Guatever

BUY NOW

Privacy Policy

Effective Date: October 1, 2026

This Privacy Policy applies to all data collection, processing, storage, sharing and management activities conducted on the website www.guatevermex.com, operated by Guatever México, S.A. de C.V. We are a Mexico-based enterprise located in Ciudad de México, dedicated to bringing gentle, safe flameless warmth to every Mexican home through our premium desktop aroma lamps and scenario lights. We take the protection of your personal privacy extremely seriously, and this document is designed to clearly outline our practices in full compliance with all applicable Mexican data protection regulations, including the Ley de Protección de Datos Personales and the revised Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), as well as aligned with international privacy standards such as the EU GDPR, CCPA/CPRA and other global data protection norms.

By accessing, browsing or making purchases on our website, you confirm that you have read, understood and agreed to all terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our services and accessing our platform.

1. Information We Collect

We only collect necessary personal information that is directly relevant to providing you with a smooth, secure and satisfying shopping experience. All data collection activities follow the minimum necessity principle stipulated by Mexican data protection laws, and we will never collect excessive information unrelated to our service scope.

1.1 Information You Provide Directly to Us

When you create an account, place an order, contact our customer service team, submit feedback or participate in our website interactive activities, you may voluntarily provide the following categories of information:

  • Full name, shipping address and billing address, to ensure accurate and timely delivery of your purchased flameless desktop aroma lamp, scenario light and related products
  • Contact information including your valid email address and phone number, so that we can send you order updates, delivery notifications, after-sales service reminders and respond to your inquiries promptly
  • Payment related information, including billing details, credit card or other payment method information, which is processed fully through compliant, certified third-party payment processors and we do not store complete sensitive payment credential data on our own servers
  • Account credentials, including your username and password you set for registering a member account on our platform
  • Any additional information you actively provide when submitting consultation forms, product reviews, FAQ inquiries or participating in our promotional activities, such as your preference for specific essential oil scents or scenario lighting modes for our aroma lamps

1.2 Information Collected Automatically When You Browse Our Website

When you visit www.guatevermex.com, our system will automatically collect non-personally identifiable and necessary technical information to optimize your browsing experience, including:

  • Your device type, operating system version, browser type and language settings
  • Your IP address, access time, pages you viewed, time spent on each page, click paths and other website access log data
  • Basic location information at the city level, to help us provide localized delivery service reminders and region-specific compliant service arrangements
  • Cookie and similar tracking technology data, which we use to remember your product preference settings, maintain your logged-in status during your visit, optimize website loading speed and provide you with a more personalized browsing experience. You can adjust your browser settings to refuse Cookies at any time, but please note that disabling Cookies may affect the normal use of some interactive functions of our website.

1.3 Sensitive Personal Data

In accordance with the provisions of the revised Mexican LFPDPPP, sensitive personal data refers to information with high privacy sensitivity, whose unreasonable use may lead to discrimination or high personal risk, including health data, biometric data, religious belief, political orientation and other categories. We will never intentionally collect, process or share any sensitive personal data from you without your explicit written, express consent. If we need to process any sensitive personal data for special service requirements in the future, we will strictly comply with the double requirements of Mexican law: obtaining your separate written explicit consent, and limiting the processing scope strictly within the necessity requirement that is clearly stated in this updated privacy statement.

2. Legal Basis for Processing Your Personal Data

All our personal data processing activities are based on legal, clear and legitimate bases stipulated by applicable data protection laws:

  • ‌Performance of Contract‌: The processing of your name, shipping address, contact information and payment related data is necessary for us to fulfill the purchase and sales contract you sign with us when placing an order, to complete the delivery of our flameless aroma lamp products, provide after-sales support and guarantee the normal performance of all service commitments.
  • ‌Legitimate Interests‌: Under the premise of not infringing on your basic privacy rights, we process your browsing log data and product preference information to optimize our website function, improve our product quality, enhance your shopping experience, and carry out reasonable and legitimate security protection work to maintain the stable operation of our e-commerce platform.
  • ‌Legal Compliance‌: We process your personal data when necessary to fulfill our legal obligations under Mexican local regulatory requirements, such as retaining transaction records for tax declaration, complying with regulatory data review requirements, and responding to formal legal requests from authorized government institutions.
  • ‌Explicit Consent‌: For any processing activities that do not fall into the above legal bases, we will first obtain your separate, voluntary and informed explicit consent. You have the full right to withdraw your previously given consent at any time, through the contact channels we provided in this policy. The withdrawal of consent will not affect the legality of data processing activities we have carried out based on your consent before the withdrawal.

