Privacy Notice

Last updated: April 23, 2026

1. Data Controller

2. Personal Data We Collect

We collect the following personal data when you use our services:

• Identification data: full name, company name.
• Contact data: email address, phone number, shipping address.
• Tax data: RFC and fiscal address (only if you request an invoice).
• Browsing data: IP address, browser type, pages visited, analytics cookies (Google Analytics) and advertising events (Meta Pixel).
• Payment data: processed directly by Stripe, Inc. Dushi Company does not store card numbers or banking details.
• Messaging data: message content, phone number and user identifiers when you contact us via WhatsApp Business, Facebook Messenger or Instagram Direct.

3. Purpose of Data Processing

Your personal data is used to:

• Process quotes, orders and printing deliveries.
• Communicate with you about your order status.
• Issue invoices and tax receipts.
• Improve our services and user experience.
• Website traffic and statistical analysis (via Google Analytics).
• Respond to sales inquiries and provide support via WhatsApp Business, Facebook Messenger, Instagram Direct and email.
• Measure the effectiveness of our advertising campaigns on Facebook and Instagram and build lookalike audiences (via Meta Pixel and the Meta Conversions API).
• Send information about services and promotions (only with your consent).

4. Payment Processing

Payments are processed through Stripe, Inc., a PCI DSS Level 1 certified platform. When making a payment:

• Your financial data is transmitted directly to Stripe via encrypted connection (TLS/SSL).
• Dushi Company does not have access to your full card details.
• For more information, see the Stripe Privacy Policy.

5. Cookies, Analytics and Advertising

Our website uses:

• Google Analytics (GA4): for traffic analysis and user behavior insights. Data is anonymized and processed by Google LLC.
• Meta Pixel (ID 384601589840530) and Meta Conversions API: send browsing and conversion events (hashed when containing personal information) to Meta Platforms, Inc. to measure the effectiveness of our ads on Facebook and Instagram, personalize the advertising you see, and build lookalike audiences. You can manage your advertising preferences at facebook.com/settings?tab=ads and review the Meta Privacy Policy.
• Functional cookies: to remember language preferences and improve navigation.

You can disable cookies in your browser settings. This will not affect the basic functionality of the site.

6. Meta Messaging Platforms (WhatsApp, Messenger, Instagram)

When you contact us through WhatsApp Business, Facebook Messenger or Instagram Direct:

• Your messages are transmitted by WhatsApp LLC and Meta Platforms, Inc. under their own privacy policies and terms of service.
• Dushi Company receives the message content, your phone number or user identifier (user ID) and timestamps, which we store in our internal CRM to provide continuous service.
• We may use artificial intelligence assistants (e.g., Google or Anthropic models) to process your inquiries and generate responses. Only the text necessary to respond is sent, never payment data.
• We do not share conversation content with third parties other than those strictly necessary to fulfill your request (shipping carriers, billing or payment providers).
• For more details, see the WhatsApp Privacy Policy and the Meta Privacy Policy.

7. Data Sharing with Third Parties

Your data may be shared with the following processors, exclusively for the purposes described in this notice:

• Stripe, Inc. (USA) — payment processing.
• Google LLC (USA) — web analytics (Google Analytics) and artificial intelligence services (Gemini).
• Meta Platforms, Inc. / WhatsApp LLC (USA and Ireland) — messaging (WhatsApp, Messenger, Instagram Direct), Meta Pixel and advertising.
• SkyDropx (Mexico) — marketplace shipping quotes and fulfillment.
• Cloudflare, Inc. (USA) — content delivery network, DNS and site security.
• Hetzner Online GmbH (Germany) — hosting of our servers.
• Anthropic PBC (USA) — AI provider used by our virtual assistant.
• Shipping carriers (Estafeta, FedEx and others) — name and shipping address for order delivery.

Some of these providers are located outside Mexico. International transfers are made under contractual clauses and protection mechanisms equivalent to those required by Mexico's LFPDPPP.

We do not sell, rent or share your personal data with third parties for marketing purposes other than those described above.

8. Data Security

We implement technical and organizational security measures to protect your data:

• HTTPS encryption with HSTS across the entire site.
• Payments processed exclusively by Stripe (PCI DSS Level 1).
• Access to personal data restricted to authorized personnel only.
• Regular backups and secure storage on protected servers.

9. Your Rights

In accordance with applicable data protection laws, you have the right to:

• Access your personal data in our possession.
• Rectify your data when inaccurate or incomplete.
• Delete your personal data when you believe it is no longer necessary.
• Object to the processing of your data for specific purposes.

To exercise these rights, send an email to [email protected] with the subject "Privacy Rights" including your name, the right you wish to exercise and a description of your request. We will respond within 20 business days.

10. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described and to comply with applicable legal and tax obligations (minimum 5 years for tax data under Mexican law).

11. Changes to This Notice

We reserve the right to modify this privacy notice. Any changes will be published on this page with the corresponding update date. We recommend reviewing it periodically.

12. Contact

If you have questions about this privacy notice or the processing of your personal data, please contact us: