Effective Date: September 25, 2026

TEA SHOP S. de R.L. de C.V. (“we”, “us”, “our”) operates the e-commerce website www.teashopméxico.com (the “Site”), which offers a curated selection of teapots, teacups, coffee pots, mugs, and related home brewing accessories for customers across Mexico and authorized international shipping regions. This Privacy Policy is designed to clearly outline how we collect, use, store, share, and protect your personal information when you visit our Site, create an account, place an order, subscribe to our newsletters, participate in promotional activities, or interact with our customer support services. We are committed to upholding the highest standards of data protection, respecting your privacy rights under applicable Mexican federal data protection regulations, and ensuring that all personal information you provide to us is processed in a lawful, fair, and transparent manner. By accessing and using our Site, you acknowledge that you have read, understood, and agreed to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, we kindly ask that you discontinue your use of our platform immediately.

1. Information We Collect

We only collect personal information that is directly relevant to delivering a seamless, secure, and personalized shopping experience for you. The categories of information we may gather include information you voluntarily submit to us, and limited non-personal data collected automatically when you interact with our Site.

Information you voluntarily provide covers all data you share while using our core services. When you create a user account on www.teashopméxico.com, we collect your full name, valid email address, contact phone number, and a securely hashed password that you create to protect your account access. During the checkout process for any order, we require you to provide complete shipping details including your full delivery address, postal code, city, state, and any specific delivery instructions you wish to share with our logistics partners. For payment processing, we collect your full billing address, payment method type, and the necessary transaction identifiers required to complete your purchase; we explicitly note that we do not store full credit card or debit card numbers on our own servers, as all sensitive payment data is processed directly through our PCI DSS-compliant third-party payment gateways. When you subscribe to our promotional newsletter, we collect your email address and your optional first name to personalize our marketing communications. If you reach out to our customer support team via email, contact form, or phone call, we may collect additional details such as your order number, product feedback, return request information, and any other personal details you choose to share to help us resolve your inquiry efficiently. When you participate in our customer review program, loyalty rewards scheme, social media giveaway, or in-site survey, we may collect your public display name, feedback content, and contact information required to deliver any associated rewards to you.

Automatically collected non-personal and aggregated data is gathered through standard site operation tools and secure analytics systems. This includes your device’s unique IP address, browser type and version, operating system details, language preference, geographic region derived from your IP address at a city level, the exact time and duration of your visit to our Site, the specific web pages you view, the links you click on, search terms you enter on our platform, referral source URLs that directed you to our Site, and other anonymous usage metrics that help us understand how our customers interact with our products and services. We also use first-party and authorized third-party cookies to collect this data, which helps us maintain the stability of your logged-in session, remember your saved shopping cart contents, display product recommendations that align with your browsing habits, and analyze overall site performance to identify areas for improvement. None of this automatically collected data can be used to directly identify you as an individual without being combined with other voluntarily submitted personal information we hold.

2. How We Use Your Personal Information

All personal information we collect is used exclusively for legitimate business purposes that directly relate to operating our e-commerce platform, fulfilling your orders, improving our services, and complying with our legal obligations. We will never process your personal data in a way that is incompatible with the purposes outlined in this section without first obtaining your explicit separate consent.

First and foremost, we use your information to complete and manage your purchase transactions. This includes processing your payment securely, verifying your order details to prevent fraudulent transactions, arranging full order fulfillment with our warehouse and logistics teams, coordinating delivery to the exact address you provided, sending you real-time order confirmation, shipping notification, and delivery status updates via email or SMS, and processing any post-delivery support requests such as product inquiries, return applications, or exchange arrangements in full alignment with our official Refund and Returns Policy.

Second, we use your information to maintain and optimize your registered user account. This includes verifying your identity during account login, updating your account preferences when you make changes to your saved shipping addresses, payment methods, or communication settings, notifying you of critical site security updates that may impact your account, and protecting your account from unauthorized access by monitoring for unusual login activity from unrecognized devices or geographic locations.

Third, we use aggregated and individual usage data to enhance your overall shopping experience on our Site. This includes displaying product listings that match your past browsing history and purchase preferences, suggesting complementary teaware or coffeeware products that align with your interests, remembering your preferred language and regional currency settings for future visits, troubleshooting technical errors you may encounter while navigating the Site, and conducting internal data analysis to improve our site loading speed, optimize product page layouts, and expand our product catalog to include items that our customers are most interested in purchasing.