3. How We Use Your Information

We will only use your collected personal information for the following clearly stated purposes, and will not expand the use scope beyond these purposes without notifying you and obtaining your corresponding confirmation:

  1. ‌Order Fulfillment and Delivery‌: We use your contact and address information to process your submitted orders, arrange delivery of our flameless desktop aroma lamps, scenario lights and related accessories, notify you of logistics updates, and resolve any possible exceptions that occur during the transportation process, to ensure you receive your purchased products safely and quickly. As a local Mexican brand with more than 6 years of experience in providing gentle, safe flameless warmth to Mexican families, we strictly control the delivery process to ensure every product reaches you in perfect condition.
  2. ‌Customer Service Support‌: We use your contact information to respond to your inquiries related to our product functions, such as the coverage space of our aroma lamps (which work perfectly for 20 to 25 square meter rooms), the usage of essential oil (3 to 5 drops will create a soft, pleasant mild scent), the continuous working time of the device (it can work steadily for up to 8 full hours on a full water tank), the cleaning process, operation noise, adjustable mist output and light brightness, and other common questions listed in our FAQ section. Our customer service team will assist you to solve all your problems related to product use, after-sales maintenance and return & exchange services through the contact information you provided.
  3. ‌Product and Service Optimization‌: We analyze the anonymous browsing data and feedback information you submitted, to continuously improve our product design, optimize website interactive experience, adjust the product display logic on our e-commerce platform, and develop new functions that better meet the usage habits of Mexican consumers, so that our aroma lamp products can better fit small desks, quiet bedrooms and cozy living corners in your daily space.
  4. ‌Security and Risk Prevention‌: We process your device information, access log data and account information to verify user identity, prevent fraud, malicious login, network attack and other illegal behaviors, protect the security of your account, transaction data and personal information, and maintain the overall security and stability of our entire e-commerce platform ecosystem.
  5. ‌Necessary Notification Delivery‌: We will send you important updates related to our services, including but not limited to privacy policy revision notifications, service function adjustment announcements, order exception reminders, product recall information that may involve your purchased goods, and other content that is necessary for you to know to ensure your legitimate rights and interests.
  6. ‌Marketing Communication (Only With Your Explicit Consent)‌: If you separately agree to receive our promotional emails or messages, we will send you information about new product launches, limited-time preferential activities, user exclusive welfare and other marketing content. You can unsubscribe from such marketing notification services at any time, through the one-click unsubscribe link attached at the bottom of each marketing email, or by contacting our customer service team directly.

4. Information Sharing and Third-Party Disclosure

We attach great importance to the confidentiality of your personal information, and will never sell, rent or trade your personal data to irrelevant third parties for their commercial marketing purposes without your explicit separate consent. All third-party sharing activities we carry out strictly follow the requirements of Mexican data protection laws, and are only limited to the following scenarios:

  • ‌Authorized Service Partners‌: We will share necessary information with third-party service providers who assist us to operate our e-commerce business, including certified logistics and delivery companies, PCI-DSS compliant payment processing institutions, cloud service vendors that provide secure website hosting services, and professional IT maintenance service providers. All these third-party partners will sign strict data confidentiality agreements with us, they can only process your personal data according to our clear instructions, and cannot use your information for any purposes other than the services they provide for us.
  • ‌Legal Requirement Scenarios‌: We may disclose your personal information when we are required by mandatory legal provisions, court orders, or formal requests from authorized Mexican regulatory agencies (including the relevant data protection supervisory authority INAI and other competent government departments), to fulfill our legal obligations and protect the legitimate rights and interests of our company, users and the public.
  • ‌Corporate Transaction Transfer‌: In the event of our merger, acquisition, asset transfer or other similar corporate transaction, your personal information as a part of the enterprise operating assets may be transferred to the corresponding successor entity. We will require the new entity to continue to comply with all the terms of this Privacy Policy to ensure the continuity of your privacy protection rights, and we will notify you in advance through the public announcement on our website before the transfer of personal data occurs.

5. Data Retention Period

We strictly follow the data retention requirement of the minimum necessary principle stipulated by Mexican local data protection laws. We will not retain your personal information for longer than the time necessary to achieve the specific collection purpose we stated in this policy:

  • For the personal data related to your order and transaction records, we will retain it for the period required by Mexican commercial and tax laws, which is no less than 5 years after the completion of the corresponding order, to fulfill legal compliance requirements such as tax verification and after-sales service traceability.
  • For your account registration information, we will retain it for the entire period until you submit an application to delete your account, and complete the corresponding identity verification process.
  • For the website browsing log data that does not contain complete personal identifiable information, we will delete or anonymize it no later than 12 months after the data is generated.
  • After the data retention period expires, we will completely delete or anonymize all your personal information in a secure, irreversible way, to ensure that the data can no longer be associated or traced back to your specific personal identity.

