Privacy policies

Privacy Policy


Privacy and Personal Data Protection Policy

1. General provisions

Red Creativa Online and its affiliates (hereinafter "Krem"), respect the privacy of each person who visits this website. Below, we will inform you about the type of personal data collected, processed and stored by Kmaleon on this website and for what purposes it is used. We will also inform you how you can exercise your rights as the owner of that personal data.

Kmaleon declares that it respects the privacy and the right to informative self-determination of every person and that it is responsible for the treatment of personal data that is collected, processed and stored on this website, in accordance with the Political Constitution and the laws of the The Republic of Chile.

By accessing or using this website, the user accepts this Privacy and Personal Data Protection Policy without restrictions or reservations. Regardless of the country in which you reside or provide information, the user authorizes Krem to use their information in Chile and in any other country where GrandVision operates, in accordance with the provisions of this Privacy and Personal Data Protection Policy.

Any changes to this Declaration of Protection of Personal Data and Privacy will be published on this website. This will allow you to be informed at any time about what personal data is being collected, processed and/or stored, and for what purpose.

This Declaration of Protection of Personal Data and Privacy does not apply to the websites accessible through hyperlinks that the user may find on the Kmaleon websites.

2. Collection and storage of personal data of the user of this website

Krem collects, processes and stores only the personal data that is strictly necessary for the proper functioning of this website and to improve the user experience on it. Any further processing of personal data is only carried out on the basis of other legal obligations or permissions, or if the respective user has given Krem his express consent.

Kmaleon collects, processes and stores personal data as follows:

• Collection and automatic storage of personal data:

When users visit and browse this website, Krem may automatically collect and store certain personal data, such as:
- The IP address of the user and/or the device ID assigned to the respective end device that is necessary to transmit the content of the website (for example, contents, texts, images and product information, as well as personal data files provided for the discharge).
- User activity in the context of the website.
- The respective end device type.
- The type of browser used.
- The date and time of use of the website.

• Non-automatic collection and storage of personal data:

When users visit this website, and agree to provide their personal data for certain purposes, Kmaleon collects, processes and stores this personal data. These could include one or more of the following personal data:
- User's full name.
- Number of the identity card or identification card of the user.
- Address of the user.
- User email.
- User's phone.
- Date of birth of the user.
- Gender and marital status of the user.
- Geolocation of the user.
- User preferences.
- Other information depending on the tool or activity that the user voluntarily performs on this website, such as providing contact details and passwords through the creation of an account to purchase products, contact forms; participate in surveys, raffles, sweepstakes, contests, loyalty programs, promotions, product testing; subscribe to newsletters or publications; participate in webinars or online chats; participate and use reporting channels, job boards, calendars, spreadsheets or budgets, among others.
- Any personal data necessary to carry out the activity that the user wants to carry out on this website, in particular all those necessary to make online purchases.

These personal data will be collected through this website when the user enters information in any of the fields provided for this purpose. These fields are duly marked and will not collect any personal data unless the user expressly accepts the delivery, processing and storage, in accordance with this Privacy and Personal Data Protection Policy.

3. Use and processing of the personal data of the user of this website

The personal data collected and stored may be used for the following purposes, depending on the particular case in which they are provided or collected, and according to the consent that has been granted, according to this Declaration of Protection of Personal Data and Privacy:

a) Help establish and verify the identity of the user.

b) Maintain the security and integrity of Krem's systems, facilities and personnel.

c) Open, maintain, manage and monitor the accounts that the user has with Kmaleon.

d) Provide services and assistance: communicate and respond to user questions, information requests, comments or suggestions. Personal data will be processed in order to manage the queries that the user sends through the channels enabled for this purpose on our website.

c) Process online purchases, means of payment and dispatch of products to the place indicated by the user, including the processing of medical prescriptions, health insurance and social security, health history and other information related to personal habits, necessary for the purchase or to receive any benefit that the user wants to access.

d) Send the user updates on the offer of products or services that are of interest to them, notices of promotions, sales and other information about Kmaleon products, including communications for advertising purposes.

