This document explains, with full transparency, what information we collect about you and how we take care of it.
Deviart, doing business as 2pinkb (hereinafter, the “Controller”), with an address at Lat. Sur Perif. Nte. 253-Int. Bodega 15, El Vigía, 45140 Zapopan, Jalisco, Mexico, is responsible for the processing, use, protection, and confidentiality of the personal data collected from its customers, users, suppliers, collaborators, visitors, and related third parties, in accordance with the LFPDPPP (Ley Federal de Protección de Datos Personales en Posesión de los Particulares — Federal Law on Protection of Personal Data Held by Private Parties) and other applicable regulations.
For matters related to privacy and personal data protection:
— Email: info@2pinkb.com
— Phone: +52 33 2391 8971
— Website: www.2pinkb.com
— Responsible department: Customer Service
Depending on the relationship or interaction you have with 2pinkb, we may collect, store, and process the following categories of personal data:
— Full name or legal/business name
— Date of birth, when necessary
— Signature, when required for contracts, collaborations, or other procedures
— Profile photograph, in the case of collaborations or digital interactions
— Email address
— Phone number
— Shipping and/or billing address
— City, state, and country of residence
— RFC and legal/business name
— Tax status certificate
— Tax address
— Information required to issue tax invoices
— Purchase history and products acquired
— Payment method used, without storing full card details or security codes
— Information about orders, payments, returns, exchanges, or warranties
— Shipping, delivery, and billing information
Payment information may be processed directly by authorized third-party payment service providers in accordance with their own terms and privacy practices.
— IP address, browser type, and operating system
— Device identifiers
— Pages visited and interactions performed on the Site
— Date, time, and duration of browsing sessions
— Cookies, tracking pixels, web beacons, and similar technologies
— Conversations via email, WhatsApp, social media, or contact forms
— Comments, reviews, questions, claims, or support requests
— Information provided in connection with returns, exchanges, or warranties
If a user tags, mentions, publishes, or shares content related to 2pinkb on social media, we may access or collect information that the user has made publicly available.
2pinkb may reuse photographs, videos, reviews, comments, or other user-generated content only in accordance with applicable law and after obtaining the corresponding authorization when required.
2pinkb does not intentionally collect or process sensitive personal data as defined by the LFPDPPP.
Users are requested not to provide information relating to their health, racial or ethnic origin, genetic information, religious or philosophical beliefs, political opinions, sexual preference, or other information concerning the most private aspects of their lives unless 2pinkb has specifically requested it for a legitimate and necessary purpose.
If the processing of sensitive personal data becomes necessary, 2pinkb will inform the data subject of the applicable purpose and obtain their express written consent through a handwritten signature, electronic signature, or another legally valid authentication mechanism, unless an exception established by applicable law applies.
The following purposes are necessary to establish, maintain, and fulfill the commercial or legal relationship between the data subject and 2pinkb. They may be carried out without additional consent when permitted by applicable law:
— Processing purchases and orders on www.2pinkb.com
— Managing payments and confirming transactions
— Issuing tax invoices (CFDI)
— Coordinating shipments and deliveries
— Providing customer service and following up on questions, requests, or claims
— Managing returns, exchanges, and warranties
— Verifying identity and preventing fraud, abuse, or unlawful activity
— Creating and managing user accounts
— Contacting the data subject regarding orders, payments, deliveries, or incidents
— Complying with legal, tax, administrative, and regulatory obligations in Mexico
— Managing collaborations and relationships with suppliers and service providers
— Maintaining the operation, security, and functionality of the Site
— Improving the shopping and browsing experience
The following purposes are not essential to the commercial relationship:
— Sending promotions, discounts, and advertising through email marketing
— Conducting remarketing campaigns on digital platforms
— Sending newsletters and communications about launches, collections, or brand events
— Conducting satisfaction surveys and internal market studies
— Personalizing content and the digital experience
— Displaying targeted advertising on platforms such as Meta, Instagram, TikTok, and Google
2pinkb will obtain the data subject’s consent for these purposes through acceptance checkboxes, subscription forms, cookie preference tools, or other mechanisms available on the Site.
