Privacy Policy

1. Who We Are

The data controller responsible for the personal data collected through the Platform is:

• Company: Anuvyx S.A.S.
• Brand: Prextige
• Country of incorporation: Colombia
• Contact: prextige.executives@gmail.com

All personal data processing is carried out in accordance with Colombian Law 1581 of 2012 (Statutory Law on Personal Data Protection) and Regulatory Decree 1377 of 2013, as well as any applicable international data protection standards relevant to the users we serve.

2. Personal Data We Collect

We collect personal data in three ways: data you provide directly, data generated automatically when you use the Platform, and data received from third parties.

2.1 Data You Provide Directly

When you register, set up your profile, list a product, or complete a rental, you may provide:

• Full name and profile photo
• Email address and password (stored as a secure hash)
• Phone number (including country code)
• Delivery address: street, city, state/department, country, and any additional address details
• Billing and payment method information processed through our authorized payment providers
• Product listings: name, description, category, price, availability, and photos of items you list for rent
• Reviews and ratings you submit after completing a rental
• Customer or owner notes attached to a rental order
• Notification preferences (which types of alerts you want to receive)
• Any other information you voluntarily share when contacting support or filling out forms on the Platform

2.2 Data Collected Automatically

When you access or use the Platform, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geographic location derived from it
• Browser type, operating system, device identifiers, and screen resolution
• Session data: pages visited, features used, timestamps, clicks, search terms, and navigation paths
• Rental and transaction history: dates, durations, pricing, delivery method selected, order numbers, and fulfillment status
• Cookies and similar tracking technologies (see Section 5 for details)
• Error logs and crash reports to help us diagnose and fix platform issues

2.3 Data From Third Parties

If you sign in via a third-party provider (e.g., Google or another OAuth service), we receive from that provider the information you authorized it to share, which may include:

• Your name, email address, and profile photo from the provider's account
• A unique provider-issued identifier linked to your Prextige account
• Access tokens and refresh tokens needed to maintain your session

We may also receive updated address or contact information from our logistics and courier partners to fulfill deliveries you have requested.

3. How We Use Your Personal Data

We use your personal data only for the purposes described below. Where required by law, we rely on your consent; in other cases, we rely on the performance of a contract with you or our legitimate business interests.

3.1 Operating the Platform

• Creating and managing your account and authenticating your identity
• Displaying and managing product listings created by owners
• Processing rental bookings, payments, deposits, and refunds
• Coordinating delivery, pickup, and return logistics between owners and customers
• Sending you order confirmations, rental status updates, and service notifications
• Enabling you to write and publish reviews after completing a rental

3.2 Improving and Personalizing the Platform

• Analyzing usage patterns to improve features, performance, and reliability
• Personalizing search results, featured listings, and categories based on your activity
• Conducting internal research and analytics to understand how the Platform is used
• Debugging errors and diagnosing platform failures

3.3 Safety, Fraud Prevention, and Legal Compliance

• Verifying the identity of users and the authenticity of listings
• Detecting, preventing, and investigating fraud, abuse, or violations of our Terms and Conditions
• Complying with applicable legal obligations, regulatory requirements, and lawful requests from authorities
• Enforcing our agreements, resolving disputes, and protecting the rights of users
• Maintaining the security and integrity of our systems and databases

3.4 Communications and Marketing

• Sending transactional messages related to your account or rentals (these cannot be opted out of while your account is active)
• Sending promotional or informational communications where you have given consent or where permitted by applicable law — you may opt out at any time through your notification preferences or by contacting us

4. Who We Share Your Data With

We do not sell your personal data. We share it only as described below and only to the extent necessary for each purpose.

4.1 Between Platform Users

When a rental is booked, certain information is shared between the owner and the customer to enable the transaction — for example, contact details and delivery address necessary to coordinate pickup, delivery, or return of the rented item.

4.2 Service Providers

We engage trusted third-party companies and individuals to operate parts of the Platform on our behalf, including:

• Payment processors: to securely handle payment transactions, deposits, and refunds
• Cloud infrastructure and hosting: to store data and run the Platform
• Email and notification services: to deliver transactional and marketing communications
• Logistics and courier partners: to coordinate optional delivery and return services; only the data required to complete the delivery (name, address, phone number) is shared
• Analytics providers: to help us understand Platform performance and usage (data shared is aggregated or pseudonymized where possible)

All service providers are bound by contractual obligations to protect your data, process it only for the purposes we specify, and comply with applicable data protection laws.

