Privacy Notice

Identity and Address of the Data Controller

Rucua, with address in the city of Merida, Yucatan, Mexico (hereinafter "Rucua" or "we"), is responsible for the processing and protection of your personal data, in strict adherence to the Federal Law on the Protection of Personal Data Held by Private Parties (the "Law").

Personal Data We Collect

To carry out the purposes described in this notice, we will collect the following personal data when you visit our store hosted on Shopify or make a transaction:

• Identification and contact data: Full name, billing address, shipping address, email address, and phone number.

• Financial or patrimonial data: Payment information and transaction method (processed securely through certified payment gateways; Rucua does not store your card numbers).

• Browsing data (Cookies): IP address, browser type, time zone, and data about your interaction with our website.

Purposes of Data Processing

Your personal data will be used for the following primary purposes, which are necessary for the service you request:

1. Process, authenticate, and deliver your orders.

2. Manage shipping logistics, including customs procedures if applicable.

3. Issue tax receipts and process returns or warranties.

4. Prevent fraud and ensure platform security.

Secondarily, we will use your information for:

1. Send you marketing communications, new product launches, and exclusive Rucua promotions.

If you do not want your data to be processed for secondary purposes, you can indicate this by sending an email to [Rucua's email address].

Data Transfer

To operate efficiently, we share your data with third parties under strict confidentiality standards:

• Shopify Inc.: Platform that hosts our e-commerce infrastructure. (See their policy: https://www.shopify.com/legal/privacy).

• Logistics and Customs Providers: Parcel companies (national and international) necessary to deliver your products.

• Competent authorities: When required by legal or tax mandate (e.g., SAT).

ARCO Rights and Revocation of Consent

You have the right to know what data we have (Access), request its correction (Rectification), ask for its deletion (Cancellation), or oppose its use (Opposition). To exercise your ARCO Rights, send a formal request to [Rucua's email address] detailing your request, accompanied by an official identification. We will respond within a maximum of 20 business days.

Use of Tracking Technologies

We use cookies and web beacons to monitor browsing behavior. You can disable these technologies in your browser settings, although this could affect the store's functionality.

Modifications to the Privacy Notice

We reserve the right to update this notice to reflect operational or legislative changes. Updates will be permanently published in this section of our website.

Last updated: July 2, 2026.