PRIVACY POLICY

Deviart, commercially identified as 2pinkb
(hereinafter, the Controller), with address at Lat. Sur Perif. Nte. 253-Int.
Bodega 15, El Vigía, 45140 Zapopan, Jal., is responsible for the processing,
use, protection, and confidentiality of the personal data collected from its
customers, users, suppliers, collaborators, visitors, and related third
parties, in accordance with the LFPDPPP (Ley Federal de Protección de Datos Personales en Posesión de los Particulares — Federal Law on Protection of Personal Data Held by Private Parties)

For matters related to privacy and personal
data protection:

—   Email: info@2pinkb.mx

—   Phone: +52 33 2338 5500

—   Website: www.2pinkb.com

—   Responsible department: Customer Service

2pinkb may collect, store, and process, by
way of example but not limitation, the following categories of personal data:

2.1 Identification

—   Full name or business name

—   Date of birth

—   Signature

—   Profile photograph (in case of collaborations or
digital interactions)

2.2 Contact

—   Email address

—   Phone number

—   Shipping and/or billing address

—   City, state, and country of residence

2.3 Tax Information

—   RFC and business name

—   Tax status certificate

—   Tax address

2.4 Transactions and Purchases

—   Purchase history and products acquired

—   Payment methods used (without storing card data)

—   Information about orders, returns, or warranties

2.5 Digital and Browsing Data

—   IP address, browser type, and operating system

—   Device identifiers

—   Cookies, tracking pixels, and browsing information on
the Site

2.6 Customer Service

—   Conversations via email, WhatsApp, social media, or
contact forms

—   Comments, reviews, or support requests

2.7 User-Generated Content

If the user tags, mentions, or shares
content related to 2pinkb on social media, we may collect and reuse such
content in accordance with applicable law and with the corresponding
authorization.

2pinkb does not intentionally collect or
process sensitive personal data as defined by the LFPDPPP. If the data subject
provides information of this nature, it will be understood that they grant
express consent for its processing exclusively in relation to the purpose that
gave rise to its provision.

2pinkb works with premium materials and
carefully supervised production processes. If you identify any inconsistency in
the product received, the customer must follow the process described in Section
6 of this document.

4.1 Primary Purposes

Necessary for the existence and fulfillment
of the commercial relationship. These do not require additional consent:

—   Processing purchases and orders on www.2pinkb.com

—   Managing payments and issuing tax invoices (CFDI)

—   Coordinating shipments and deliveries

—   Providing customer service and follow-up on requests or
claims

—   Managing returns and warranties

—   Verifying identity and preventing fraud

—   Managing user accounts

—   Contacting the data subject regarding their order or
incidents

—   Complying with legal, tax, and regulatory obligations
in Mexico

—   Managing collaborations and supplier relationships

—   Improving the shopping and browsing experience

4.2 Secondary Purposes

Not essential to the commercial
relationship. If you do not wish your data to be used for these purposes, you
may object by sending an email to info@2pinkb.mx within 5 business days of
receiving this notice:

—   Sending promotions and advertising via email marketing

—   Remarketing campaigns on digital platforms

—   Newsletters and communications about launches or brand
events

—   Satisfaction surveys and internal market studies

—   Personalization of content and digital experience

—   Targeted advertising on platforms such as Meta,
Instagram, TikTok, and Google

The Site uses cookies, web beacons, pixels,
and similar technologies to: remember user preferences, analyze browsing
habits, improve functionality, personalize content, and implement advertising
and remarketing campaigns.

The tracking technologies used include:

—   Shopify (ecommerce platform)

—   PayPal (payment processing)

—   Skydropx (logistics and shipping management)

—   Meta Pixel / Facebook Ads

—   TikTok Pixel

—   Google Analytics / Google Ads

Users can manage their cookie preferences
through their browser settings. Disabling certain cookies may affect some
features of the Site.

2pinkb may transfer personal data to third
parties, without requiring additional consent in cases permitted by the
LFPDPPP, exclusively to:

—   Shopify (ecommerce platform)

—   PayPal (payment processing)

—   Skydropx (logistics and shipping management)

—   Advertising platforms (Meta, Google, TikTok)

—   Competent authorities when there is an express legal
obligation

Transfers will be carried out within
Mexican national territory. If any transfer involves sending data outside
Mexico, 2pinkb will ensure that the recipients maintain levels of protection
equivalent to those established by the LFPDPPP. In all cases, adequate measures
of confidentiality and security will be required.

2pinkb implements administrative,
technical, physical, and digital measures to protect personal data against
damage, loss, alteration, destruction, or unauthorized access. This includes
SSL encryption, restricted access to authorized personnel, and periodic review
of security practices.

No system is absolutely invulnerable. In
the event of a security breach that significantly affects the rights of data
subjects, 2pinkb will notify them in accordance with the LFPDPPP.

Personal data will be retained only for the
time necessary to fulfill the purposes described herein and in accordance with
applicable legal, tax, and commercial timeframes in Mexico. Once the
corresponding period has concluded, the data will be deleted, blocked, or
anonymized in accordance with applicable regulations.

In accordance with the LFPDPPP, the data
subject has the right to Access, Rectify, Cancel, or Object (ARCO rights) to
the processing of their personal data. They may also revoke their consent,
limit the use or disclosure of their data, and request information about
transfers made.

To exercise any of these rights, send a
request to: info@2pinkb.mx

The request must include:

—   Full name of the data subject

—   Contact information for communicating the response

—   Document proving identity or legal representation

—   Clear description of the right they wish to exercise

—   Any additional information that facilitates the location of the data

2pinkb will respond within a maximum of 20
business days from receipt of the complete request, in accordance with the
LFPDPPP. Applicable changes will be made within the following 15 business days.

The data subject may revoke consent for the
processing of their data at any time by sending a request to: info@2pinkb.mx.
Revocation may limit 2pinkb's ability to provide certain services linked to the
processing of such data.

To unsubscribe from promotional
communications, the data subject may also use the cancellation link included in
each commercial email sent by 2pinkb, without the need for a formal request.

2pinkb does not intentionally collect
personal data from individuals under 18 years of age without prior consent from
parents or legal guardians. The products and services on the Site are directed
exclusively to adults. If a guardian believes that a minor has provided data
without authorization, they may request its immediate deletion by contacting:
info@2pinkb.mx.

The Site may contain links to external
sites. 2pinkb is not responsible for the privacy practices, content, or
policies of such third parties. We recommend reviewing the privacy notices of
any external site you access from our platforms.

2pinkb may modify this Notice at any time
to reflect legal, regulatory, commercial, or internal changes. Modifications
will be available in the corresponding section of www.2pinkb.com. The date of
last update will always be visible in this document. In the event of
substantial changes that significantly affect the rights of data subjects,
2pinkb will endeavor to notify them through available contact channels.

14.1 Implied Consent

By providing personal data, using the Site,
making purchases, or maintaining any commercial relationship with 2pinkb, the
data subject acknowledges having read and understood this Notice and implicitly
consents to the processing of their data for the primary purposes described in
Section 4.1.

14.2 Express Consent

For the processing of data for marketing,
digital advertising, and secondary purposes (Section 4.2), 2pinkb will obtain
the data subject's express consent through acceptance checkboxes, subscription
forms, or other mechanisms available on the Site.

14.3 Revocation

The data subject may revoke their consent
at any time in accordance with the procedure described in Section 10, without
retroactive effect on processing already lawfully carried out.