PRIVACY POLICY

Last updated: August 14, 2026

Shadow Stream Limited (hereinafter "we", "us" or "the Company"), a company incorporated under the laws of Hong Kong, operates the website mercadorelampagomx.com (hereinafter the "Website") dedicated to the sale of Chinese feng shui decorative ornaments and cultural products.

This Privacy Policy sets forth the terms under which we process personal information of users residing in Colombia and Chile, in compliance with applicable local regulations: Law 1581 of 2012 and its regulatory decrees for Colombia, and Law No. 19.628 on the Protection of Private Life for Chile.

By accessing and using our Website, you acknowledge and accept the practices described in this policy.

1. Information We Collect

We collect only the information necessary to process your orders and provide you with a proper shopping experience:

1.1 Information You Provide Voluntarily

• Identification data: Full name, ID number (when required for international shipments and customs clearance).
• Contact data: Email address, phone number.
• Shipping data: Full delivery address, city, state/region, postal code.
• Payment information: Card or payment method details, processed directly by certified payment gateways. We do not store full card numbers on our servers.
• Communications: Content of inquiries, claims or comments sent to our customer service.

1.2 Information Collected Automatically

• IP address, browser type, operating system and device information.
• Pages visited, session duration and products viewed.
• Information obtained through cookies and similar technologies (see Section 8).

2. Purposes of Data Processing

We process your personal information for the following purposes:

1. Performance of sales contract: To process, manage and ship your orders of feng shui products.
2. Shipping and customs management: To share necessary data with logistics companies and customs authorities for international delivery of goods.
3. Customer support: To respond to inquiries, manage returns, claims and warranty requests.
4. Marketing (with prior consent): To send newsletters, special offers and news about decorative and feng shui products.
5. Service improvement: To analyze usage patterns to optimize our Website and shopping experience.
6. Legal compliance: To respond to requests from competent authorities and fulfill tax and customs obligations.

3. Lawful Basis for Processing

In accordance with applicable regulations, our lawful bases for processing are:

• Performance of a contract: For order processing and product delivery.
• Data subject consent: For sending commercial communications and using non-essential cookies.
• Compliance with legal obligation: To respond to public authority requests and comply with customs and tax regulations.
• Legitimate interest: For continuous improvement of our service and Website security.

4. Sharing of Personal Data

We may share your information with third parties only in the following cases:

4.1 Service Providers

• Logistics and courier companies: For delivery of your orders (name, address, phone number).
• Payment gateways: To securely process transactions.
• Technology service providers: Web hosting, data analytics, email service providers.

4.2 Competent Authorities

We may disclose your data to administrative, judicial or customs authorities when there is a legal obligation or valid official request.

4.3 International Transfers

Due to our location in Hong Kong and the nature of international commerce, your data may be transferred and processed outside your country of residence. We ensure that these transfers are carried out with appropriate security measures and in compliance with the data protection regulations applicable in Colombia and Chile.

5. Rights of Data Subjects

As a data subject, you have the following rights, which you may exercise free of charge:

• Right of access: To know what personal data we hold about you.
• Right to rectification: To correct inaccurate or incomplete data.
• Right to cancellation/deletion: To request deletion of your data when they are no longer necessary for the purposes for which they were collected.
• Right to objection: To object to the processing of your data on legitimate grounds.
• Right to restriction of processing: To request suspension of processing in cases provided by law.
• Right to data portability: To receive your personal data in a structured, commonly used and machine-readable format.
• Right to withdraw consent: To withdraw your authorization for sending commercial communications at any time.

To exercise any of these rights, please send a request to service@mercadorelampagomx.com attaching a copy of your identification document. We will respond to your request within the legal timeframes established in each jurisdiction.

For users in Colombia: You may file a complaint with the Superintendency of Industry and Commerce (SIC) if you consider that your request has not been satisfactorily addressed.

For users in Chile: You may file a protection remedy before the courts of justice or submit a claim to the Ministry of Economy, Development and Tourism, as applicable.

6. Data Security

We implement technical, administrative and physical measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. These measures include encrypted connections (SSL/TLS), restricted access to databases, regular security audits and confidentiality agreements with personnel and suppliers.

However, no data transmission or storage system is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that may affect your rights, we will notify you and the competent authorities within the timeframes established by applicable law.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which they were collected, including compliance with legal, accounting and tax obligations.

• Order and transaction data: retained for the duration of the contractual relationship and for the period required by tax and customs regulations.
• Marketing communications data: retained until you withdraw your consent.
• Customer support records: retained for the duration necessary to resolve the inquiry and for subsequent liability purposes.

8. Cookies and Similar Technologies

Our Website uses cookies — small text files stored on your device — to enhance your browsing experience. We use the following types of cookies:

• Essential cookies: Necessary for the basic functioning of the Website and the shopping process.
• Analytical cookies: Allow us to measure and analyze user behavior to improve our service.
• Preference cookies: Remember your settings and preferences (such as language and region).

You can configure your browser to block or alert you about cookies, but some parts of the Website may not function properly if you do so. By continuing to use our Website, you consent to the use of cookies in accordance with this policy.

9. Children's Privacy

Our Website and services are directed to adults. We do not knowingly collect personal data from children under 18 years of age. If we become aware that we have collected personal data from a child, we will take steps to delete such information promptly. If you believe we may have data from a minor, please contact us at the email address provided above.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or for legal, regulatory or operational reasons. Any modifications will take effect upon publication on this page.

We encourage you to review this policy periodically. Continued use of the Website after the publication of changes constitutes acceptance of the updated policy.

11. Contact Information

For any questions, requests or concerns regarding this Privacy Policy or the processing of your personal data, please contact us at:

• Email: service@mercadorelampagomx.com
• Business hours: Monday to Friday, 9:00 – 18:00 (Hong Kong Time)