Fourth, with your explicit opt-in consent, we may use your email address to send you personalized newsletters, exclusive promotional offers, new product launch announcements, limited-time discount information, and updates about our upcoming seasonal collections. You retain the full right to unsubscribe from all marketing communications at any time by clicking the “unsubscribe” link located at the bottom of every marketing email we send, or by submitting an unsubscribe request directly to our customer support team at welds@teashopméxico.com. After you unsubscribe, we will immediately remove your email address from all marketing distribution lists, and you will no longer receive any promotional messages from us, though we may still send you non-marketing transactional communications related to your existing active orders, account security alerts, or important policy updates that are legally required to be shared with you.

Fifth, we use your information to enforce our Terms of Service, prevent fraudulent activities, protect the security of our platform, our customers, and our business operations. This includes verifying the identity of users making high-value orders to reduce the risk of payment fraud, investigating unauthorized access attempts to our Site or user accounts, blocking malicious IP addresses that attempt to launch cyberattacks on our servers, and sharing necessary relevant information with law enforcement authorities only when we are legally compelled to do so by a valid court order or official government request.

Finally, we use your information to comply with all applicable legal, regulatory, and tax obligations that apply to our business operations in Mexico. This includes maintaining accurate transaction records for tax reporting purposes, retaining order and customer data for the legally required retention period specified by Mexican federal authorities, and responding to any formal legal inquiries or administrative audits from relevant government agencies in a timely and compliant manner.

3. Information Sharing and Disclosure

We do not sell, rent, lease, or trade your personal identifiable information to any third parties for their independent marketing purposes under any circumstances. We only share your personal information with carefully selected third-party service providers who are contractually obligated to process your data in strict compliance with applicable data protection laws, and who are prohibited from using your personal information for any purpose other than providing the specific services they have been contracted to deliver to us.

The limited categories of trusted third parties we may share your necessary information with include our authorized payment processing partners, who receive only the transaction-related data required to securely process your payment, verify the validity of your payment method, and complete the purchase transaction on your behalf. All our payment gateways are fully PCI DSS Level 1 compliant, and they maintain strict data security protocols to ensure your sensitive payment information is never exposed to unauthorized parties. We also share your full shipping name, delivery address, and contact phone number with our contracted logistics and courier partners, for the sole purpose of arranging the delivery of your ordered products to your specified location, updating you on delivery progress, and resolving any delivery-related issues that may arise during the shipping process. Our logistics providers are strictly prohibited from using your personal delivery information for any other purpose, including adding you to their independent marketing lists.

We may also share limited non-personal aggregated usage data with our authorized web analytics service providers, who help us analyze site traffic patterns, identify technical performance bottlenecks, and optimize the user experience on our Site. This aggregated data does not contain any information that can be used to directly identify an individual customer. In the event that TEA SHOP S. de R.L. de C.V. undergoes a corporate merger, acquisition, full or partial asset sale, or other business restructuring transaction, we reserve the right to transfer all or part of your stored personal information to the succeeding business entity, who will continue to process your personal information in accordance with the terms of this Privacy Policy, and who will assume all the corresponding rights and obligations outlined in this document.

We will only disclose your personal information to law enforcement authorities, government regulatory bodies, or judicial institutions when we receive a legally valid, properly authorized court order, official administrative subpoena, or other mandatory legal request that compels us to release the specified information. In situations where it is legally permissible to do so, we will make reasonable efforts to notify you of this disclosure before releasing your personal data, so that you have the opportunity to challenge the legal request if you believe it is unlawful or overly broad. We may also disclose your personal information when we determine in good faith that such disclosure is absolutely necessary to protect our legal rights, safeguard the physical safety of our staff, other customers, or members of the public, prevent imminent financial fraud or cybercrime, and defend our business against potential legal liabilities.

