Privacy Policy

  • Definiciones
    • CRISTALUP: is a company specialized in the commercialization of beauty products, which generate a positive impact on our surroundings. When reference is made to CRISTALUP, said reference will be to CRISTAL UP S.A.S., identified with Colombia National Tax I.D. 901.073.184-8, its controllers, subsidiaries, branches, subsidiaries and/or other related companies and persons;
    • Potential Users: they are the people interested in the Portal who enter it filling in their personal data, thus being people who can potentially acquire the Products offered by CRISTALUP.
    • Users: are all those natural or legal persons interested in CRISTALUP products. That is, they are all those Potential Users who fill out their personal data on the Portal and purchase the CRISTALUP Products.
    • Products: refers to all CRISTALUP products, in their different presentations, for cosmetic use, that is: crystal baby nail files, crystal nail files, cuticles crystal stick, moisturizer for nails and skin, highlighter shadow, box to store products, glass files, and any other product that the company wishes to market.
    • Portal: refers to the Web Portal through which CRISTALUP offers visitors all its Beauty Products. The Portal refers to:
    • Sensitive data: are those that affect the privacy of the owner or whose improper use can generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership of unions, social organizations, of human rights or that promote the interests of any political party or that guarantee the rights and guarantees of opposition political parties as well as data related to health, sexual life and biometric data.

  • Privacy Policies

    Through this document, CRISTALUP desires that people interested in using the Portal know as precisely as possible the use that is given to the personal information we receive, and the way in which we share and protect it.

    This document is applicable to the treatment of the information received through the Portal and it is an integral part of the Terms and Conditions published therein, which can be consulted at any time through our Portal.

    The Portal may be deactivated or change domain, depending on the reorganization processes that we implement, changes that will be promptly informed to Potential Users and Users.

  • Information and personal data that we obtain.
  • CRISTALUP receives and stores all the information and personal data that Potential Users and/or Users enter into our Portal, or that they provide us by any other means. Said information may include, in whole or in part according to the needs of each Product, among others, the following data:

    • Names and surnames.
    • I.D. Number.
    • Birthdate and gender.
    • Telephone or cellphone numbers (personal and/or work ones).
    • Addresses and emails (personal and/or work ones).
    • City of delivery.
    • Region of delivery.
    • Country of delivery.
    • Postal code.
    • Information required by our sales representatives and/or staff in charge of client relationships, in order to comply with requests or requerida por los representantes de las áreas de ventas y/o de relaciones con el cliente con la finalidad de atender solicitudes o complaints. 

    The information required in the Portal is necessary to purchase the Products Users desire, or to respond to their requests, among others. The collection of said information allows CRISTALUP to offer services and tools that are better suited to the needs of each client.

    Los datos pueden ser almacenados y/o procesados en servidores ubicados en centros de cómputo, ya sean propios o contratados con terceros proveedores, localizados en distintos países, lo cual es autorizado por los Usuarios, y los Potenciales Usuarios, al aceptar esta Política de Privacidad.

    To provide an excellent service and personalized advice to Users, it is necessary for them to fill in certain information that will be required in the Portal.

    They may choose not to provide such information. However, this will prevent them from enjoying all the functions offered on the Portal.

    The data can be stored and/or processed on servers located in computer centers, either owned or contracted with third-party providers, located in different countries, which Users, and Potential Users authorize by accepting this Privacy Policy.

  • Use of information.

  • The personal information required in the Portal is used to offer a better service and also, among others, to: 

    • Offer new products.
    • Identify, track, confirm and deliver online orders.
    • Manage giveaways or sales.
    • Improve the performance of our Portal.
    • Carry out studies, researches and market analyses.
    • Send, follow up and deliver communications related to our products.
    • Carry out commercial activities under the present Policy of Terms and Conditions of the company.

    When you provide us with third-party information, or if other people give us information about you, we will use it for the specific purpose for which it was provided.

