This Privacy Policy sets out the personal data handling practices of www.barpullmate.com (referred to as “we”, “us”, or “our”). We act as the Data Controller responsible for the processing of personal data collected through our website.
This policy applies to individuals accessing our website or purchasing draining baskets from Europe, the United States, Mexico.
- Information We Collect
We process personal data necessary for fulfilling customer orders, maintaining administrative records, and operating our online website. The types of data collected include:
Contact Information: Full name, billing address, shipping address, email address, and telephone number.
Transaction Data: Information regarding items ordered, purchase amounts, transaction timestamps, and order histories.
Technical & Usage Data: IP address, browser type, device information, and interaction logs obtained through standard website technologies and essential cookies.
- Lawful Basis and Purpose of Processing
Personal data is collected and processed in accordance with applicable privacy laws (including GDPR, US State Privacy Laws, and the Mexican Federal Law on Protection of Personal Data Held by Private Parties – LFPDPPP) under the following lawful bases:
Performance of a Contract: To process, package, and dispatch orders, communicate order updates, and manage customer queries.
Legal Compliance: To maintain accounting records, tax documentation, and regulatory compliance under Mexican and international commerce regulations.
Legitimate Interests: To maintain website integrity, detect potential non-authorised usage, and optimize customer support operations.
- Third-Party Data Processors & Payment Handling
We engage essential third-party service providers to execute core operational functions. These third parties act under strict processing obligations:
Payment Processing: All payment transactions are processed securely through Stripe. We do not collect, process, or store credit card details or sensitive payment credentials on our servers. Financial data provided during payment is handled directly by Stripe in compliance with international Payment Card Industry Data Security Standards (PCI-DSS).
Fulfilment & Logistics Services: Contact and address details are shared exclusively with chosen logistics carriers solely for parcel delivery and tracking purposes.
- International Data Transfers
As our operations facility is located in Mexico, data collected from users in Europe and the United States will be transferred to and processed in Mexico.
For European residents, international transfers are executed using recognized safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your personal data receives a level of protection comparable to European standards.
- Data Retention Period
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable tax, commercial, and legal obligations:
Order and Financial Records: Retained for up to 7 years to comply with statutory accounting and tax retention obligations under Mexican law and relevant fiscal authorities.
General Enquiries & Correspondence: Retained for up to 2 years following the resolution of the enquiry, after which it is securely deleted or anonymized.
Technical Logs: Retained for up to 12 months for operational auditing purposes before automatic purging.
- Your Rights
Depending on your jurisdiction (including the European Economic Area, the United Kingdom, California/US, and Mexico), you possess statutory rights regarding your personal information:
Access & Rectification: The right to request copies of your personal data and correct inaccurate information.
Erasure & Restriction: The right to request the deletion of personal data, subject to statutory record-retention requirements.
Object to Processing: The right to object to processing based on legitimate interests.
Data Portability: The right to receive personal data in a structured, commonly used format.
ARCO Rights (Mexico): Mexican residents may exercise their rights of Access, Rectification, Cancellation, and Opposition under LFPDPPP.
To exercise any of these rights, please contact us using the details provided below.
- Data Protection Measures
We employ standard technical and administrative safeguards to protect personal data against non-authorised access, alteration, loss, or disclosure. While appropriate safeguards are implemented, no electronic transmission or storage framework can be rendered entirely risk-free. - Data Controller & Contact Information
For any enquiries regarding this Privacy Policy or the handling of personal data, www.barpullmate.com operates as the Data Controller:
Contact Email: handles@barpullmate.com
Telephone Support: +52 56 1055 5831
Address: Anzures, Miguel Hidalgo, 11590 CDMX, Mexico