Effective date: September 26, 2026

This Privacy Policy is the Personal Data Processing Policy (Política de Tratamiento de Datos Personales) of WILIAM TORRES FILM S.A.S., the company behind Los MAWIS (“Los MAWIS”, “we” or “us”). It explains how we collect, use, store and protect your personal data and how you can exercise your rights, in accordance with Article 15 of the Colombian Constitution, Ley Estatutaria 1581 de 2012, Decreto 1377 de 2013 (now part of Decreto 1074 de 2015) and other applicable rules.

It covers the personal data we receive through www.losmawis.com (the “Site”), mainly through its contact form; through our email, phone, WhatsApp and social media profiles; and from the people who hire us.

1. Who is responsible for your data

WILIAM TORRES FILM S.A.S. is the data controller (Responsable del Tratamiento) for your personal data.

• Company name: WILIAM TORRES FILM S.A.S. (Los MAWIS)

• NIT (tax ID): 901.476.215-8

• Address: Carrera 59 # 96-78, Barranquilla, Atlántico, Colombia, postal code 080020

• Email: info@losmawis.com

• Website: www.losmawis.com

2. Key terms

• Personal data: any information linked, or that can be linked, to an identified or identifiable natural person.

• Data subject (Titular): the natural person the data is about.

• Processing (Tratamiento): any operation on personal data, such as collecting, storing, using, sharing or deleting it.

• Authorization: the data subject’s prior, express and informed consent to the processing of their data.

• Data controller (Responsable): whoever decides on the database and the processing. Here, WILIAM TORRES FILM S.A.S.

• Data processor (Encargado): whoever processes personal data on the controller’s behalf, such as our website host.

• Sensitive data: data that affects the data subject’s privacy or whose misuse could lead to discrimination, such as data about health, religious beliefs or sex life, and biometric data.

• Transfer and transmission: sending personal data to another controller (transfer), or to a processor so that it can work on our behalf (transmission), in Colombia or abroad.

3. What data we collect

Through the contact form

• Your names, email and phone number.

• The Instagram accounts you choose to share.

• Details of your event or project: the type of story (wedding, destination wedding, engagement, save the date, commercial or brand story, or other), the service you’re interested in, the date, the setting (city and venue), the estimated number of guests and whether you have a wedding planner.

• How you heard about us.

• The investment range you feel comfortable exploring.

• Anything you tell us in “Tell us more about the day”.

Fields marked with an asterisk (*) are required so we can answer you. The rest are optional.

Through other channels

When you write to us by email, WhatsApp or social media, we receive the data in your message and your contact details on that channel. If you hire us, we also collect what we need to sign and manage the contract, issue electronic invoices, and plan and deliver your service, such as your ID or tax number and billing details.

While you browse

Wix, which hosts the Site, automatically collects technical data such as your IP address, browser, device, the pages you visit and when. See Section 12 (Cookies).

Sensitive data

The form doesn’t ask for sensitive data, and you aren’t obliged to give it to us. Please don’t include sensitive data about yourself or others, such as health information. If planning your event requires it, we’ll ask the person concerned for their explicit authorization, which they aren’t obliged to give.

Other people’s data

If you give us data about someone else, such as your partner or your wedding planner, you confirm that you’re allowed to share it and that they know about this Policy.

Children and adolescents

The Site and the form are meant for adults. We don’t knowingly collect data from children or adolescents through the Site.

4. What we use your data for

• To answer your inquiry and contact you about it by email, phone or WhatsApp.

• To check our availability, get a feel for your style through the Instagram accounts you share, prepare and send your proposal (MAWI Guide) and schedule calls with you.

• If you hire us, to sign and manage the contract, invoice and receive payments, coordinate your event with you and, when needed, with your wedding planner or venue, and deliver your photos and films.

• To meet our legal, tax and accounting obligations and answer requests from authorities.

• To keep the Site secure and improve it with aggregated visit statistics.

• To handle the requests you make as a data subject.

• Only if you give us separate consent, to send you news and offers from Los MAWIS by email or WhatsApp. You can unsubscribe at any time.