    Likewise, Potential Users and Users of CRISTALUP, authorize us to:

    • Develop internal studies on the interests, behaviours and demographics of the audience, to better understand their needs and interests and offer better Products and services, or provide them with information related to said Products and services.
    • Improve our commercial and promotional activities and analyze the searches made by Users and/or Potential Users, in order to improve the offer of our content and articles, increasingly personalizing our Products.
    • Send, to registered email, information about new services, display advertising or promotions, banners of interest to Users and Potential Users.
    • Provide personal information of Users to entities that intervene in the resolution of disputes between said users, such as: Insurance Companies, Amiable Mediators, Arbitration Tribunals or Courts that are competent to resolve such disputes.
    • Provide personal data to the police or judicial control and surveillance authorities, by virtue of a legal or regulatory requirement and/or use or disclose this information and personal data in defense of their rights and/or their assets to the extent such defense is related to the Services contracted through the Portal.
    • Allow access to information and personal data to auditors or third parties hired to carry out internal or external audit processes that are specific to the activity carried out by CRISTALUP.
    • Contract storage and/or processing of information and personal data with third parties, for the purposes of the correct execution of the contracts entered into with us, under the security and confidentiality standards to which we are bound.

    Additionally, by accepting this General Privacy Policy, Potential Users and Users, in their capacity as owners of the collected data, authorize CRISTALUP to carry out the treatment thereof, partially or totally, including the collection, storage, recording , use, circulation, processing, deletion, transmission and/or transfer of the data provided, for the execution of the activities related to the contracted Services.

    We inform that third-party providers (such as providers of security tools for the processing of bank transactions, call centers and service operators), banks, insurers, our representatives or agents, among others, may be involved in these activities. Without prejudice to other purposes that have been informed in this document and in the terms and conditions that are published on the Portal, and that are specific to each of our business units.

    Third parties hired by CRISTALUP are also bound to adhere to and comply with the information security policies and instructions, as well as the security protocols that we apply to all our processes.

  • Confidentiality of information.

  • The information registered in the Portal by Potential Users, and/or Users, will not be sold, rented or shared, except as otherwise set forth in the present Policies. Notwithstanding this, Potential Users and Users expressly consent to CRISTALUP transferring all or part of personal information to any of its controlled, controlling and/or related companies under any title and at the time, form and conditions it deems relevant.

  • Use of cookies and of web beacons
  • CRISTALUP may use cookies, web beacons and other similar technologies, on the Portal and on the electronic devices used to access them, in order to know the origin, activities and preferences of Potential Users and Users when browsing the web, increase the functionality and accessibility of the websites, verify that they meet the criteria required to process its requests and to adapt its services to the needs of Potential Users and Users, it being possible to obtain the following general information:

    • Type of browser and used operative system.
    • Language of device.
    • Visited website.
    • Accessed links.
    • IP address.
    • Duration of browser time.

    These cookies, web beacons and other similar technologies may be disenabled and eliminated by Potential Users or by Users when the latter so desired. To this effect, Potential User and Users may consult and/or request help of the used Internet browser.

  • Security and process for the storage of information. 
  • Should we detect any risk on our Portal that we consider you should be aware of, we will contact you and we will point out the steps you must follow to improve your protection.

    At CRISTALUP we do our best to protect our Users from any unauthorized alteration, disclosure or non-authorized destruction of the data we store or from non-authorized access to this information. To this end:

    • We review our data collection, storage and processing practices to prevent unauthorized access to our systems by unauthorized third parties.
    • We restrict access to personal information so that only those employees, contractors and agents authorized by CRISTALUP who need such information to process it, can access it. All who have access to this information are bound by strict contractual confidentiality obligations and may be penalized or fired in case of breach.
  • Requirement of information by competent authorities.
  • CRISTALUP will do everything in its power to protect the privacy of the information deposited by Users and/or Potential Users on its Portal. However, it cooperates with competent authorities and with other third parties to guarantee compliance with Colombian regulations, for example, regarding the protection of industrial and intellectual property rights, fraud prevention, among others.

    In the event of a request for personal information by competent judicial or governmental authorities, CRISTALUP will reveal the information that is related to the investigations carried out by said authorities, even if there is no order, executive or judicial summons.

  • Veracity of the information provided by Users and/or Potential Users.
  • Users and/or Potential Users, must provide accurate information about their personal data at the time of registration and during the purchase of the product through the Portal. CRISTALUP presumes the veracity of said information and will not verify, nor does it assume the obligation to verify the identity of the Users and/or Potential Users, nor the veracity, validity, sufficiency and authenticity of the data that each one of them provides.

    Therefore, CRISTALUP does is not responsible for damages and/or losses that may arise from the lack of veracity of said information, including damages that may be due to homonymy or identity theft.