The refusal or withdrawal of consent for secondary purposes will not affect the ability to make purchases or receive the primary services offered by 2pinkb.
The data subject may withdraw their consent or object to the use of their personal data for these purposes at any time by sending an email to info@2pinkb.com or by using the unsubscribe mechanism included in promotional communications.
The Site uses cookies, web beacons, pixels, tags, and similar technologies to:
— Enable the technical operation of the Site
— Remember user preferences
— Maintain products in the shopping cart
— Analyze browsing habits and Site performance
— Improve functionality
— Personalize content and the digital experience
— Measure advertising campaign performance
— Conduct advertising and remarketing activities
The technologies, platforms, and services used on or in connection with the Site that may use, install, or support cookies and other tracking technologies include:
— Shopify (ecommerce platform)
— PayPal (payment processing)
— Skydropx (logistics and shipping management)
— Meta Pixel / Facebook Ads
— TikTok Pixel
— Google Analytics / Google Ads
Some cookies are necessary for the Site to operate properly. Other cookies, including analytics, personalization, and advertising cookies, may be managed through the cookie preference tools available on the Site, when applicable.
Users may also block or delete cookies through their browser or device settings. Disabling certain cookies may affect the operation or availability of some features of the Site.
The use of third-party technologies may also be subject to the privacy policies and settings of the corresponding third parties.
2pinkb may disclose or transfer personal data to third parties, or allow service providers to process personal data on its behalf, when necessary for the purposes described in this Privacy Policy.
Such recipients or service providers may include:
— Shopify, for the operation of the ecommerce platform
— PayPal and other payment service providers, for payment processing
— Skydropx, courier companies, and logistics providers, for shipping and delivery management
— Advertising and analytics platforms, including Meta, Google, and TikTok
— Accounting, tax, legal, administrative, technical, or security service providers
— Competent authorities, when required by an express legal obligation, court order, or properly founded request
Service providers acting on behalf of 2pinkb must process personal data only for the services they have been engaged to provide and in accordance with the applicable confidentiality and security obligations.
Personal data may be communicated to advertising and analytics platforms for advertising, measurement, personalization, or remarketing purposes when the applicable consent has been obtained.
Some recipients or service providers may be located or may process information outside Mexican territory. In such cases, 2pinkb will take the measures required by applicable law to protect the personal data and will communicate the applicable privacy obligations and authorized purposes to the recipient.
When a transfer requires the data subject’s consent under the LFPDPPP, 2pinkb will obtain that consent through the appropriate mechanisms. Consent will not be required in the cases expressly permitted by applicable law.
2pinkb implements reasonable administrative, technical, physical, and digital measures to protect personal data against damage, loss, alteration, destruction, unauthorized use, access, disclosure, or processing.
These measures may include:
— SSL encryption during the transmission of information
— Restricted access to authorized personnel
— Passwords and authentication mechanisms
— Access controls and confidentiality obligations
— Technical monitoring and security reviews
— Periodic review of internal security practices
— Confidentiality and data protection obligations for service providers
No system is completely invulnerable. In the event of a security breach that significantly affects the property or moral rights of data subjects, 2pinkb will notify the affected individuals without undue delay and in accordance with the LFPDPPP and other applicable regulations.
Personal data will be retained only for the time necessary to fulfill the purposes described in this Privacy Policy and to comply with the applicable legal, tax, accounting, administrative, contractual, and commercial retention periods in Mexico.
When personal data is no longer necessary for the purposes for which it was collected, it will be blocked and subsequently deleted, anonymized, or otherwise securely disposed of, unless its continued retention is required or permitted by applicable law.
In accordance with the LFPDPPP, the data subject has the right to Access, Rectify, Cancel, or Object to the processing of their personal data. These rights are collectively known as ARCO rights.
