Duque Holdings SAS is the owner of the Pícaro Gin brand. This policy applies to the data collected through the picarogin.com website, its forms and Pícaro Gin's contact channels. Its contact details are Pícaro Gin's WhatsApp line in Bogotá, +57 324 525 8297 (wa.me/573245258297), and comercial@casaduque.co.

2 · Legal framework

This policy is governed by Colombian Law 1581 of 2012, Decree 1377 of 2013, compiled in Decree 1074 of 2015, and any rules that amend or complement them.

3 · Data collected

We collect identification and contact data, such as name, phone number and email address, and the data needed for each order, such as the delivery city and address, the number of bottles and, when the customer requests an electronic invoice in their name or a company's, their national ID or tax ID (RUT). We also process the data the data subject provides when writing through WhatsApp, filling out the contact form or subscribing to the Boletín del Pícaro, as well as aggregated website browsing data. Casa Duque Holdings SAS does not collect its customers' card or bank account details. It does not request sensitive data, and if it ever does, providing it will be optional.

4 · Purposes

Personal data is used to:

  • Manage, confirm, ship and invoice orders.

  • Respond to inquiries, requests and commercial, distribution, press or partnership proposals.

  • Send the Boletín del Pícaro to subscribers.

  • Recognize returning customers and improve the service.

  • Send commercial information, such as news, launches, events, promotions and commercial activities from Pícaro Gin, when the data subject has expressly authorized it.

  • Invite customers to Pícaro Gin's membership or benefits programs, when they exist and with the data subject's authorization.

  • Produce internal statistics on the use of the website and measure the results of its digital advertising campaigns.

  • Comply with legal obligations, including tax and invoicing obligations, and requests from competent authorities.

5 · Authorization

Data is processed with the prior, express and informed authorization of the data subject, given by checking the corresponding box in the website forms, by writing through the WhatsApp line to place an order, or through any other means that allows it to be consulted later. Authorization to receive commercial information is separate from authorization to manage an order, and declining it does not affect the order. Whoever grants it agrees to receive information from Pícaro Gin through WhatsApp, text messages, email or social media, and may ask at any time to stop receiving it, through the channels in section 7.

6 · Rights of the data subject

The data subject has the right to:

  • Know, update and correct their personal data.

  • Request proof of the authorization granted.

  • Be informed, upon request, of how their data has been used.

  • File complaints with the Superintendence of Industry and Commerce (SIC), once the inquiry or claim process with the controller has been completed.

  • Revoke the authorization and request the deletion of their data, when there is no legal or contractual duty to keep it.

  • Access their personal data free of charge.

7 · Inquiries and claims

Inquiries and claims are handled mainly through Pícaro Gin's WhatsApp line in Bogotá, +57 324 525 8297 (wa.me/573245258297), and also through comercial@casaduque.co. They may be submitted by the data subject, their successors, their representative or their attorney.

Inquiries are answered within a maximum of ten (10) business days from receipt. If that is not possible, the person is informed of the reason and the response date, which may not exceed five (5) business days after the first deadline.

Claims to correct, update or delete data, or regarding a possible breach of this policy, must include the identification of the data subject, a description of the facts, the address or email for the response, and any supporting documents. If a claim is incomplete, the person is asked to complete it within five (5) days of receipt. If two (2) months pass without it being completed, the claim is considered withdrawn. Claims are answered within a maximum of fifteen (15) business days from the day after receipt. If that is not possible, the person is informed of the reason and the response date, which may not exceed eight (8) business days after the first deadline.

8 · Transfer to third parties

Data may be shared with the logistics partners and carriers that ship orders, with the technology providers that host the website, and with the analytics and digital advertising tools the website uses, only to fulfill the purposes of this policy and under a duty of confidentiality. Casa Duque Holdings SAS does not sell or assign personal data to third parties.

9 · Minors

Pícaro Gin is an alcoholic beverage. Its website is intended for adults and asks visitors to confirm their age before entering, and its products are sold and delivered only to adults. Casa Duque Holdings SAS does not knowingly collect data from minors, and if it ever identifies data from a minor, it will delete it.

10 · Security

Casa Duque Holdings SAS applies reasonable technical, human and administrative measures to protect personal data against alteration, loss, consultation, use or unauthorized access.

11 · Cookies and browsing

The website uses its own cookies, including the one that remembers the age confirmation, and may use third-party cookies and analytics and advertising tools, such as those from Google and Meta, to measure visits, understand how the site is used and measure the results of its campaigns. The data subject can disable them in their browser settings.

12 · Effective date

This policy is effective as of November 2, 2026. Personal data is kept for as long as it is needed for the purposes described, or while there is a legal or contractual duty to keep it. Any substantial change to this policy will be announced on the website.