  • Procedures for exercise of rights by holders of information.
  • Users and/or Potential Users have the right to access personal data that are under the control of CRISTALUP and to exercise the rights they hold as owners thereof, in the terms of the data protection regulations that are applicable to them and in accordance with the provisions of this General Privacy Policy.

    In the case of personal data whose treatment is carried out in Colombia, the procedures for the exercise of the rights of the holders will be those provided for in Law 1581 of 2012 regulated through Decree 1377 of 2013.

    Users and/or Potential Users have the right to access and know the details of the processing of personal data that we carry out, as well as to rectify said details should they be inaccurate or incomplete, and to cancel them when they are not being used in accordance with legal or contractual terms and purposes or according to the purposes and terms set forth in this General Privacy Policy.

    To make their rights effective, Users and/or Potential Users may exercise their rights to know, update, rectify and delete their personal data by sending their request to the email, or through the website https: //, or by calling the following cell number 3176680840, all in accordance with this Privacy Policy.

    For these purposes, the following data must be included in the request:

    • Names and surnames
    • Type of document
    • Number of document
    • Phone number
    • Email
    • Reference

    Should any of the Users and/or Potential Users consider that a content used in any of our contact and/or marketing channels entails a violation of their intellectual property rights, they must send a communication with the following information to the addresses set forth above:

    • Personal data: name, address, phone number and email of claimant.
    • Authentic signature, with the personal data of the owner of the breached intellectual property rights or of the person authorized to act in the name and on behalf of the owner of the breached intellectual property rights.
    • Precise and complete indication of the content protected by the breached intellectual property rights, as well as its location.
    • Explicit and clear representation that the use of the indicated content has been made without the consent of the owner of the breached intellectual property rights.
    • Clear and explicit statement, under the responsibility of the claimant, that the information provided in the notification is accurate and that the use of the content constitutes a violation of its intellectual property rights.

    The claims originated in these facts will be submitted in their treatment and solution to the applicable legal procedures, according to the nature and scope of said claims. CRISTALUP will respond to the request within a period of fifteen (15) business days, under provisions of article 15 of Law 1581 of 2012. When it is not possible to attend the query within said term, we will communicate it in a timely manner, expressing the reasons for the delay and indicating the date on which your inquiry will be addressed.

  • Modifications to privacy policy

    Due to the continuous development of our business, this General Privacy Policy and the Terms and Conditions may be modified at any time without prior notice. Likewise, CRISTALUP reserves the right to make modifications or updates to this Privacy Policy at any time, in order to comply with new legislation, or reflect internal policies or new requirements for the provision or offering of its Services.

    We recommend that you visit our Portal frequently to check the latest changes. Unless otherwise indicated, the current General Privacy Policy will be applicable to all information that we process regarding you and your account. However, we are true to our word and in no case will we substantially modify our policies or practices to make them less effective in protecting personal data.


  • Miscellaneous

    • Sale of Business. As CRISTALUP develops its business, it may buy or sell companies, subsidiaries or business units. In these transactions, the information found in CRISTALUP's databases is usually one of the assets of the transferred businesses; however, said information will in any case be subject to the commitments made under this General Privacy Policy. Due to the above, in the event that CRISTALUP or most of its assets are acquired by a third party, the information regarding Users and/or Potential Users would be one of the transferred assets.

    • Minors. The Products offered on the Portal may not be purchased by minors or people who are not in legal capacity to enter into a contract. In the event that they wish to purchase our Products, they must do so through a parent or guardian. CRISTALUP asks minors to refrain from providing personal information on the Portal.

    • Prevention of use of the account by third parties. It is important that you protect yourself from non-authorized access by third parties to your password and to your computer. When ending, make sure you do not leave your personal data stored on the computer, if it is not owned by you. 
  • Acceptance of this Privacy Policy
  • Potential Users, and Users, as the case may be, accept the processing of their personal data in accordance with the terms of this General Privacy Policy, when they provide the data through the Portal or by phone call, or when they "click" on the function "Accept" or continue browsing our website

  • Term
  • This General Privacy Policy is effective from the date of its publication.
    The contact information of CRISTALUP is
    Address:  Carrera 26 # 10-112, Medellín.
    Phone Number: 3176680840