Privacy Policy

Nikolina Sinners — nikolinasinners.com.
Version 1.1 — Published 4 September 2026 (v1.0: 1 September 2026).

1. Who is responsible for your data

Full legal registration details for the controller, including the registered owner of record, are on public file with Colombia's Registro Único Empresarial y Social and can be looked up there by anyone (rues.org.co). This page displays the establishment's trade name only, consistent with how we present the brand publicly.

This policy covers data collected through nikolinasinners.com and the official Nikolina Sinners social accounts linked from that site (Instagram, Facebook, X, Fanvue). Each linked platform (Fanvue, Meta, X) also applies its own privacy policy to activity that happens on its platform directly — this document covers what AI Innovation Labs itself collects and controls.

2. Legal basis

This policy is governed by Colombian Law 1581 of 2012 (Habeas Data), Decree 1377 of 2013 (compiled in Decree 1074 of 2015), and guidance from the Superintendencia de Industria y Comercio (SIC). Section 10 below addresses visitors from other jurisdictions (EU/UK/California).

3. Data we collect

• Contact data you send us directly: if you email [email protected] or message official accounts, we receive whatever you choose to include (e.g. name, email address, message content).
• Direct messages on connected platforms: when you message the official Instagram or X account, an automated assistant may read and respond to your message as part of normal account operation. It responds to inbound messages only — it does not initiate contact with you.
• Technical data on this website: this site (nikolinasinners.com) uses Cloudflare Web Analytics, a cookieless, privacy-preserving page-view counter that does not fingerprint visitors or store identifiers on your device, and Google Analytics 4 (GA4), which uses cookies and an anonymized client identifier to measure how visitors use the site (pages viewed, items browsed, orders started) so we can understand and improve it. GA4 data is processed by Google under its own privacy policy and may be transferred outside Colombia under Google's standard contractual safeguards; we do not use it for third-party advertising, and it is not linked to your Fanvue account or payment information. The only client-side storage is your display preferences (text size, contrast, motion, language — saved on your device only, never sent to us) and a same-device, per-visit age-verification flag (browser sessionStorage), which is never transmitted to us or to any server and clears when you close your browser session.

We do not collect payment information on this site. Subscriptions and paid content are handled entirely by Fanvue, a third-party platform with its own separate privacy policy and payment processing — nikolinasinners.com contains only a link to it.

4. Why we process this data

1. To respond to messages and inquiries sent to us.
2. To operate the automated inbound-message assistant on connected social accounts (support and engagement only — it does not initiate outreach).
3. To comply with legal, accounting, and regulatory obligations.

We do not sell or share your data with third parties for their own marketing purposes, and we do not send unsolicited bulk communications.

5. Sensitive-adjacent nature of this category

Because this brand distributes adult-oriented content, any record that associates a real identity with an account interacting with Nikolina Sinners is treated with the strictest tier of confidentiality under our internal practices, even though the underlying content itself depicts no real person. We limit what identifying information we retain about anyone contacting or messaging official accounts to what is operationally necessary.

6. Data sharing and international transfers

We use the following technology providers, which may process data outside Colombia under their own security standards:

These transfers occur only for the purposes described above, consistent with Articles 26 and 27 of Law 1581 of 2012 and each provider's own contractual safeguards.

7. Retention

We retain contact and message data only as long as necessary to respond to your inquiry or to satisfy a legal, accounting, or regulatory requirement, after which it is deleted or anonymized. See Section 9 for how to request deletion sooner.

8. Your rights (Law 1581 of 2012, Art. 8)

• Know what data we hold about you and how it is used.
• Update or correct inaccurate or outdated data.
• Request proof of any authorization given.
• Withdraw authorization and/or request deletion, where no legal or contractual duty requires us to keep the data.
• File a complaint with the SIC after first raising the matter with us (Art. 16, Law 1581 of 2012).

9. How to request access, correction, or deletion

Email [email protected] with your name, what data or interaction your request concerns, and which right you want to exercise. Full step-by-step instructions and our response timeline are also published separately: Data Deletion Instructions.

• Inquiries: answered within 10 business days, extendable by 5 more with notice (Art. 14).
• Complaints/requests: answered within 15 business days, extendable by 8 more with notice (Art. 15).

If unresolved, you may contact the Superintendencia de Industria y Comercio — www.sic.gov.co.

10. Visitors from other jurisdictions

Our operations are based in Colombia and this policy is governed by Colombian law. If you contact us from the EEA, UK, California, or another jurisdiction with its own data protection regime (GDPR, CCPA, etc.): (a) we process your data only based on your own request or consent; (b) we do not perform profiling or automated decisions with legal effect; (c) we use no advertising cookies; and (d) you may exercise access, correction, deletion, restriction, and objection rights through the same channel in Section 9. We have no establishment or representative outside Colombia.

11. Changes to this policy

Material changes will be posted on this page with an updated date. Prior versions are retained internally.

This is a compliance document. For specific requests, we may ask for additional verification before acting, solely to protect your own data.