f) Carry out raffles, raffles, loyalty programs, contests and promotions in which the user decides to participate and, where appropriate, publish the results and deliver the corresponding prizes.

g) Send the user newsletters or periodical publications to which they have subscribed, and allow them to participate in webinars and chats.

h) Maintain records, such as mailing lists or lists of types of users, by preferences or characteristics, in order to keep the user informed about our products and services and/or for commercial statistics and market research purposes. Krem may create profiles based on marketing studies and statistical and segmentation techniques and procedures that allow customizing the offer of products appropriate to the characteristics and needs of the user. Eventually, in this context, profiles could be created by technological means to make predictions about the user of this site.

l) Improve the Krem website taking into account user preferences.

4. Legal legitimation for the processing of personal data of the user of this website

The processing of personal data is based on legal provisions that justify these operations on the basis that the processing and use is legitimate for the following reasons:

(1) The processing is necessary for the provision of the Krem website and in particular for the online sales service.
(2) Krem has a legitimate interest in ensuring and improving the functionality and error-free operation of the website, adapting to the needs of users.
(3) Krem must protect the interests of the user, the interests of third parties or public interest that could be affected, as provided by current law.
(4) User consent (see next point).

Krem may share and transfer the information collected to any member of its group of companies, in Chile or abroad, to the extent that it is reasonably necessary for the purposes and on the legal bases established in this Personal Data Protection Policy and Privacy.
Kmaleon may share and transfer the information collected with Machine Learning.
Kmaleon will not sell or deliver this information to other unrelated parties, without prejudice to what is established in this Privacy and Personal Data Protection Policy.
The personal data collected will be incorporated into a Kmaleon property registry.

Personal data will be kept until the purpose for which they were collected is met or until the user exercises the right to rectify, cancel, limit and oppose them. This will be fulfilled to the extent that it does not conflict with the need to maintain its storage, for legal or fiscal reasons.

We retain the buyer's transaction history, so you can review past purchases (and repeat orders, if you wish) and also the addresses to which orders have been shipped, for the buyer's convenience. They are kept indefinitely. No user browsing data is saved.

Krem has established and maintains security, administrative, technical and physical measures that allow it to protect personal data against damage, loss, alteration, destruction or against unauthorized use, access or treatment, in terms of applicable legislation. However, the user must be aware that any communication via the Internet is not 100% secure.

5. Consent

The main legal basis for the processing of personal data is the explicit acceptance of the collection, processing, treatment and storage of these according to this Personal Data Protection and Privacy Policy.

By using our website, opening a user account, buying products with or without a prescription and/or voluntarily registering for the services, applications and tools for which certain personal data is requested, the user accepts and consents to this Privacy Policy. Protection of Personal Data and Privacy.

If the user does not agree with this Privacy and Personal Data Protection Policy, please do not provide or enter any data.

The user of this website declares to be over 16 years of age. In cases of online purchases, the user must be over 18 years of age. Products for minors sold on this website must be purchased by adults.

6. Use of the sensitive personal data of the user of this website

In the cases of online sales, the receipt of the purchase order will be managed, with the address to deliver the dispatch, and all the personal data necessary to maintain fluid contact with the buyer in the event of inventory, dispatch, billing or similar.

In the cases of reporting channels, Krem is committed to protecting the privacy of the user, including the use of security measures accepted by the industry to protect against the loss, misuse and alteration of personal data contained in said reporting channels. However, Kmaleon is not responsible for the content of the information that users upload to this platform.

In the cases of contact forms (of the "contact us" type) and other forms that have open fields for observations, Kmaleon is not responsible for the content of the information that users provide in these open fields, since it has not been requested. by Krem.

7. The rights of the user of this website regarding their personal data

The user has the right to access their personal data and to know the details of their treatment, to rectify them if they are inaccurate or incomplete, to cancel them when they consider that they are no longer necessary to fulfill the purposes that justified their obtaining, as well as to oppose their treatment for a legitimate reason. In the same way, the user can limit the use and disclosure of their personal data or revoke the consent that they have granted for their treatment.

