1. Introduction
Pourandbead operates www.pourandbead.com and respects the privacy of its customers and website visitors. This Privacy Policy explains how personal information is collected, used, retained and disclosed in connection with our website and services.
We process personal information in accordance with Mexico’s Federal Law on Protection of Personal Data Held by Private Parties and, where applicable, the EU General Data Protection Regulation (GDPR) and relevant European data protection legislation.
2. Data Controller
The data controller for personal information collected through our website is the registered company identified in the Contact Information section of this policy, operating under the brand Pourandbead.
We determine the purposes and means of processing personal information in accordance with applicable law.
3. Personal Information We Collect
Depending on how you use our website, we may collect the following information:
- Identity and contact details: name, email address, telephone number and billing or delivery address.
- Order information: items ordered, order references, transaction status and related correspondence.
- Payment-related information: payment status, transaction references and relevant payment details made available to us by our payment service provider.
- Technical and browsing information: IP address, browser type, device information, access times and website interaction records, where collected.
- Customer communications: information you provide when contacting us with questions or requests.
- Cookie preferences: records of your consent choices and related website preferences.
We collect information that is relevant to the purposes described in this policy.
4. How We Use Personal Information
We may process personal information for the following purposes:
- Processing and managing customer orders.
- Arranging payment processing and verifying transaction status.
- Communicating with customers about orders and enquiries.
- Maintaining website functionality and remembering preferences.
- Reviewing website usage where the required consent has been obtained.
- Identifying unusual transaction activity and addressing suspected misuse.
- Maintaining business, accounting and transaction records.
- Meeting applicable legal obligations and establishing, exercising or defending legal claims.
Depending on the purpose, our lawful basis for processing may include contractual necessity, compliance with a legal obligation, legitimate interests or consent, as permitted by applicable law.
Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before withdrawal.
5. Payment Processing by Stripe
Payments made through our website are processed by Stripe, an independent payment service provider. Stripe is not a business partner of Pourandbead.
During checkout, relevant information may be provided to Stripe, including customer details, transaction amounts, payment method information and order references, as necessary to process the payment and provide related services.
Payment card information is handled through the applicable payment processing arrangements. We receive relevant payment confirmations and transaction information needed to manage orders and maintain business records.
Depending on the particular processing activity, Stripe may act as a data processor on our behalf or as an independent data controller. Stripe processes personal information under its applicable privacy documentation and contractual arrangements.
Please consult Stripe’s Privacy Policy for further information about its processing of personal data.
6. Cookies and Similar Technologies
Our website uses cookies and similar technologies to support essential functions, remember preferences and understand website usage.
A cookie banner allows visitors to choose whether to accept non-essential cookies. Non-essential cookies are used only after you click “Accept” on our cookie banner where consent is required by applicable law.
Strictly necessary cookies may operate without consent where legally permitted. You may change your preferences through the available cookie settings or manage cookies through your browser.
Cookies may expire when a browsing session ends or remain for a defined period. Their retention depends on their purpose and configuration. Further details are provided in our Cookie Policy.
Stripe may also use cookies or similar technologies for payment-related functions. Where consent is legally required, the relevant non-essential technologies must not be activated before the required consent is obtained.
7. Disclosure of Personal Information
We may disclose relevant personal information to the following categories of recipients where necessary and lawful:
- Stripe and other payment service providers involved in an authorised transaction.
- Service providers supporting website hosting, order administration, communications and website operations.
- Professional advisers and auditors where required for legitimate business purposes.
- Courts, regulators, public authorities or other recipients where disclosure is required by law or necessary to establish, exercise or defend legal claims.
We do not disclose personal information for purposes incompatible with those described in this policy without an appropriate lawful basis.
8. International Data Transfers
As our business is based in Mexico and we serve customers in Europe, personal information may be processed in countries other than the country in which it was collected.
Where the GDPR applies, transfers of personal data outside the European Economic Area will be carried out in accordance with applicable transfer requirements, including an adequacy decision or appropriate safeguards where required.
For processing subject to Mexican law, applicable requirements governing transfers and disclosures of personal information will also be observed.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, accounting and record-keeping requirements.
Our intended retention periods are as follows:
- Order and transaction records: generally up to 10 years where required or justified by applicable accounting, tax, contractual or legal limitation periods.
- Customer service correspondence: generally up to 24 months after an enquiry has been resolved, unless a longer period is necessary for an ongoing matter or legal claim.
- Customer account information: while the account remains active and, where appropriate, for up to 24 months following inactivity, subject to outstanding orders and legal obligations.
- Abandoned checkout information: generally up to 30 days where retained for checkout administration, unless another lawful purpose requires a longer period.
- Consent and preference records: generally up to 5 years where reasonably necessary to demonstrate consent choices or meet applicable legal requirements.
- Marketing information: until consent is withdrawn or a valid objection is received, with periodic review and deletion when the information is no longer required.
- Cookie data: according to the lifespan of each cookie and the applicable requirements described in our Cookie Policy.
These periods are retention limits for the stated purposes, not a requirement to retain every record for the maximum period. Where information is no longer required and no lawful retention ground remains, it will be deleted or anonymised as appropriate. Where deletion must be postponed for legal reasons, access and further use will be restricted as required by law.
Stripe determines the retention periods for information it processes independently, in accordance with its applicable obligations and policies.
10. Data Protection Measures
We apply appropriate organisational and technical measures intended to protect personal information against unauthorised access, loss, alteration or disclosure. Access to personal information is limited to those who need it for legitimate business purposes, subject to applicable confidentiality obligations.
Where a personal data breach triggers a notification obligation under applicable law, the relevant notifications will be made in accordance with the applicable legal requirements.
11. Your Data Protection Rights
Depending on your location and the applicable law, you may have the right to:
- Request access to personal information held about you.
- Request correction of inaccurate or incomplete information.
- Request deletion or cancellation of personal information where the legal conditions are met.
- Object to certain processing or request restriction of processing.
- Request data portability where the applicable conditions are met.
- Withdraw consent where processing is based on consent.
- Object to direct marketing at any time.
- Lodge a complaint with the competent data protection authority.
Under Mexican law, individuals may exercise the applicable rights of access, rectification, cancellation and opposition, commonly known as ARCO rights.
To exercise your rights, contact us at pricing@pourandbead.com. We may request information reasonably necessary to verify your identity and will respond within the time limits prescribed by applicable law. Certain requests may be limited where a legal obligation or other lawful ground requires continued processing.
12. Children’s Privacy
Our website is intended for general customers. We do not knowingly seek to collect personal information from children in circumstances where parental consent or other legal requirements have not been met. Where we become aware that personal information has been collected unlawfully, we will take appropriate steps in accordance with applicable law.
13. Changes to This Privacy Policy
We may revise this Privacy Policy when our processing activities or applicable legal requirements change. The updated version will be published on this page with its revision date. Where required by law, we will provide additional notice or obtain consent before introducing processing that requires it.
14. Contact Information
For questions about this Privacy Policy or requests concerning personal information, please contact us using the details below.
Brand: Pourandbead
Registered Company and Data Controller: SERVICIOS COMERCIALES TECFLO, S. DE R.L. DE C.V.
Registration Number: SCT200625PFA
Email: pricing@pourandbead.com
Telephone: +52 2292647803
Registered Address: Calle Los Pirús 122-A, Col. Jalatlaco, Oaxaca de Juárez, Oaxaca, C.P. 68080, Mexico
Website: www.pourandbead.com