Mexico Privacy Policy
This Privacy Notice is issued in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPPP”), its Regulations, and the Privacy Notice Guidelines issued by the National Institute for Transparency, Access to Information, and Protection of Personal Data (INAI).
1. Identity and address of the Controller
The controller of your personal data is Saigu Cosmetics, S.L. (hereinafter, “SAIGU”), a company incorporated under the laws of Spain, with N.I.F. B67263533 and registered address at Calle Jorge Juan 9, 46004 Valencia, Spain. Contact email: info@saigucosmetics.com.
SAIGU owns the website www.saigucosmetics.com (es-MX version) and the sales channel through which Saigu Cosmetics® brand products are offered to consumers in Mexico.
2. Personal data collected
For the purposes described in this Notice, SAIGU collects the following categories of personal data:
• Identification data: full name, date of birth (where applicable), gender (when voluntarily provided).
• Contact data: email address, mobile phone number, shipping address, and, where applicable, tax address.
• Tax data (only if you request a CFDI for tax purposes): RFC, business name, tax regime, tax address ZIP code, and CFDI use.
• Transactional and payment data: purchase history, amounts, products, payment method, and tokenized card information (card data is processed directly by the payment processor).
• Browsing and device data: IP address, device identifiers, browser type, operating system, pages visited, access date and time, cookies, and similar technologies.
• Preference data: information about skin type, shade, likes, or interests that the Customer voluntarily provides through questionnaires, surveys, or colorimetry services.
• Data about allergies or skin conditions (when voluntarily provided when requesting advice): processed exclusively to respond to your query and deleted once it has been handled.
No sensitive personal data is requested except for those related to skin health that the Customer voluntarily provides when asking about how to use the Products. This data is processed only to resolve the query and is deleted once it has been handled.
3. Processing purposes
3.1. Primary purposes (necessary for the legal relationship)
• Handle account creation, manage registration, and verify the Customer’s identity.
• Process orders, manage purchases and sales, coordinate delivery, and handle returns, refunds, and warranties.
• Enabling the issuance of the Digital Tax Receipt via the Internet (CFDI) by GetCubbo, S.A.P.I. de C.V. (Merchant of Record in Mexico).
• Providing customer support, handling inquiries, complaints, claims, and clarifications.
• Complying with applicable legal, tax, accounting, and consumer protection obligations.
• Preventing and detecting fraud, misuse of the site, and abuse of return mechanisms.
3.2. Secondary purposes (not necessary for the legal relationship)
• Sending commercial, promotional, and advertising communications about SAIGU products, news, offers, and events by email, SMS, push notifications, or WhatsApp.
• Conducting satisfaction surveys and market research.
• Personalizing the experience, product recommendations, loyalty programs, and statistical analysis.
• Creating commercial profiles for marketing purposes.
If you do not want your personal data to be used for secondary purposes, you may do so at any time by sending an email to info@saigucosmetics.com with the subject line “Refusal of processing – secondary purposes”. Refusal will not be a reason to deny you the requested services or the legal relationship.
4. Transfers of personal data
To fulfill the purposes described, SAIGU shares or transfers personal data to the following third parties, pursuant to Article 37 of the LFPDPPP. When a transfer does not require consent, it is carried out under the applicable legal exceptions; in other cases, your express consent is requested.
4.1. Data processor in Mexico
GetCubbo, S.A.P.I. de C.V. (RFC GET210216544), with address at Calle Emerson No. 130, Polanco IV Sección, Miguel Hidalgo, CDMX, 11550, acts as SAIGU’s Merchant of Record, Importer of Record, and end-to-end logistics provider in Mexico. CUBBO processes personal data on behalf of SAIGU to handle the import, storage, picking/packing, and shipping of orders, issuance of the CFDI, payment management, and returns support. CUBBO maintains its own Privacy Notice and contractually commits to comply with the LFPDPPP.
4.2. Other third parties with whom data is shared
• Payment processors (including Shopify Payments, PayPal, and other authorized processors): to process payment and prevent fraud.
• Logistics operators and parcel delivery companies contracted by CUBBO: to deliver the order.