We only contact you through the channels you authorized. Promotional messages are sent only with your consent, through those channels, and on the days, at the times and with the frequency allowed by Ley 2300 de 2023.

We won’t use your data for any other purpose without your authorization.

5. Your authorization

When you tick the authorization box and send the form, you give us your prior, express and informed authorization to process your data to answer your inquiry, prepare your proposal and contact you by email, phone or WhatsApp, as this Policy describes, including storing it with providers outside Colombia (Section 7). We keep a record of that authorization.

If you hire us, your contract includes your authorization for the processing needed to carry it out. News and offers need your separate consent.

If you contact us directly by email, phone or social media, we’ll use your data only to answer you and, where relevant, to prepare your proposal, under this Policy.

You can revoke your authorization at any time (Section 11), unless a legal or contractual duty requires us to keep your data.

6. Who we share your data with

• Service providers that process data on our behalf, under contracts that require them to protect it: Wix.com Ltd. and its group companies, which host the Site and store form submissions; the platforms that host and deliver our galleries and films, such as Pic-Time, Vimeo and YouTube; and our email, cloud storage and productivity providers. For clients, also the providers that help us with accounting and electronic invoicing.

• WhatsApp and Instagram, both Meta services, which process the messages we exchange on those channels under their own privacy policies.

• The Los MAWIS team and collaborators (photographers, filmmakers and editors) who need the information to plan and cover your event, under confidentiality duties.

• Your wedding planner, venue or other event suppliers, only when coordinating your event requires it.

• Authorities, when the law requires it, such as the DIAN (Colombia’s tax authority) for electronic invoicing.

We don’t sell or rent personal data.

7. Storage outside Colombia

Because we use cloud services, your data may be stored or processed outside Colombia: mainly in the United States and Ireland, where Wix has its data centers; in Israel, where Wix.com Ltd. is based; and in other countries where our providers operate.

The Superintendencia de Industria y Comercio (SIC) recognizes the United States, the member states of the European Union and the countries the European Commission has declared adequate, such as Israel, as offering an adequate level of data protection. Our providers act as processors under contracts that require them to protect your data.

8. Images of people in our work

• The Site and our social media profiles show photos and films of real weddings, with couples, their families and guests. Images in which a person can be identified are personal data, and we treat them with care.

• We publish images in which a person can be identified only with their authorization. For our clients, that authorization is part of their contract.

• We publish images of children and adolescents only in ways that respect their best interests and fundamental rights, with the authorization of their parents or legal representatives and after hearing the minor’s opinion, as their maturity allows.

• If you appear in our content and want it removed, or you’re the parent or legal representative of a minor who appears in it, write to info@losmawis.com. We’ll handle your request as a claim (Section 11) and, when removal applies, take the content down from the Site and from our own social media profiles.

9. How long we keep your data

• Inquiries that don’t become a booking: up to twenty-four (24) months from our last contact, so we can follow up or pick up the conversation if you write again. Then we delete them. You can ask us to delete them sooner.

• Clients: while the contract is in force and, afterwards, for as long as commercial, tax and accounting law requires (up to ten (10) years) and to deal with any claims.

• News and offers: until you unsubscribe or revoke your consent.

• Portfolio images: for as long as they’re part of our portfolio, unless you ask us to remove them or the contract says otherwise.

Our databases remain in force for as long as WILIAM TORRES FILM S.A.S. carries on its business, without affecting the periods above.

10. Your rights

Under Article 8 of Ley 1581 de 2012, you have the right to:

• Know, update and correct your personal data, including data that is partial, inaccurate, incomplete, fragmented or misleading, or whose processing is prohibited or hasn’t been authorized.

• Ask for proof of the authorization you gave us, except where the law doesn’t require one.

• Be told, on request, how we have used your data.

• File complaints with the Superintendencia de Industria y Comercio (SIC) about breaches of data protection law, after first making your request to us (Section 11).

• Revoke your authorization and/or ask us to delete your data, when no legal or contractual duty requires it to stay in our database.

