Privacy Notice

Last updated: March 19, 2026

1. Data Controller

2. Personal Data We Collect

We collect the following personal data when you use our services:

• Identification data: full name, company name.
• Contact data: email address, phone number, shipping address.
• Tax data: RFC and fiscal address (only if you request an invoice).
• Browsing data: IP address, browser type, pages visited, analytics cookies (Google Analytics).
• Payment data: processed directly by Stripe, Inc. Dushi Company does not store card numbers or banking details.

3. Purpose of Data Processing

Your personal data is used to:

• Process quotes, orders and printing deliveries.
• Communicate with you about your order status.
• Issue invoices and tax receipts.
• Improve our services and user experience.
• Website traffic and statistical analysis (via Google Analytics).
• Send information about services and promotions (only with your consent).

4. Payment Processing

Payments are processed through Stripe, Inc., a PCI DSS Level 1 certified platform. When making a payment:

• Your financial data is transmitted directly to Stripe via encrypted connection (TLS/SSL).
• Dushi Company does not have access to your full card details.
• For more information, see the Stripe Privacy Policy.

5. Cookies and Tracking Technologies

Our website uses:

• Google Analytics (GA4): for traffic analysis and user behavior insights. Data is anonymized and processed by Google LLC.
• Functional cookies: to remember language preferences and improve navigation.

You can disable cookies in your browser settings. This will not affect the basic functionality of the site.

6. Data Sharing

Your data may be shared with:

• Stripe, Inc. (USA) — payment processing.
• Google LLC (USA) — web analytics via Google Analytics.
• Shipping carriers — name and shipping address for order delivery.

We do not sell, rent or share your personal data with third parties for marketing purposes.

7. Data Security

We implement technical and organizational security measures to protect your data:

• HTTPS encryption with HSTS across the entire site.
• Payments processed exclusively by Stripe (PCI DSS Level 1).
• Access to personal data restricted to authorized personnel only.
• Regular backups and secure storage on protected servers.

8. Your Rights

In accordance with applicable data protection laws, you have the right to:

• Access your personal data in our possession.
• Rectify your data when inaccurate or incomplete.
• Delete your personal data when you believe it is no longer necessary.
• Object to the processing of your data for specific purposes.

To exercise these rights, send an email to [email protected] with the subject "Privacy Rights" including your name, the right you wish to exercise and a description of your request. We will respond within 20 business days.

9. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described and to comply with applicable legal and tax obligations (minimum 5 years for tax data under Mexican law).

10. Changes to This Notice

We reserve the right to modify this privacy notice. Any changes will be published on this page with the corresponding update date. We recommend reviewing it periodically.

11. Contact

If you have questions about this privacy notice or the processing of your personal data, please contact us: