Shop Now

Privacy Policy

‌Effective Date: October 3, 2026‌

This Privacy Policy is issued by ‌COMPAÑÍA COMERCIAL CIMACO S.A. DE C.V.‌ (hereafter referred to as “we”, “us”, or “our”), the data controller responsible for your personal information when you visit, browse, and make purchases on our e-commerce website www.cimacoshop.com (hereafter referred to as the “Site”). We are fully committed to protecting the privacy rights and personal data of all our users (hereafter referred to as “you” or “the user”), and this document is designed to clearly explain how we collect, use, store, share, protect and manage your personal information in strict compliance with applicable global data protection laws, including the General Data Protection Regulation (GDPR), the Mexican Federal Law for the Protection of Personal Data Held by Private Parties, and other relevant regional regulatory requirements.

By accessing our Site, creating an account, browsing our product catalog, placing orders, or interacting with any of our services, you acknowledge that you have read, understood, and agreed to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our Site and services immediately. This policy applies to all data processing activities conducted through our Site, our associated customer support channels, and all e-commerce services we provide, including but not limited to the sale of household daily essentials, bathroom storage solutions, laundry organization products, and food sealing accessories that we curate for our global user base.

1. Data Controller Information

Pursuant to the requirements of global personal information protection regulations, we are disclosing our full information as the personal information data controller in a prominent, clearly marked format as required by regulatory standards:

  • Full Entity Name: COMPAÑÍA COMERCIAL CIMACO S.A. DE C.V.
  • Registered Physical Address: Av. Hidalgo Pte. 399, Col. Centro, Torreón, Coahuila, C.P. 27000, México
  • Official Contact Email: voidk@cimacoshop.com
  • Customer Support Contact Number: +52 871 716 0160

You may reach out to us at any time using the above contact details to submit inquiries, requests related to your personal data, or privacy-related complaints, and we will respond to your legitimate request within no more than 15 business days after verification of your identity.

2. Principles Governing Our Personal Data Processing

All of our personal information collection and processing activities strictly follow the following core principles, to ensure that we never overstep the boundaries of user trust or legal requirements:

  1. ‌Lawful, Fair and Necessary Principle‌: We only collect your personal data on the basis of your explicit consent, or as required for the performance of a sales contract between you and us, or as mandated by applicable law. No data collection activity will be conducted without a clear, legitimate, and explicitly stated purpose.
  2. ‌Purpose Limitation and Data Minimization Principle‌: The personal data we collect will be limited strictly to the minimum scope necessary to fulfill the stated service purpose. We will never collect any personal information that is irrelevant to the operation of our e-commerce platform, the completion of your orders, or the provision of the services you request.
  3. ‌Transparency Principle‌: All our data processing rules are disclosed to you in plain, easily understandable language, free of overly complex legal jargon, so that you can fully understand how your personal information is being handled before you choose to share it with us.
  4. ‌Security and Accountability Principle‌: We implement multi-layered technical and administrative safeguards to protect your personal data from unauthorized access, disclosure, alteration, destruction, or leakage, and we take full legal responsibility for all data protection incidents that occur under our management.
  5. ‌User Rights First Principle‌: We have established convenient, low-threshold access channels for you to exercise all your statutory rights related to your personal data, and will never impose unreasonable barriers or charge unnecessary fees for legitimate rights exercise requests.

3. Types of Personal Information We Collect, Collection Methods and Specific Purposes

In full compliance with the structured information disclosure requirements laid out in the latest global e-commerce personal information regulations, we clearly outline all categories of data we process, how we collect it, the frequency of collection, the permissions we access, and the explicit purposes for each processing activity below:

3.1 Information You Voluntarily Provide to Us

We collect the information you actively submit when interacting with our Site, under the following scenarios:

