Legal
Albye (the Brand), with commercial domicile in Mexico City, is responsible for the processing of your personal data in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its 2025 reform.
We collect the following data when you purchase or contact us: name, email, phone, shipping address. If you request an invoice: fiscal data (RFC, legal name, CFDI use). When paying, Stripe processes your banking information; Albye does not store it.
Your data is used to: process and deliver your order, issue CFDI invoices when requested, respond to your messages, send order status updates, and marketing communications when you provide explicit consent.
We share the minimum necessary data with: Stripe (payment processor, USA), Mexican shipping carriers, and cloud infrastructure providers. We do not sell or transfer data to third parties for purposes other than service operation.
You may request access, rectification, cancellation, or opposition regarding the processing of your personal data. Until a dedicated privacy mailbox is enabled, send the request to [email protected]. The final procedure, identity requirements, and deadlines require legal approval before the store opens.
The site uses functional browser storage to maintain the cart and preferences. No analytics platform or third-party advertising cookies are currently configured. Any future addition must update this notice and the applicable consent mechanism.
Currently verified controls include TLS in transit, secrets kept outside the repository, least privilege, and restricted administrative surfaces. Backup encryption, restoration, and two-factor authentication remain activation gates and will not be treated as operational until tested. Incidents will be handled as required by applicable law.
We may update this notice. The current version is always published on this page with its last update date. Substantial changes will be notified by email when required by law.