4.3 Legal and Regulatory Disclosures

We may disclose personal data to courts, law enforcement agencies, government authorities, or other parties when we are legally required to do so, when necessary to protect the rights or safety of any person, or to enforce our Terms and Conditions.

4.4 Business Transfers

If Anuvyx S.A.S. is involved in a merger, acquisition, asset sale, or similar corporate transaction, your personal data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a materially different privacy policy.

5. Cookies and Similar Technologies

Prextige uses cookies and similar client-side storage technologies to operate and improve the Platform. These include:

• Strictly necessary cookies: Required for core Platform functionality such as maintaining your login session, preserving cart contents, and routing you correctly within the application. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, theme (light/dark), and locale settings.
• Analytics cookies: Help us understand how users navigate the Platform so we can identify areas for improvement. These may be provided by third-party analytics services. Where possible, data collected is aggregated and does not identify you personally.

Most browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and completing rentals. For more details, see our Cookie Policy.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this Policy, or as required or permitted by applicable law. The criteria we apply include:

• Active accounts: We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time (see Section 8).
• Rental and transaction records: Retained for the period required to resolve potential disputes, honor warranty or refund obligations, and comply with accounting and tax regulations.
• Reviews and ratings: Publicly submitted reviews may remain visible on the Platform after account deletion, attributed anonymously or under your display name as it existed at the time of submission.
• Legal obligations: Certain data may be retained for longer periods where required by Colombian law or other applicable regulations.
• Backup copies: Residual copies of deleted data may persist in our backup systems for a limited period before being permanently purged.

7. Security

We implement technical, administrative, and physical security measures designed to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using industry-standard TLS/HTTPS protocols
• Secure password storage using one-way cryptographic hashing — we never store your password in plain text
• Session token management with expiration controls
• Role-based access controls that limit which internal personnel can access personal data
• Payment data handled exclusively by PCI-compliant third-party payment processors — Prextige does not store raw card numbers

While we strive to protect your information, no security system is completely impenetrable. We encourage you to use a strong, unique password for your Prextige account and to sign out when using shared devices. If you suspect unauthorized access to your account, please contact us immediately at prextige.executives@gmail.com.

8. Your Rights

Under Colombian Law 1581 of 2012, you have the following rights (known as ARCO rights) over your personal data held by Prextige:

• Access (Acceso): You may request confirmation of whether we hold personal data about you and obtain a copy of that data.
• Rectification (Rectificación): You may request correction of inaccurate or incomplete personal data. You can also update most information directly from your account settings.
• Cancellation / Deletion (Cancelación): You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to any legal retention obligations.
• Opposition (Oposición): You may object to the processing of your personal data for marketing purposes or where our processing is based on legitimate interests.
• Portability: Where technically feasible, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, send a written request to prextige.executives@gmail.com including: your full name, the email address associated with your Prextige account, and a clear description of the right you wish to exercise. We will respond within the timeframes required by applicable law.

You also have the right to file a complaint with the Superintendencia de Industria y Comercio (SIC), Colombia's national data protection authority, if you believe your rights have not been respected.

9. Children and Minors

The Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under 18. If you are under 18, you may only use the Platform under the supervision and with the consent of a parent or legal guardian. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete that information promptly. If you believe a minor has registered on the Platform without proper authorization, please contact us at prextige.executives@gmail.com.

10. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications that are not owned or controlled by Prextige. This Policy applies only to data processed by Prextige. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any external services you access through the Platform, including payment processors, social login providers, and logistics partners.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on the Platform at least 15 days before the changes take effect. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the changes. If you disagree with the revised Policy, you should stop using the Platform and may request deletion of your account.

12. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact us:

• Email: prextige.executives@gmail.com
• Subject line:"Privacy Request – [Your Name]"
• Company: Anuvyx S.A.S. — Prextige

We are committed to resolving your inquiry promptly and transparently.