This Privacy Policy explains how Necropatcher (“Necropatcher”, “we”, “us”) collects, uses, shares and protects your personal data when you visit necropatcher.com, create an account, subscribe to our newsletter or buy from us. It is our comprehensive privacy notice (aviso de privacidad integral) under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations, and it also explains the rights you may have under other privacy laws, such as the EU/UK General Data Protection Regulation (GDPR) and U.S. state privacy laws, when they apply to you.
By using our website or placing an order you confirm that you have read this Privacy Policy. If you do not agree with it, please do not use the website.
1. Who is responsible for your data
Necropatcher
Mexico
Email: necropatcher21@gmail.com
WhatsApp: +525611371222
We are the party responsible (responsable) for the processing of your personal data. For any privacy matter, write to necropatcher21@gmail.com with the subject line “Privacy”.
2. Personal data we collect
- Identification and contact data: name, email address, phone and/or WhatsApp number.
- Shipping and billing data: street address, city, state, ZIP/postal code and country.
- Order data: products purchased, amounts, payment method chosen, payment status and reference, order history, shipping and tracking information, and your acceptance of our Terms & Conditions (date, time and IP address).
- Account data: if you create an account, your name, email, WhatsApp number and a password, which we store only in encrypted (hashed) form.
- Communications: messages you send us by email, WhatsApp, social media or our forms, including custom-patch or wholesale requests and any files or designs you share.
- Newsletter: the email address you subscribe with.
- Technical data: IP address, browser and device type, pages visited, and data stored through cookies and similar technologies (see section 8).
Payment card data: we never see or store your full card number, CVV or bank passwords. Payments are processed directly by PayPal or Mercado Pago under their own privacy policies; we only receive confirmation of whether a payment was approved, together with a transaction reference.
Sensitive data: we do not ask for or intentionally process sensitive personal data (such as health, religious beliefs, sexual life, political opinions or biometric data). Please do not send it to us.
Minors: our store is intended for adults. We do not knowingly collect data from people under 18 without the consent of a parent or guardian. If you believe a minor has given us personal data, contact us and we will delete it.
3. How we collect it
Directly from you when you fill in the checkout, create an account, subscribe, or contact us; automatically when you browse our website (cookies, server logs); and from payment and shipping providers, which inform us of payment status and delivery status of your order.
4. Why we use your data
Primary purposes (necessary for our relationship with you)
- To process, confirm, charge, prepare, ship and deliver your orders.
- To create and manage your customer account and show you your order history.
- To send you order confirmations, payment notices, shipping and tracking updates by email and/or WhatsApp.
- To answer your questions, handle custom and wholesale requests, cancellations, returns, refunds and warranty claims.
- To prevent fraud, protect the security of our website and customers, and enforce our Terms & Conditions.
- To comply with our legal, tax and accounting obligations and to respond to requests from competent authorities.
Secondary purposes (optional)
- To send you our newsletter, new releases, promotions and discounts.
- To ask for your opinion about our products and service.
- To create statistics about how our website is used so we can improve it.
These secondary purposes are not necessary to fulfil your order. If you do not want your data used for them, email necropatcher21@gmail.com at any time, or click the “unsubscribe” link included in every marketing email. Refusing them will never affect your purchases.
5. Legal bases (users in the EEA and the UK)
When the GDPR applies, we process your data because it is necessary to perform our contract with you (orders and account), to comply with legal obligations (tax and accounting), on the basis of our legitimate interests (fraud prevention, security and improving our store, balanced against your rights), or with your consent (newsletter and non-essential cookies), which you can withdraw at any time.
6. Who we share your data with
We do not sell, rent or trade your personal data. We only share it when needed for the purposes above, with:
- Payment processors (PayPal and Mercado Pago), to charge your order.
- Shipping and postal carriers (for example Correos de México, DHL, FedEx, Estafeta, UPS or USPS), which receive your name, address and phone number to deliver your package.
- Technology providers that host our website and email or help us run the store (hosting, email, analytics such as Google Analytics when enabled). They act on our behalf and may only use your data to provide their services.
- Public authorities (tax, customs or judicial authorities) when required by law or to protect our rights.
Under Mexican law, these transfers do not require your consent because they are necessary to fulfil our relationship with you, are made to providers acting on our behalf, or are required by law. Some of these providers are located outside Mexico (for example in the United States), so your data may be transferred internationally; we only work with providers that offer adequate protection.
7. How long we keep it
We keep your data only while it is needed for the purposes described above. Order and invoicing records are kept for at least five years, as required by Mexican tax law. Account data is kept until you ask us to delete your account. Newsletter data is kept until you unsubscribe. After that, data is securely deleted or anonymized.
8. Cookies and similar technologies
We use cookies and your browser’s local storage to:
- Make the store work (essential): keep your session, your cart, your login and the security of forms. These cannot be switched off without breaking the store.
- Remember preferences: for example your wishlist.
- Measure visits (analytics): only if analytics are enabled, to understand how many people visit and which pages they view, using aggregated data.
You can delete or block cookies in your browser settings. If you block essential cookies, the cart and checkout may not work.
9. How we protect your data
We use administrative, technical and physical measures to protect your data against loss, misuse, unauthorized access, disclosure or alteration, including encrypted connections (HTTPS), hashed passwords, restricted access to our admin panel and trusted payment processors. No method of transmission or storage is 100% secure; if a security breach significantly affects your rights, we will notify you as required by law.
10. Your rights
You can at any time exercise your ARCO rights: Access the personal data we hold about you; Rectify it if it is inaccurate or incomplete; Cancel (delete) it when it is no longer needed or was processed improperly; and Oppose its use for specific purposes. You may also revoke your consent and limit the use or disclosure of your data, for example by opting out of marketing.
To do so, send an email to necropatcher21@gmail.com including: (a) your full name and an email address to reply to; (b) a copy of an official ID, or proof of your legal representative’s authority; (c) a clear description of the data and the right you want to exercise; and (d) any document that helps us locate your data (for example, your order number). We will reply within 20 business days and, if your request is appropriate, apply it within the following 15 business days. Some data may have to be kept to comply with legal obligations. You can also update your name and WhatsApp number yourself from your account.
If you believe your rights have been violated, you may file a complaint with the Mexican data protection authority (currently the Secretaría Anticorrupción y Buen Gobierno).
EEA/UK residents also have the rights of data portability and restriction of processing, and may lodge a complaint with their local supervisory authority. U.S. residents (for example, California) may request to know, correct or delete their personal data; we do not sell personal data or share it for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.
11. Third-party links
Our website may contain links to other sites (for example PayPal, Mercado Pago, carriers or social networks). We are not responsible for their content or privacy practices; please read their own privacy policies.
12. Changes to this policy
We may update this Privacy Policy to reflect legal, technical or business changes. The current version will always be published on this page with its “last updated” date. If changes are significant, we will let you know through the website or by email.
13. Contact
Questions about this policy or your data: necropatcher21@gmail.com · WhatsApp +525611371222.