Privacy Notice

This Comprehensive Privacy Notice is issued under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, the "Law") and explains how we process the personal data you provide when using mercatogoods.com.

1. Data controller

Mercato Goods is responsible for processing your personal data. For any matter related to this Privacy Notice or your personal data, you can contact us by email at contact@mercatogoods.com.

2. Personal data we process

  • Identification and contact: name, email address and phone number.
  • Delivery: shipping address, including postal code, and any delivery instructions.
  • Billing and payment: billing address and transaction details (amount, date and payment status). Your card details are received and processed directly by Shopify Payments; Mercato Goods has no access to them.
  • Purchases: products bought, order history, returns, claims and any messages you send us.
  • Technical data: IP address, browser and device type, which our store platform records automatically for its operation and security.

We do not request or process sensitive personal data.

3. Purposes of processing

We process your personal data for the following purposes, which are necessary for your relationship with us and therefore do not require your consent:

  • Processing, confirming, preparing and delivering your orders.
  • Processing your payments and, where applicable, your refunds.
  • Sending you notifications about your order status and tracking.
  • Handling your questions, cancellations, returns, claims and warranty requests.
  • Preventing fraud and protecting the security of the store and our customers.
  • Complying with our legal, tax and accounting obligations, and responding to requests from competent authorities.

We currently do not use your personal data for secondary purposes such as marketing, advertising or commercial prospecting. If we wish to do so in the future, we will update this Privacy Notice and, where the Law requires it, ask for your consent beforehand.

4. Providers that process your data on our behalf

To run the store and deliver your orders, we share your data only with the following providers, which process it on our behalf and only for the purposes described in this Privacy Notice:

  • Shopify: the platform our online store runs on, which also processes payments (Shopify Payments). It stores your order and account data.
  • TeemDrop (EASYFLOW LOGISTICS LIMITED, United Kingdom): our logistics partner, which prepares and ships orders from its warehouses in China. It receives your name, delivery address, phone number and the products in your order.
  • Domestic and international carriers: receive your name, delivery address and phone number to deliver your package.

Some of these providers are located outside Mexico, so your data may be processed in other countries. Data communications necessary to fulfil the purchase contract you enter into with us do not require your consent, under Article 36, sections IV and VII, of the Law.

We do not sell, rent or share your personal data with third parties for their own purposes, except when a competent authority requires it under the law.

5. Cookies and similar technologies

Our store runs on the Shopify platform, which uses its own strictly necessary cookies for the site to work, for example to keep products in your cart, complete checkout, remember your preferences and protect the site against fraud. Shopify may also use its own cookies to produce aggregate statistics about how the store is used.

We do not use advertising cookies or third-party tracking tools, such as social media pixels or external analytics services. You can block or delete cookies in your browser settings, although the cart and checkout may not work properly.

6. Options to limit the use or disclosure of your data

You can ask us at any time to limit the use or disclosure of your personal data by emailing contact@mercatogoods.com. Please note that we cannot stop processing the data needed to deliver an order in progress or to meet our legal obligations.

7. ARCO rights and withdrawal of consent

You have the right to Access your personal data and know how we process it; to request its Rectification if it is incomplete or inaccurate; to its Cancellation when you consider it is not needed for any of the purposes above; and to Object to its processing on legitimate grounds (together, "ARCO rights"). You can also withdraw any consent you have given us.

To exercise any of these rights, send an email to contact@mercatogoods.com with the subject "ARCO Rights", including:

  1. Your name and a way to receive our reply.
  2. A copy of a valid official ID or, if acting through a representative, documents proving their identity and authority.
  3. A clear description of the personal data you want to exercise your right over (except for the right of access).
  4. The right you want to exercise or what you are requesting.
  5. Any information that helps us locate your data, such as your order number.

If you request a rectification, please also state the changes to be made and attach supporting documents.

We will send you our decision within 20 days of receiving your request and, if it is granted, carry it out within 15 days of notifying you. These periods may be extended once for an equal period when circumstances justify it. For the right of access, we will provide your data through electronic documents sent to the email address you indicate. Exercising ARCO rights is free of charge.

If you believe your right to personal data protection has been violated, you can contact the competent data protection authority in Mexico, the Secretaría Anticorrupción y Buen Gobierno.

8. Retention and security

We keep your personal data for as long as needed to fulfil the purposes described and for the periods required by applicable legal, tax and commercial regulations. After that, we securely delete or block it.

Communications with our store are encrypted with HTTPS, and payments are processed on a platform that complies with the Payment Card Industry Data Security Standard (PCI DSS).

9. Minors

Our store is intended for adults. We do not knowingly collect personal data from minors without the consent of their parent or guardian.

10. Changes to this Privacy Notice

We may change this Privacy Notice because of changes in the law, our practices or the providers we use. We will publish any change on this page, at mercatogoods.com/pages/aviso-de-privacidad, showing the last-updated date.

This English version is provided for convenience. In case of any discrepancy, the Spanish version prevails.

Last updated: October 21, 2026.