Order. Pick up. Eat. ¡PÚYALO! — and while you do, here's how we look after your data. Short, clear, no fine print.
Sushi Pop Santa Marta is operated by El Sanatorio S.A.S. (NIT 902.051.563-5), with operations at Calle 19 #4-23, Centro Histórico, Santa Marta, Colombia. As data controller, we process personal data in accordance with Colombian Law 1581 of 2012 (Habeas Data) and its implementing Decree 1377 of 2013, under the oversight of the Superintendence of Industry and Commerce (SIC).
1. What we collect
When you message us on WhatsApp, order through Rappi or browse the site, we may collect:
- Name and phone number (when you reach out on WhatsApp to order or ask a question).
- Delivery address and order details.
- Payment data, processed directly by Wompi (we don't store your card — Wompi handles that as an authorized payment processor).
- Browsing data (session cookies, language preference and, when enabled, anonymous / aggregated traffic metrics).
2. What we use it for
- Take your order and get it to you hot, fast, no fuss.
- Answer questions and provide customer support.
- Improve the site and the menu using aggregated metrics (not individual profiles).
- Comply with Colombian accounting, tax and legal obligations.
3. Who we share it with
We don't sell your data. Period. We share only what's strictly necessary with:
- Rappi — to deliver the order to your address.
- Wompi — to process payment securely (regulated by Colombia's Financial Superintendence).
- WhatsApp (Meta Platforms) — when you message the chat, that message travels through their platform.
- Colombian authorities — only when a court order or legal requirement compels it.
4. Cookies and web analytics
The site uses essential technical cookies (language, session). If and when we activate traffic analytics or campaign measurement pixels (for example Google Analytics or Meta Pixel), we will do so only with your prior consent through the cookie banner, and the data will be aggregated and anonymous — never used to profile you individually or to sell you to third parties. You can decline consent without losing access to the menu or to placing an order.
5. Your rights (Colombian Law 1581/2012 — Habeas Data)
You're in charge of your data. You have the right to:
- Access what we hold about you.
- Update and rectify anything out of date or incorrect.
- Delete your data when we no longer need it for legal obligations.
- Withdraw consent to processing at any time.
- File a complaint with the SIC if you believe we've failed your rights (sic.gov.co).
To exercise any of these rights, contact us at:
Email: privacy@maia-management.com
WhatsApp: +1 903 459 8763
Address: Calle 19 #4-23, Centro Histórico, Santa Marta, Colombia
We respond within 15 business days in line with Decree 1377/2013.
6. How long we keep your data
Only as long as needed to fulfill the order, meet legal and accounting obligations (a minimum of 10 years under Colombian electronic-invoicing law) and handle claims. After that, data is deleted or anonymized.
7. Security
We apply reasonable technical and organizational measures — HTTPS, access controls, encrypted storage with security-certified providers — to protect your data against unauthorized access, loss or improper disclosure.
8. Minors
The site and our services are not directed at children under 14. If you are a minor, you need authorization from a parent or legal guardian to share data with us.
9. Changes to this policy
This policy may be updated when regulation or our services change. The current version always lives at sushi-pop.co/en/privacy.html, with the "last updated" date at the top.
Done. Now you know how we handle your data. So — ¡PÚYALO! Order on WhatsApp.