thorha is responsible for processing your personal data. Contact: [email protected].

Identification and contact data (name, email, phone), delivery address, order history and basic technical data (such as the IP address when accepting conditions).

Creating and managing your account, processing and delivering your orders, handling support, withdrawal, warranty and payment reversal requests, and complying with legal obligations. Only if you authorize it separately, sending you news and promotions.

The legal basis depends on the law of the country where you live: in some it requires your prior, express and informed authorization; in others it is enough that the processing is necessary to perform the contract. You may withdraw the authorization where applicable, unless there is a legal or contractual duty to keep the data. Advertising is always a separate, optional consent.

Colombia

• Law: Ley 1581/2012 arts. 9, 10, 12, 14, 15; Decreto 1074/2015 caps. 25-26.
• We process your data with your prior, express and informed authorization, which you give when registering or buying.
• Data protection authority: Superintendencia de Industria y Comercio.
• We answer your access, rectification or erasure requests within 15 business days at most.
• We send you advertising only if you accept it separately; you can withdraw that consent at any time from your profile.

European Union

• Law: Reglamento (UE) 2016/679 (GDPR) arts. 6, 7, 12, 13; Directiva 2002/58/CE art. 13.
• We process the data needed for your account and order because it is necessary to perform the contract; we do not need your consent for that.
• Data protection authority: Autoridad nacional de protección de datos de tu país.
• We answer your access, rectification or erasure requests within 30 calendar days at most.
• We send you advertising only if you accept it separately; you can withdraw that consent at any time from your profile.

United Kingdom

• Law: UK GDPR; Data Protection Act 2018; PECR 2003 reg. 22.
• We process the data needed for your account and order because it is necessary to perform the contract; we do not need your consent for that.
• Data protection authority: Information Commissioner's Office (ICO).
• We answer your access, rectification or erasure requests within 30 calendar days at most.
• We send you advertising only if you accept it separately; you can withdraw that consent at any time from your profile.

Argentina

• Law: Ley 25.326 arts. 5, 14, 16.
• We process the data needed for your account and order because it is necessary to perform the contract; we do not need your consent for that.
• Data protection authority: Agencia de Acceso a la Información Pública (AAIP).
• We answer your access, rectification or erasure requests within 10 calendar days at most.
• We send you advertising only if you accept it separately; you can withdraw that consent at any time from your profile.

Brazil

• Law: Lei 13.709/2018 (LGPD) arts. 7, 8, 9, 18, 19.
• We process the data needed for your account and order because it is necessary to perform the contract; we do not need your consent for that.
• Data protection authority: Autoridade Nacional de Proteção de Dados (ANPD).
• We answer your access, rectification or erasure requests within 15 calendar days at most.
• We send you advertising only if you accept it separately; you can withdraw that consent at any time from your profile.

Chile

• Law: Ley 21.719 arts. 4 y siguientes.
• We process your data with your prior, express and informed authorization, which you give when registering or buying.
• Data protection authority: Agencia de Protección de Datos Personales.
• We answer your access, rectification or erasure requests within 30 calendar days at most.
• This law applies from 2026-12-01 (the date may change if the legislature postpones it).
• We send you advertising only if you accept it separately; you can withdraw that consent at any time from your profile.

Peru

• Law: Ley 29733; DS 016-2024-JUS.
• We process your data with your prior, express and informed authorization, which you give when registering or buying.
• Data protection authority: Autoridad Nacional de Protección de Datos Personales.
• We send you advertising only if you accept it separately; you can withdraw that consent at any time from your profile.

Mexico

• Law: Ley Federal de Protección de Datos Personales en Posesión de los Particulares (DOF 20-03-2025).
• We process your data with your prior, express and informed authorization, which you give when registering or buying.
• Data protection authority: Secretaría Anticorrupción y Buen Gobierno.
• We send you advertising only if you accept it separately; you can withdraw that consent at any time from your profile.

You may know, update and correct your data; request proof of the authorization; be informed of how it is used; revoke the authorization or request deletion where applicable; access it free of charge and file complaints with the data protection authority of your country (in Colombia, the Superintendencia de Industria y Comercio). To exercise them write to [email protected].

We adopt measures to protect your information. Your data is processed by our technology platform acting as data processor, following our instructions.

We keep your data while you maintain a relationship with us and for as long as legal obligations require.