4. Data Storage, Security and Retention

All personal information that you submit to our Site is stored on secure, encrypted servers hosted in geographically authorized data centers located within Mexican national territory, in full compliance with Mexican Federal Law for the Protection of Personal Data Held by Private Parties. We have implemented a comprehensive set of industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, accidental loss, unlawful alteration, unauthorized disclosure, or malicious destruction. These security measures include end-to-end TLS 1.3 encryption for all data transmitted between your browser and our servers, role-based access control systems that restrict access to personal customer data only to authorized employees who require that information to perform their official job duties, regular quarterly security vulnerability scans and annual third-party penetration testing of our entire site infrastructure, automated off-site encrypted data backups that are performed on a daily basis, and mandatory annual data protection training for all our full-time staff who handle customer personal information.

While we continuously update and improve our security protocols to protect your data, it is important to note that no method of data transmission over the public internet, or method of electronic data storage, can be guaranteed to be 100% completely secure and invulnerable. As a result, we cannot provide absolute unqualified guarantee of the total security of your personal information, and any data transmission you make to our Site is done at your own voluntary risk. In the event that we detect a data security breach that poses a significant risk to your rights and freedoms as a data subject, we will immediately notify you and the relevant Mexican data protection authority within the legally required time frame, as soon as we have confirmed the nature and scope of the breach.

We will retain your personal identifiable information only for as long as it is strictly necessary to fulfill the exact purposes for which the data was originally collected. For customers who place an order without creating a registered user account, we retain your order-related personal data for a period of 5 years after your order is fully completed, to comply with Mexican tax and commercial record-keeping requirements. For registered user accounts, we will retain all your account-related personal information for the full duration that your account remains active on our platform. After you choose to permanently delete your user account, we will delete all your stored personal data from our primary active servers within 30 business days, except for the limited transaction records that we are legally required to retain for tax, accounting, and legal compliance purposes, which will be securely archived and retained for the legally mandated retention period, after which they will be permanently and irreversibly deleted. We will never retain your personal information for longer than is necessary, and all retained data will continue to be protected by the security measures outlined in this Privacy Policy for the full duration of the retention period.

5. Your Privacy Rights

Under applicable Mexican data protection regulations, you as a data subject hold a comprehensive set of legally recognized rights related to your personal information, and we are fully committed to supporting you in exercising these rights in a simple, accessible, and timely manner, without imposing any unreasonable barriers or excessive costs on your request.

You have the right to access the personal information that we hold about you, at any time. You may submit a request to receive a complete copy of all your personal data stored in our systems, including details about how your data has been processed, shared, and stored. You also have the right to request the immediate correction of any incomplete, inaccurate, or outdated personal information we hold about you. If you notice that your saved shipping address, contact phone number, or billing details are no longer correct, you can update these details directly in your user account settings, or submit a correction request to our support team for assistance.

You have the right to request the erasure of your personal information, under circumstances including when your personal information is no longer necessary for the original purposes for which it was collected, when you withdraw your previously given consent for data processing, or when you believe your personal data has been processed unlawfully. You also retain the right to restrict the processing of your personal information in specific scenarios, such as when you are verifying the accuracy of your data, when you have objected to our processing activities, or when our processing of your data is no longer lawful but you do not wish for us to fully delete your information. You have the right to data portability, which allows you to request that we transfer all the personal data you have provided to us to another designated service provider, in a structured, commonly used, machine-readable format.

Additionally, you have the full right to object to any processing of your personal information that is based on our legitimate business interests, at any time, for reasons related to your specific personal situation. You also retain the absolute right to withdraw any previously given consent for us to process your personal data for specific purposes, such as receiving marketing newsletters, at any time. The withdrawal of your consent will not affect the lawfulness of any data processing activities that we already completed before your consent was withdrawn.

To exercise any of the rights outlined above, you may submit a formal request to us via email at welds@teashopméxico.com, or via physical mail sent to our registered business address at Av. Francisco Villarreal Torres No. 2050, Interior 8E, Colonia Juárez, Ciudad Juárez, Chihuahua, México, C.P. 32422. We will respond to your properly submitted data rights request within a maximum of 15 business days. In cases where your request is complex or requires additional verification, we may extend the response period for an additional 10 business days, and we will notify you of this extension within the initial 15-day window. Before processing your request, we will verify your identity by asking you to provide a copy of your official government-issued identification document, to ensure that the person making the request is indeed the legitimate data subject to whom the personal information belongs. We will never charge you any fee for submitting and processing a standard data rights request, unless your request is clearly repetitive, excessive, or manifestly unfounded, in which case we may charge a reasonable administrative fee that corresponds to the actual administrative costs of processing your request.