The data subject may also:
— Revoke their consent, when applicable
— Request the limitation of the use or disclosure of their personal data
— Obtain information regarding the conditions under which their data is processed
— Request information about personal data transfers, when applicable
To exercise any of these rights, the data subject must send a request to:
info@2pinkb.com
The request must include:
— The full name of the data subject
— An address, email address, or other means for receiving notifications
— A document proving the identity of the data subject or, where applicable, the identity and authority of their legal representative
— A clear and precise description of the personal data involved, except when exercising the right of access
— A clear description of the ARCO right to be exercised or the specific action requested
— Any additional information or documentation that facilitates the location of the personal data
For rectification requests, the data subject must also identify the requested corrections and provide the documentation supporting those corrections.
2pinkb will communicate its decision within a maximum of 20 business days from the date on which the complete request is received.
If the request is approved, 2pinkb will implement the corresponding action within 15 business days following the date on which the response is communicated.
These timeframes may be extended once for an equal period when justified by the circumstances of the case.
The data subject may revoke their consent to the processing of their personal data at any time by sending a request to:
info@2pinkb.com
The request must contain sufficient information to identify the data subject and clearly indicate the processing activity or purpose for which consent is being revoked.
The revocation of consent will not have retroactive effects and may limit 2pinkb’s ability to provide services that necessarily depend on the processing of the relevant personal data.
A request to revoke consent may not result in the immediate termination of all processing when 2pinkb has a legal obligation or another legally permitted reason to retain or process the information.
To unsubscribe from promotional communications, the data subject may also use the unsubscribe link included in each commercial email sent by 2pinkb, without the need to submit a formal request.
2pinkb does not intentionally collect personal data from individuals under 18 years of age without the prior authorization or involvement of their parents or legal guardians.
The products and services offered through the Site are intended exclusively for adults.
If a parent or legal guardian believes that a minor has provided personal data to 2pinkb without proper authorization, they may request its review and, where applicable, its deletion by contacting:
info@2pinkb.com
The Site may contain links to websites, applications, platforms, or services operated by third parties.
2pinkb does not control and is not responsible for the privacy practices, security measures, content, terms, or policies of those third parties.
Users are encouraged to review the privacy notices and terms of any external website, application, or service before providing personal information.
2pinkb may modify this Privacy Policy at any time to reflect legal, regulatory, technical, commercial, operational, or internal changes.
Any modifications will be published in the corresponding section of www.2pinkb.com. The date of the most recent update will remain visible at the beginning of this document.
If substantial changes significantly affect the purposes of the processing or the rights of data subjects, 2pinkb will communicate those changes through the available contact channels and will obtain new consent when required by applicable law.
When this Privacy Policy has been made available to the data subject and the data subject does not express opposition, consent may be understood to have been granted implicitly for the primary purposes described in Section 4.1, provided that implied consent is legally permitted.
The use of the Site, the submission of personal data, or the establishment of a commercial relationship does not replace express consent in cases where express or written consent is required by applicable law.
Certain processing activities may also be carried out without consent when an exception expressly established by the LFPDPPP or other applicable law applies, including when the processing is necessary to fulfill obligations arising from a legal or contractual relationship with the data subject.
2pinkb will obtain the data subject’s express consent whenever it is required by applicable law.
This includes, where applicable:
— The processing of financial or patrimonial data, unless a legal exception applies
— The processing of personal data for marketing, digital advertising, and the secondary purposes described in Section 4.2
— The use of non-essential analytics, personalization, or advertising cookies, where consent is required
— Personal data transfers that legally require authorization
Express consent may be obtained through acceptance checkboxes, subscription forms, electronic confirmations, cookie preference tools, unequivocal actions, or other legally valid mechanisms available on the Site.
The processing of sensitive personal data will require express written consent through a handwritten signature, electronic signature, or another legally valid authentication mechanism, unless an exception established by law applies.
The data subject may revoke their consent at any time in accordance with the procedure described in Section 10.
Revocation will not have retroactive effects and will not affect processing lawfully carried out before the revocation was received.
Revocation will also not affect processing that 2pinkb is required or permitted to continue under an applicable legal obligation or exception.