• Technology providers: Shopify Inc. (e-commerce platform), transactional email providers, CRM and customer support tools (for example, Gorgias), web analytics (Google Analytics) and marketing platforms (Meta, Google Ads, TikTok), under data processing or service agreements.
• Competent authorities: when there is a legal, judicial, or administrative request in accordance with Article 37, section II, of the LFPDPPP.
• SAIGU group companies or potential acquirers in the event of a merger, spin-off, acquisition, or any business reorganization, in accordance with Article 37, section VII, of the LFPDPPP.
4.3. International transfers
Some of the technology providers mentioned are based outside Mexico (including the European Union, the United States, and other jurisdictions). In these cases, SAIGU takes reasonable measures and requires its providers to meet protection standards equivalent to those set out in the LFPDPPP and, where applicable, the European Union’s General Data Protection Regulation (GDPR).
Except as provided under the exceptions in Article 37 of the LFPDPPP, no additional transfer will be made without your consent.
5. ARCO Rights and revocation of consent
As the data subject, you have the right to:
• Access your personal data held by SAIGU and know how it is processed.
• Rectify the data when it is inaccurate or incomplete.
• Cancel the data when you believe it is not required for any of the purposes, is being used for non-consented purposes, or the contractual relationship has ended.
• Object to the use of your personal data for specific purposes.
• Revoke the consent you may have granted, especially regarding secondary purposes and marketing communications.
• Limit the use or disclosure of your personal data.
To exercise any of these rights, you must send a request to info@saigucosmetics.com with the subject line “Exercise of ARCO rights”, including:
• The data subject’s full name, contact email address, and, where applicable, a mailing address to receive the response.
• A legible copy of a valid official ID (INE/IFE, passport, or other) that proves your identity or, where applicable, legal representation.
• A clear and precise description of the personal data in relation to which you wish to exercise the right, and of the specific right being exercised.
• Any other information that helps locate the data.
SAIGU will respond to the request within a maximum of 20 (twenty) business days from the date it is received, and will have an additional period of 15 (fifteen) business days to implement the response, in accordance with Articles 32 and 33 of the LFPDPPP.
If you believe your personal data protection rights have been violated, you may contact the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI) (www.inai.org.mx).
6. Ways to limit the use or disclosure of data
In addition to the ARCO rights described, you can limit the use or disclosure of your personal data through the following means:
• Setting your communication preferences from your user account on the site.
• Using the unsubscribe link included in each commercial email.
• Expressly requesting to be added to an exclusion list by emailing info@saigucosmetics.com.
• Signing up for PROFECO’s Public Consumer Registry (REPEP) to avoid receiving telephone advertising.
7. Cookies and similar technologies
The site uses cookies and similar tracking technologies to keep your session active, remember preferences, analyze site usage, measure performance, and personalize content and advertising. The cookie categories used are:
• Strictly necessary cookies: session, shopping cart, authentication.
• Analytics cookies: Google Analytics and equivalent tools to understand how the site is used.
• Advertising and social media cookies: Meta (Facebook/Instagram), Google Ads, TikTok, and equivalent platforms.
You can disable or delete cookies from your browser settings or, where applicable, from the cookie consent management banner available on the site.
8. Personal data security
SAIGU adopts reasonable administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing, in accordance with Articles 19 et seq. of the LFPDPPP.
9. Retention
Personal data will be kept for as long as necessary to fulfill the purposes for which it was collected, as well as to comply with applicable legal, tax, accounting, and fraud prevention obligations. Once those obligations have been met, the data will be blocked and later securely deleted.
10. Changes to the Privacy Notice
SAIGU reserves the right to modify this Privacy Notice at any time to adapt it to legislative or case-law developments, INAI criteria, or changes in its business practices. The changes will be published on this page, indicating the last updated date, and will be notified through the usual contact channels when they involve substantial changes.
11. Contact
For any question, complaint, suggestion, or request related to the processing of your personal data, you can contact SAIGU’s Data Protection Department at info@saigucosmetics.com, indicating in the subject line “Data Protection – Mexico”.
Last updated date: May 27, 2026.