6. Cookies and Similar Tracking Technologies

Our Site uses first-party cookies and authorized third-party tracking technologies to distinguish your browser from other visitors to our platform, maintain your logged-in session status, remember the products you have added to your shopping cart, and provide you with a more smooth, personalized browsing experience. The cookies we use fall into three clear categories: strictly necessary cookies, which are essential for the basic operation of our Site and cannot be disabled in our systems without breaking core site functionality; performance cookies, which collect anonymous aggregated usage data to help us understand how visitors interact with our Site and improve overall site performance; and functional cookies, which remember your personal preferences such as your selected language, currency, and saved shipping address to enhance your user experience.

You have the full ability to control and manage cookie settings directly through your own web browser. Most modern web browsers allow you to view all cookies stored on your device, delete selected or all cookies, and adjust settings to block all cookies or only block third-party cookies. Please note that if you choose to disable all strictly necessary cookies, some core features of our Site, such as adding items to your shopping cart, completing the checkout process, and staying logged into your user account, may not function correctly or may become completely unavailable. We do not use any undisclosed tracking technologies, spyware, or malicious software to collect your personal information, and all tracking activities on our Site are fully transparent and clearly outlined in this section.

7. Third-Party Links

Our Site may occasionally contain hyperlinks to external third-party websites, including links to our official social media pages on platforms like Instagram, Facebook, and TikTok, links to our authorized payment processors’ official websites, and links to product review platforms where our customers can share their feedback about our teaware and coffeeware products. We do not exercise any control over the privacy policies, data processing practices, and content of these external third-party websites. Once you click on a third-party link and leave our Site, the terms and conditions of this Privacy Policy no longer apply to your activities on those external platforms. We strongly recommend that you carefully review the full privacy policy of every website you visit after leaving www.teashopméxico.com, to ensure that you fully understand how that respective platform will collect, use, and protect your personal information. We take no responsibility and assume no liability for the data handling practices of any external third-party websites, and your interaction with those platforms is done entirely at your own voluntary risk.

8. Children’s Privacy

Our e-commerce website and its associated services are not directed to, and are not intended for use by, individuals under the age of 18 years old. We do not knowingly or intentionally collect any personal identifiable information from children under the age of 18. If we become aware that we have accidentally collected personal information from a child under 18 without verifiable parental consent, we will take immediate action to permanently delete that information from all our servers and data storage systems. If you are a parent or legal guardian and you believe that your child has provided us with their personal information without your permission, please contact us immediately at welds@teashopméxico.com, and we will process the full deletion of that data as quickly as possible.

9. Changes to This Privacy Policy

We reserve the right to update, modify, or revise the terms of this Privacy Policy from time to time, to reflect changes in our business operations, new legal and regulatory requirements, or improvements to our data processing practices. When we make material changes to this policy, we will update the “Effective Date” at the top of this document, and we will post a clear prominent notification on the homepage of www.teashopméxico.com to inform all registered users that the Privacy Policy has been updated. For all registered users who have an active account with us, we will also send a formal notification email to the email address associated with their account, to notify them of the upcoming changes. The revised updated Privacy Policy will take effect 10 calendar days after the new version is publicly posted on our Site. Your continued use of our Site and our services after the effective date of the revised policy will constitute your full acceptance of all the changes made to this document. If you do not agree with the updated revised Privacy Policy, you may close your user account and discontinue all use of our platform before the new policy takes effect.

10. Contact Information

If you have any questions, concerns, comments, or formal requests related to this Privacy Policy, our data processing practices, or your privacy rights as a customer, you may contact us at any time using the following contact details:
Company Name: TEA SHOP S. de R.L. de C.V.
Website: www.teashopméxico.com
Contact Email: welds@teashopméxico.com
Physical Address: Av. Francisco Villarreal Torres No. 2050, Interior 8E, Colonia Juárez, Ciudad Juárez, Chihuahua, México, C.P. 32422.
Contact Telephone Number: +52 6566663580

Our dedicated data protection team will review and respond to your inquiry as quickly as possible, usually within 3 business days, to address all your privacy-related concerns thoroughly and professionally.