1. Data controller
Alberti Saludables S. de R.L., whose address is Calle 9 Sur No. 1707, Col. Insurgentes Chulavista, Puebla, Pue. 72420, México, which sells products under the Albye brand, is the controller responsible for processing your personal data. Privacy requests are handled by Albye's personal data department. The privacy channel is [email protected], subject “Privacidad”.
2. Data we process
We process your name, email, phone number, delivery address, order data and customer service messages. If you request an invoice, we process the necessary tax data. If you accept a refund by bank transfer, we process the account holder, bank, CLABE and proof of transfer solely to make and document it. We do not request sensitive data, passwords, PINs or online banking credentials. Stripe receives card data through its form; Albye does not receive or store the full card number or the security code. We keep the references, statuses and notices that Stripe sends us to reconcile payments; these notices may include billing details and partial card data, such as brand, last four digits and expiry date. For security and abuse prevention we also process technical connection data, such as the IP address. To limit pending payments from the same network, we keep a key derived from the IP address instead of storing the address itself in that record.
3. Purposes and retention
We use this data to quote, charge, deliver, invoice, handle requests, prevent abuse and document cancellations or returns. We keep the data necessary to complete the purchase, handle claims and meet legal obligations; afterwards, we block or delete what is appropriate. Access is limited to authorized personnel.
4. Service providers and transfers
We share the essential data with Stripe for payment and with the carrier for delivery. Hosting, email and support providers operate the infrastructure under instructions and confidentiality obligations. Some services may process data outside Mexico. Communications needed to perform the purchase relationship are made under the applicable legal exceptions; for any additional transfer that requires consent, we will request it in advance. When you open the payment page, Cloudflare's Turnstile service analyzes technical signals from your browser and connection to tell people apart from automated programs. We do not sell your data.
5. Newsletter and consent
The promotional newsletter is optional and requires confirming the subscription. You can unsubscribe through the link in the confirmation email or by writing to [email protected]. Declining advertising does not affect a purchase. Where applicable, we will ask for your express consent to process the financial data of a refund.
6. ARCO rights and revocation
You may request access to, rectification or cancellation of, or object to the processing of your data (ARCO rights), revoke a consent or limit its use by writing to [email protected], subject “Privacidad”. State your name, a means of reply, what you are requesting and the details that allow us to locate the case. For your protection, we will tell you how to prove your identity or representation using only the strictly necessary information. For rectification, include the correct data and supporting evidence. Revocation has no retroactive effect and may be limited by legal obligations or by data essential to complete a purchase.
7. Response periods and authority
We will communicate our decision on an ARCO request within 20 business days of its receipt and, if it is granted, we will carry it out within the 15 business days following the response, as provided by law. Each period may be extended once for an equal period when circumstances justify it, and we will tell you the reason. Access may be provided electronically once identity has been proven. Exercising these rights is free of charge, except for the reproduction or delivery costs permitted by law. You may go to the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance) for the protection of your rights under the applicable law.
8. Browser storage and cookies
The store saves in your browser your cart, the reference and language of your purchase draft, and your theme and video playback preferences. It also saves a random key to tell apart the purchase drafts created from that browser. Payment and protection services may use their own technologies to process payments and prevent fraud. We do not set up analytics or behavioral advertising tools in this version. You can manage storage and cookies from your browser; blocking necessary features may affect your purchase.
9. Security and changes to this notice
We apply technical, administrative and physical measures to protect data according to its nature. If a breach significantly affects your rights, we will inform you as required by law. We will publish changes to this notice on the Privacy page with their update date and will request consent again when necessary.