1. Data Controller
The entity responsible for the collection and processing of your personal data on www.sewcraftory.com (the “Website”) is:
- Brand Name: sewcraftory
- Data Controller: DISTRIBUIDORA DE MERCERÍA LA MEXICANA, S.A. DE C.V.
- Tax Registration / RFC: DMM211208RH4
- Registered Address: Juan Manuel 610, Guadalajara, Jalisco, C.P. 44100, Mexico
- Official Email: sewing@sewcraftory.com
- Telephone: +52 8140591221
2. Information We Collect
We collect and process personal data necessary for fulfilling purchase transactions, managing customer communication, and complying with statutory obligations. This data includes:
- Identity & Contact Data: Full name, billing address, delivery address, email address, and telephone number.
- Transaction Data: Details regarding products purchased, order values, order reference numbers, and transaction history.
- Technical Data: IP address, browser information, and operational log data collected automatically through website interaction.
3. Purpose and Legal Basis for Processing
We process personal information under the following lawful grounds established within applicable data protection legislation:
- Contract Performance: Processing necessary to complete purchase orders, arrange order dispatch, and administer customer support.
- Legal Obligation: Retaining tax, statutory account, and transaction records in compliance with applicable accounting laws.
- Legitimate Business Interests: Maintaining system operational security, fraud prevention, and administrative functionality.
4. Payment Processing & PCI Compliance
All financial transactions executed on www.sewcraftory.com are processed directly through our authorized payment processing partner, Stripe.
- Direct Processing: During the checkout process, payment instrument details (such as credit or debit card numbers) are collected and processed directly by Stripe via encrypted channels.
- No Card Data Storage: DISTRIBUIDORA DE MERCERÍA LA MEXICANA, S.A. DE C.V. does not store, store-and-forward, or access full payment card credentials on its local servers.
- Governance: Processing of payment data by Stripe is governed by Stripe’s privacy policy and regulatory standards.
5. Data Retention Period
Personal data collected for commercial transactions is retained only for as long as necessary to fulfill the original collection purpose or as required by applicable statutory record-keeping regulations:
- Transactional & Financial Data: Retained for a standard period of up to 7 years following order completion to satisfy tax, accounting, and audit liabilities under applicable commercial law.
- Customer Enquiries Data: Retained for up to 2 years following the final customer communication, after which it is routinely purged from operational records.
- Technical Logs: Retained for a limited operational window, typically up to 90 days, before automated deletion.
6. Rights of European Data Subjects
Under applicable European data protection frameworks (including the General Data Protection Regulation / GDPR), customers located within European jurisdictions possess specific rights concerning their personal information:
- Right of Access: Request copies of personal records maintained by the Data Controller.
- Right to Rectification: Request correction of incomplete or inaccurate data.
- Right to Erasure: Request deletion of personal records, subject to overriding statutory retention requirements.
- Right to Restrict or Object: Limit or object to specific processing operations where applicable.
To exercise any of these rights, please contact our Data Controller at sewing@sewcraftory.com.
7. International Data Transfers
As our corporate headquarters are located in Mexico, personal information collected from customers residing in European jurisdictions is transferred across international boundaries to manage transaction execution and administrative operations. Such transfers are conducted using standard regulatory safeguards to ensure appropriate legal protection of customer details in accordance with applicable data protection laws.
8. Contact for Privacy Enquiries
For questions regarding this Privacy Policy or requests regarding personal data management, please direct correspondence to:
- Operating Entity: DISTRIBUIDORA DE MERCERÍA LA MEXICANA, S.A. DE C.V.
- Official Email: sewing@sewcraftory.com
- Registered Address: Juan Manuel 610, Guadalajara, Jalisco, C.P. 44100, Mexico
- Telephone: +52 8140591221