6. Your Rights as a Data Subject

In full compliance with the provisions of the revised Mexican LFPDPPP and other applicable global privacy regulations, you enjoy the following complete series of data subject rights related to your personal information processing activities:

  1. ‌Access Right‌: You have the right to submit a request to us to obtain a copy of all your personal data that we hold, and obtain the detailed information about how we process your data.
  2. ‌Correction Right‌: If you find that the personal information we hold about you is inaccurate, incomplete or outdated, you have the right to request us to correct and update the relevant information free of charge.
  3. ‌Deletion Right (Right to be Forgotten)‌: You have the right to request us to delete your personal information under specific circumstances, including when the data is no longer necessary for the original collection purpose, when you withdraw your consent for data processing and there is no other legal basis for us to continue processing, or when our data processing activities violate relevant legal provisions. We will complete the deletion process within the time limit stipulated by law, except for the data that we are required to retain by mandatory legal regulations.
  4. ‌Restriction of Processing Right‌: You have the right to request us to restrict the processing of your personal data, under the circumstances that you dispute the accuracy of the data, the processing is illegal but you refuse to delete the data, or we no longer need the data but you require us to retain it for the establishment, exercise or defense of legal claims.
  5. ‌Data Portability Right‌: You have the right to request us to provide your personal data that you have provided to us, in a structured, commonly used and machine-readable format, or to transmit the data directly to the other data controller you designated, where technically feasible.
  6. ‌Objection Right‌: You have the right to object to our processing of your personal data which is based on our legitimate interest basis at any time, for reasons related to your specific situation. We will stop the corresponding processing activities unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
  7. ‌Right to Withdraw Consent‌: You can withdraw any consent you previously gave to us for data processing activities at any time, with no adverse consequences other than that we may not be able to provide you with the corresponding services that rely on your consent to process the data.

If you need to exercise any of the above rights, you can submit your request to us through the contact channels listed in Section 8 of this policy. We will respond to your request within a maximum of 15 working days after we receive your application and complete the necessary identity verification. If your application is complex and requires extended processing time, we will notify you in time and the total processing period will not exceed 30 working days as stipulated by Mexican law. We will not charge any fees for processing your reasonable rights application, unless your application is obviously repetitive, excessive or abusive, in which case we may charge a reasonable administrative fee as permitted by law.

7. Data Security Protection

We have implemented a series of industry-leading technical and organizational security measures, to fully protect your personal information from unauthorized access, use, disclosure, modification, damage or loss:

  • All data transmission between your browser and our website uses 256-bit SSL/TLS encryption technology, to ensure that your personal data and transaction data will not be illegally intercepted during the transmission process on the public network.
  • All the personal data we store is encrypted at rest through the AES-256 standard encryption algorithm, and is hosted in secure certified cloud server locations that meet Mexican data security regulatory requirements.
  • We have established a strict internal data access permission control mechanism, only the authorized employees who need to contact your data to perform their job duties can obtain the necessary minimum access permission to your personal information, and all access operations are fully logged and audited.
  • We have formulated a complete personal data breach emergency response plan. If a personal data security incident that may endanger your personal information security occurs, we will immediately start the emergency response process, take effective control measures to reduce the risk, and notify you and the relevant Mexican data protection regulatory authority in strict accordance with the time requirements stipulated by local laws, as soon as we confirm the nature and scope of the incident.

All our data security practices have taken into full account the requirements of the Mexican LFPDPPP on data security and the guidelines issued by the local regulatory authority for cross-border data transmission risk assessment. For any data transmission activities that involve transferring your personal data outside the territory of Mexico, we will strictly conduct a full cross-border data transmission risk assessment in advance, and implement appropriate safeguard measures to ensure that the overseas recipient can provide a level of personal data protection that meets the standards required by Mexican laws.

8. Contact Information

If you have any questions, comments, suggestions related to this Privacy Policy, or need to submit an application to exercise your data subject rights, you can contact our data protection responsible team through the following official contact channels at any time:

  • Operating Entity: Guatever México, S.A. de C.V.
  • Official Website: www.guatevermex.com
  • Contact Email: [email protected]
  • Physical Contact Address: Kutz C2 Lt. 17, Mérida, Yucatán, C.P. 97308, México
  • Contact Phone Number: +52 999 414 9944‌

If you are not satisfied with our response to your privacy related inquiry, you also have the right to submit a complaint to the local Mexican data protection competent authority, the National Institute of Transparency, Access to Information and Personal Data Protection (INAI), according to the procedures stipulated by local laws.

9. Updates to This Privacy Policy

We may update and revise the terms of this Privacy Policy from time to time, to adapt to the adjustment of new legal regulatory requirements, the update of our website service functions, and the feedback from user privacy demands. When we make major changes to this Privacy Policy, we will prominently post the updated version on the homepage of our website www.guatevermex.com, and clearly mark the new revised effective date. For the changes that will significantly affect your legitimate privacy rights, we will also send you a separate notification through your reserved contact email. Your continued access to our website and use our services after the effective date of the revised Privacy Policy will be deemed that you have fully read, understood and agreed to the updated terms of the new Privacy Policy. We recommend that you review this policy periodically to stay informed about our latest privacy protection practices.