In particular, at any time, provided the respective requirements are met, the user can assert the following rights with respect to their personal data that are processed by Krem:

Right of access: the user can access their personal data to find out what their personal data is being processed.

Right to request the rectification of personal data: the user has the right to rectify his personal data that he considers inaccurate.

Right to request the cancellation, deletion or deletion of personal data: the user has the right to request the deletion of their personal data.

Right to request the limitation or restriction of the processing of personal data: the user will have the right to request the limitation of the processing of their personal data, for example, to only certain purposes.

Right to oppose or object to the processing of personal data: the user will have the right to oppose such processing at any time, for particular reasons.

Krem will stop the processing unless it can prove legitimate grounds to stop the processing, or where such processing is necessary to assert, exercise or defend against legal claims.

Right to the portability of personal data: the user will have the right to receive the personal data that concerns him, and that he has provided to Krem in a structured format of common use and mechanical reading, and to deliver them to a third party or ask Krem to do so. deliver to a third party.

Right to file a complaint or claim with the personal data protection supervisory authority designated by Krem.

The rights to request the rectification, cancellation, limitation and opposition of the personal data stored will be without retroactive effect. It is likely that the user who requests these actions will not be able to use the website with all its functionalities again.

To avoid the collection of personal data, the user of this website can always change the settings of their browser.

8. Personal data protection supervisor

Any query or requirement that the user of this website may have regarding the aspects mentioned in this Privacy and Personal Data Protection Policy must be channeled through a person designated by Krem who will be in charge of supervising the protection of personal data, by sending an email to

9. Cookies

Please refer to our Cookie Policy

10. Web Tracking

Yo. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). For this purpose, a cookie is installed on your computer or device. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States of America.
On behalf of the website provider, Google will use this information to evaluate your use of the website, compiling reports on website activity for website operators and providing other services related to website activity and internet usage, only for the provider of the website. Google will not associate your IP address with any other data held by Google. The user can reject and deactivate this tracking on the Google website, at the following link

ii. Facebook Custom Audience Pixel

This website uses the Facebook Custom Audience Pixel, which allows us to display personalized ads to you when you have also signed in to Facebook and log in to your Facebook account. This tool allows us to customize our ads based on your use of our website in order to deliver ads specifically tailored to you. To this end, we share your email address or phone number in a hash format that allows Facebook to identify you if you have also subscribed to Facebook. The user can reject and deactivate this tracking on the Facebook website

iii. Xaxis Pixel

This website uses Xaxis, which helps us define audience segments based on user interactions with our websites, and then serve these anonymous segments with personalized image/video/mobile ads. Xaxis does not collect personal data, so it will only know your device or browser but will never know your name or contact information. The user can reject and deactivate this tracking on the Xaxis website, at the following link

iv. hotjar

This website uses Hotjar, which helps us to improve the user experience, as it measures and assesses their behavior on the Internet pages anonymously. It includes data about your browser, operating system, time spent. The user can reject and deactivate this tracking on the Hotjar website, at the following link

v. limespot

This website uses Limespot, which helps us improve the user experience, as it measures and assesses their behavior on the internet pages anonymously. It includes data about your browser, cross and direct sales, statistics, which allows you to customize the user's browsing according to their interests. The user can reject and deactivate this tracking on the Limespot website, at the following link

saw. Intercom

This website uses Intercom, which helps us to have a platform to manage live chats, among other direct communication functions with the user. The user can reject and deactivate this tracking on the Intercom website, at the following link

vii. Plug-ins from different social networks ("plug-ins") are integrated into this website. The associated services are provided by the respective companies ("providers"). These providers are:


Objecting to Data Collection by These Providers: In addition to changing your browser settings, you can adjust your ad preferences through your settings at any of these providers.

11. Other channels

Krem may also collect and process the user's personal data in other communication channels, such as telephones, emails, applications or social networks, in which case the user will be informed about the purposes of the processing of their personal data and will be asked for their consent. This Policy will also apply to those channels.