Privacy notice

Privacy notice template. Before launching the promotion, the data controller must complete its legal name, address and contact email, and adapt this notice to its actual practices.

This notice describes how we process your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

1. Who is responsible for your data?

[Data controller's legal name], which operates Tienda 420, with its address at [Data controller's address]. You can contact us at [Privacy email].

2. What data do we collect?

Your name, phone number, whether you are currently in Mexico City, your availability to visit a store and your chosen visit period. We also record the code, its validity, the gift hand-over and, where applicable, advertising attribution data: UTM tags, click identifiers and Meta cookies, event identifier, page address and browser data. We do not request sensitive personal data.

3. What do we use it for?

To register your participation, generate and verify a single code per phone number, coordinate your visit, contact you about your gift and prevent duplicate entries. These are the purposes necessary for the promotion. We do not use your number for marketing unrelated to this promotion.

When advertising measurement is enabled, we use identifiers and events to evaluate the campaign that brought you to the promotion. You can ask us to limit this use via the privacy email without losing your right to the gift.

4. Providers and advertising measurement

We use Google as a provider to store and process promotion records. If measurement is enabled, we share registration and hand-over events and advertising identifiers with Meta. Your phone number and name are sent to Meta as a cryptographic hash (SHA-256); this does not make the data anonymous. These providers may process information outside Mexico under the applicable agreements and obligations.

5. Cookies and local storage

The site may use Meta cookies (_fbc and _fbp) for advertising attribution, and session storage to keep campaign tags. You can manage or block cookies in your browser settings and ask for alternative ways to participate in store.

6. Your rights and choices

You can access your data, correct it, request its deletion or object to its processing (ARCO rights), withdraw your consent or limit the use and disclosure of your data. Write to the privacy email with your name, the right you want to exercise, a description of your request and a way to reply to you. We will only ask for what is necessary to verify your identity.

We will respond within 20 days of receiving a complete request. If it applies, we will carry it out within 15 days of our response; justified extensions will follow the law. Withdrawing consent is not retroactive and may prevent us from continuing a process that requires that data.

7. Retention and protection

We limit access to authorized staff and keep your data only for as long as needed to run and document the promotion and meet applicable obligations. After that, we block and delete it where appropriate. You can ask about the applicable retention period via the privacy email.

8. Changes to this notice

We will publish any update on this same page. You can request the current version by email or in store.

Last updated: October 31, 2026.