Privacy Notice

# Privacy Notice

**Last updated:** May 19, 2026

In compliance with the provisions of the **Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)**, its Regulations, and the Privacy Notice Guidelines, we provide you with the following Privacy Notice.

---

## 1. Identity and address of the data controller

The data controller for your personal data is Fernando Esteban García Navarro (hereinafter "**Delya**"), with address at Av. Nichupté, Edificio Pabellón Caribe  local 214. 77505.

- **Contact Email:** burtonpp@hotmail.com
- **Phone / WhatsApp:** 9981659987
- **Website:** [https://delya.mx

---

## 2. Personal data we collect

We collect the following personal data when you make a purchase, subscribe to our newsletter, or interact with our site:

- **Identification data:** full name, date of birth (optional).
- **Contact data:** email, phone number, delivery address.
- **Billing data:** RFC (Federal Taxpayer Registry), company name, tax address (when you request an invoice).
- **Payment data:** credit/debit card information processed exclusively by our authorized processors (Shopify Payments, Mercado Pago). **We do not store full card information on our servers.**
- **Navigation data:** IP address, browser type, pages visited, products viewed (using cookies — see section 8).

**We do not collect sensitive personal data.**

---

## 3. Purposes of processing

### Primary purposes (necessary for the commercial relationship):

- Process and deliver your order.
- Issue tax receipts (CFDI) when you request them.
- Manage returns, exchanges, or claims.
- Contact you regarding the status of your order.
- Comply with legal and tax obligations.

### Secondary purposes (require your consent):

- Send you promotions, discounts, and news via email or WhatsApp.
- Perform statistical analysis to improve our products and services.
- Personalize content and recommendations.

If you **do not wish** your data to be processed for secondary purposes, you can express this by sending an email to burtonpp@hotmail.com indicating your refusal. This refusal will not be a reason to deny you our services.

---

## 4. Data transfers

Your personal data may be transferred to the following third parties, exclusively to fulfill the described purposes:

- **Payment processors:** Shopify Payments, Mercado Pago, PayPal, Stripe (to process transactions).
- **E-commerce platform:** Shopify Inc. (Canada/USA) to host our online store.
- **Courier companies:** [Estafeta / DHL / FedEx / local courier services] to deliver your order.
- **Marketing services:** [Klaviyo / Mailchimp / Meta / Google] for sending communications and analysis.
- **Competent authorities:** when there is a legal requirement.

Some transfers may be to the United States or Canada. We ensure that such transfers are carried out under security and confidentiality measures equivalent to those required by Mexican law.

---

## 5. ARCO Rights (Access, Rectification, Cancellation, Opposition)

You have the right to:

- **Access** your personal data that we hold.
- **Rectify** inaccurate or incomplete data.
- **Cancel** your data when you consider it unnecessary.
- **Oppose** the processing of your data for specific purposes.
- **Revoke** your consent at any time.

### How to exercise your rights:

Send an email to burtonpp@hotmail.com with:

1. Your full name and a means to contact you.
2. Official identification (INE, passport) to prove your identity.
3. Clear and precise description of the right you wish to exercise.
4. Any document that facilitates the exercise of the right.

We will respond within a **maximum of 20 business days**. If applicable, we will execute your request within the following **15 business days**.

---

## 6. Limitation of use or disclosure

If you wish to limit the use or disclosure of your data for marketing purposes, you can:

- Click the **"Unsubscribe"** link at the bottom of any promotional email.
- Reply **STOP** to any promotional WhatsApp message.
- Request inclusion in our **Exclusion List** by sending an email to [privacidad@delya.com.mx].

---

## 7. Retention period

We will retain your personal data while:

- You maintain an active commercial relationship with us, **and/or**
- It is necessary to comply with tax, accounting, or legal obligations (minimum **5 years** according to the Federal Tax Code).

Subsequently, your data will be securely deleted or disassociated.

---

## 8. Cookies and tracking technologies

Our site uses **cookies and similar technologies** to:

- Maintain your active session.
- Remember your preferences.
- Analyze site traffic (Google Analytics, Meta Pixel, TikTok Pixel).
- Display relevant advertising.

You can disable cookies from your browser settings. Please note that some site functions may not operate correctly without them.

---

## 9. Changes to the Privacy Notice

We reserve the right to modify this Privacy Notice at any time. Any changes will be published on this page with the date of the last update. We recommend reviewing it periodically.

---

## 10. Regulatory authority

If you believe that your right to data protection has been violated, you can contact the **National Institute for Transparency, Access to Information and Personal Data Protection (INAI)**:

- Website: https://home.inai.org.mx
- Phone: 800 835 4324

---

**Acceptance of the Privacy Notice**

By using our website, making a purchase, or providing your personal data, you accept the terms of this Privacy Notice.