• Access your personal data free of charge, at least once every calendar month and whenever this Policy changes substantially.

11. How to make a request

The Legal Representative of WILIAM TORRES FILM S.A.S. is in charge of handling requests about personal data. Send yours by email to info@losmawis.com or in writing to Carrera 59 # 96-78, Barranquilla, Atlántico, Colombia.

Who can make a request

• You, proving your identity.

• Your successors (causahabientes), proving that status.

• Your representative or attorney, proving the representation or power of attorney.

• Someone acting on your behalf or for your benefit by stipulation.

The rights of children and adolescents are exercised by the people legally entitled to represent them.

What to include

Your full name and ID number, how you’d like us to reply, a description of what you’re asking for and, if relevant, any documents you want to rely on. We may ask for more information to verify your identity.

Queries (consultas)

To find out what data we hold about you or how we use it. We’ll answer within ten (10) business days from the day we receive your query. If we can’t, we’ll tell you why and when we’ll answer, which will be no more than five (5) business days after the first deadline.

Claims (reclamos)

To correct, update or delete your data, revoke your authorization, or report a possible breach of the law.

• If your claim is incomplete, we’ll ask you, within five (5) business days of receiving it, to complete it. If you haven’t completed it two (2) months after our request, we’ll take it that you’ve withdrawn it.

• If we receive a claim we’re not the right party to resolve, we’ll pass it on to whoever is within two (2) business days and let you know.

• Once your claim is complete, we’ll add the note “claim in process” (reclamo en trámite) and its reason to your record within two (2) business days, and keep it there until the claim is decided.

• We’ll resolve your claim within fifteen (15) business days from the day after we receive it. If we can’t, we’ll tell you why and when we’ll resolve it, which will be no more than eight (8) business days after the first deadline.

Complaints to the SIC

Once you’ve completed the query or claim process with us, you can file a complaint with the Superintendencia de Industria y Comercio, Colombia’s data protection authority, at www.sic.gov.co.

12. Cookies

• Wix, which hosts the Site, places essential cookies that the Site needs to work securely, for example for security, session management and performance. These don’t need your consent.

• Wix also gives us aggregated statistics about visits, such as pages viewed and device type, which we use to improve the Site.

• Our pages include videos from Vimeo and YouTube. When they load or play, those services may place their own cookies and collect data under their own privacy policies. Links to Instagram and Pic-Time take you to sites with their own policies.

• Our cookie banner lets you accept or reject non-essential cookies. If we start using analytics or advertising cookies beyond these, we’ll update this Policy.

• You can also block or delete cookies in your browser settings. Blocking essential cookies may affect how the Site works.

13. Security

We apply reasonable technical, human and administrative measures to protect your data against loss, misuse and unauthorized access, use or alteration. Access is limited to the people who need it, the Site uses encrypted connections (HTTPS), and we rely on the security measures of Wix and our other providers. No system is completely secure. If a security incident affects your data, we’ll act as the law requires, including notifying the SIC.

14. Visitors from the European Economic Area and the UK

If the EU or UK General Data Protection Regulation (GDPR) applies to you:

• Legal bases: we process your data to take steps at your request before entering into a contract (answering your inquiry and sending your proposal), to perform the contract if you hire us, for our legitimate interests (Site security, aggregated statistics and meeting our legal, tax and accounting obligations in Colombia), and with your consent for news and offers and for non-essential cookies (Section 12). You can withdraw your consent at any time.

• Your rights: access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. Write to info@losmawis.com. You can also complain to the data protection authority where you live or work.

• Where your data goes: we’re based in Colombia, so the data you send us is received and processed there and by the providers described in Sections 6 and 7.

15. Changes to this Policy

We may update this Policy. The current version will always be on this page, with its effective date. If we make substantial changes about who the controller is or about the purposes of processing, we’ll tell you before they apply, on the Site and, where possible, by email. If a change affects the purposes you authorized, we’ll ask for your authorization again.

This version is effective from September 26, 2026.