PRIVACY POLICY AND NOTICE
Brand Access, LLC (“BRAND”) takes privacy very seriously.
This privacy policy explains how we may use the personal data we collect when you visit our website https://hexclad.mx/ (“Website”), inquire about our products, purchase a product through our website, or subscribe to our marketing communications. It also explains what your rights are under the Federal Law on Protection of Personal Data Held by Private Parties."
Identity and Address of the Controller Processing Personal Data
BRAND is the seller of all products and is solely responsible for all aspects of your purchase and is responsible for the use and protection of your personal data:
BAGLB MEX, S. DE R.L. DE C.V
Calle Emerson, no. 243, int. 6
Colonia Polanco v Sección
Ciudad de México
Personal Data Collected
For the purposes outlined, the following personal data will be collected:
Contact information and personal identifiers: name, email address, telephone number, address, shipping address, billing address, date of birth, username.
Purchase information: data on the products you have asked us to provide you, such as date and time of purchase, customer number, order number, invoice number.
Payment information: information relating to your bank account, credit/debit card details, payment and receipt details, tax identification number, refund or credit details and details of payment transactions with you.
Records of your interactions with us: such as any feedback, enquiries or complaints you make, questions you have, or content of any other interactions with us.
Internet information: including your use of and movement through our website, the date and time of your visit or use of our website, passwords, personal identification numbers, IP addresses, geolocation, user names, device information such as type of browser, operating system, platform, and search engine used and other IT system identifying information.
Sensitive Personal Data
BRAND does not process sensitive personal data.
Cookies
We use so-called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our Website. If you have given your consent to our use of cookies, we do so to improve the use of our Website, analyze our Website or to display advertising on our Website. You can revoke your consent to our use of cookies any time. Please find a detailed list of all cookies we use in our Cookie Policy (https://hexclad.mx/pages/cookie-policy)
Legal Basis
The legal basis for the processing and transfer of personal data is found in Articles 9, 10, 11, 13, 14, 15, 18, and 19 of the General Law on the Protection of Personal Data Held by Obligated Parties.
Purposes of Data Processing
The personal data we collect from you will be used for the following purposes necessary for the provision of our services:
To enable us to offer you our website
To enhance the security of our website, provide IT support, and troubleshoot issues
To manage your purchases and provide you with products
To create an account with us
To invoice you and receive payments from you
To deal with inquiries, and other communications from you
To perform credit checks
To comply with any legal and regulatory requirements
To store records related to you and also records related to our business
Some of your personal data may be necessary due to legal, contractual, or other obligations. Failure to provide this data may affect our ability to fulfil our contract with you or comply with relevant legal obligations.
For other personal data, while you may not be obligated to provide it to us, if you do not provide it, we may not be able to perform our services for you adequately.
Additionally, we will use your personal information for the following purposes, which are not necessary but allow us to provide you with better service:
To market new products that may be of potential interest to you and offer promotions
To provide you with our newsletter
Mechanism to Refuse Data Processing for Non-Essential Purposes
If you do not want your personal data to be processed for purposes described as non-essential, you may send an email at any time to the Privacy Officer at privacy@passportglobal.com (“Privacy Officer”), requesting that your personal data not be used for the non-essential purposes described in this Privacy Notice.
Refusal to allow the use of your personal data for these non-essential purposes will not be a reason to deny you the services or products you request or contract with us.
Personal Data Transfers
To operate our website and provide you with the requested products, we may need to share your personal data with third parties. This includes sharing your personal data with the company whose products you are purchasing (our "Clients") and companies contracted by us to manage our relationship with you and provide the services described above.
We may share your personal data, without requiring your consent under the law, with the following recipients:
Clients: Providers whose products you are purchasing through our website.
Subcontractors: Such as our marketing and service technology providers, direct marketing intermediaries, cloud service providers, e-commerce providers, payment providers, shipping and courier companies, payment service providers, and other subcontractors.
Consultants and accountants: Such as legal or tax advisors and accountants.
Government and law enforcement agencies: When required by law or to assist with their investigations or initiatives.
We do not disclose personal data to anyone else except as stated above, unless we have your consent or are legally obligated to do so. These recipients will only process your personal data to perform tasks and obligations on our behalf, in compliance with this privacy policy and applicable data protection laws.
Mechanism and procedure to revoke your consent
You may revoke the consent you have given to BRAND. However, please note that your request may not be fulfilled or processing completed in all cases, as BRAND may have legal obligations requiring it to continue processing your personal data.
To revoke your consent, you must submit your request by email to the Privacy Officer.
The Privacy Officer will process your request to revoke consent provided that it contains the following: (i) the data subject's name and email address to communicate the respective response; (ii) documents proving your identity, or, where applicable, that of your legal representative; (iii) a clear and precise description of the personal data for which you revoke your consent. The timeframes for responding to requests to revoke consent will be the same as those established for exercising ARCO rights.
Options and Means to Limit the Use or Disclosure of Your Data
We inform you that BRAND implements necessary technical, administrative, and physical security measures to protect your personal data, with the aim of preventing unauthorized use, damage, loss, alteration, destruction, access, or processing.
To limit the use and disclosure of your personal data, we offer the following means:
To stop receiving messages via email or SMS, where applicable, follow the instructions in those messages. You can also register with the Public Registry to Avoid Advertising | PROFECO to avoid receiving advertisements or for further details. Contact them directly.
By sending your request to the email address: privacy@passportglobal.com.
ARCO Rights
The ARCO rights are as follows:
Access: You can know what personal data we have about you and how we use it.
Rectification: You can request the correction of your data if it is outdated, inaccurate, or incomplete.
Cancellation: You can request the deletion of your data from our records if you believe it is not being used properly.
Opposition: You have the right to oppose the use of your data for specific purposes.
Data subjects whose personal data we hold may exercise their rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights) granted by the Federal Law on the Protection of Personal Data Held by Private Parties by sending their request via email to the Privacy Officer. All requests must meet the following requirements:
Include the name, address, and email address to communicate the response to your request.
Attach an official identification document verifying the identity of the data subject.
Include a clear and precise description of the personal data with respect to which the rights granted by the Law will be exercised.
Attach any element or document that facilitates the location of the personal data in question.
The response will be delivered to the data subject via email within a period not exceeding twenty business days, counted from the day following the receipt of the request. If the request is deemed valid, it will be implemented within fifteen business days following the date the data subject receives the response. If the data subject does not receive a response within the specified period, the request should be understood as denied.
If the data subject has exercised their right of access and the response is positive, the requested personal data will be delivered via email in a PDF file containing the relevant personal data.
The exercise of ARCO Rights is free of charge. Costs may only be charged to recover expenses for reproduction, certification, or shipping, in accordance with applicable regulations.
Modifications to the Privacy Notice
This privacy notice may be modified due to new legal requirements, our own needs related to the products or services we offer, changes in our privacy practices, changes in our business model, or other reasons.
These modifications will be made available to the public through the following means:
On our website https://hexclad.mx/pages/privacy-policy.
Via email to the email address, you have provided us.
Acceptance of the Privacy Notice
By using our services and providing your personal data, you confirm that you have read, understood, and agreed to the terms set forth in this Privacy Notice and consent to the processing of your personal data as outlined herein.