  1. ‌Account Registration and Management‌: When you choose to create a user account on our Site, we collect the mobile phone number or email address you provide, alongside the account password you set. We use this information to verify your identity, ensure the uniqueness and security of your account, and eliminate unauthorized login risks. You may also voluntarily choose to submit additional non-mandatory information including your preferred nickname, avatar, and personalized household preference tags, which we only use to customize your shopping experience on our platform.
  2. ‌Order and Transaction Processing‌: When you place an order for our curated daily household products, we collect the consignee name, contact phone number, delivery address, and payment verification information you provide. Our payment processing system only receives partial necessary payment information to complete transaction settlement, and we never store your full bank card number, complete payment password, or other highly sensitive financial data. All payment sensitive information is processed directly by our certified third-party payment service providers.
  3. ‌Customer Support and Communication‌: When you contact our customer service team to inquire about product specifications, track your order progress, submit return requests, or provide product feedback, we will collect the order number, problem description, and relevant supporting images (such as photos of received items) that you submit, to help our support team resolve your request quickly and accurately.
  4. ‌Marketing and Subscription Management‌: If you voluntarily subscribe to our email newsletter to receive updates on new product launches, limited-time discount activities, and small daily living tips, we will collect your subscribed email address, and you may opt out of these marketing communications at any time by clicking the unsubscribe link included in every marketing email we send.

3.2 Information We Automatically Collect When You Use Our Site

When you browse our product catalog, click product pages, add items to your shopping cart, or complete other interactions on our Site, we automatically collect the following data in accordance with the minimum necessary principle:

  1. ‌Device and Access Log Information‌: We collect your device model, operating system version, browser type, IP address, network operator information, unique device identifier, access timestamp, page browsing records, click behavior, and shopping cart operation records. This data is collected to optimize our Site’s loading speed, troubleshoot system malfunctions, prevent fraudulent login activities, and ensure the stable operation of our platform across different device types.
  2. ‌Cookies and Similar Tracking Technologies‌: We use standard Cookies, pixel tags, and other similar web tracking technologies to collect non-identifiable browsing data, which helps us remember your shopping cart contents, save your preferred language and region settings, and improve the overall usability of our Site. You may adjust the privacy settings on your browser to reject Cookies at any time, but please note that blocking necessary Cookies may cause some functions of our Site (such as saving your shopping cart status) to work abnormally.
  3. ‌Optional Location Information‌: If you explicitly grant our Site location access permissions on your device, we will collect your approximate geographic location (city level only, we never collect precise real-time location information). This data is only used to recommend local logistics solutions, display region-specific currency and tax information, and provide you with more accurate delivery time estimates. You may turn off location permissions in your device system settings at any time, and this operation will not affect your ability to browse products and place orders normally on our Site.

3.3 Explicit Statement of Processing Necessity

All categories of personal information we collect are strictly necessary to provide you with complete e-commerce shopping services. The collection of sensitive personal information, including location data, contact information, and delivery addresses, is only conducted after obtaining your explicit consent, and any collection of this data will not cause disproportionate negative impact on your legitimate rights and interests.

4. How We Use Your Personal Information

All of your personal data is used strictly in accordance with the explicitly stated purposes we disclose to you, and we will never repurpose your data for any new uses that are not outlined in this Privacy Policy without first obtaining your separate additional consent. The core use scenarios of your data include:

  1. ‌Fulfillment of E-commerce Services‌: We use your order information, contact details, and delivery addresses to process your payment, arrange delivery via our partnered logistics providers, track your package status, process return and refund applications, and fully complete all the steps required to deliver your purchased products to you successfully.
  2. ‌Personalized Shopping Experience Optimization‌: We analyze your anonymized browsing history, product collection records, and past purchase records to recommend products that match your household organization needs, display the product categories you are most interested in first on our homepage, and help you quickly discover new small daily joy items that fit your lifestyle. You may turn off all personalized recommendation functions at any time in the “Privacy Settings” section of your account page, and after this operation, we will only display non-personalized general product listings to you.
  3. ‌Platform Security and Risk Prevention‌: We use your device information, login IP address, and account behavior records to identify abnormal login activities, prevent fraudulent order submissions, combat malicious transaction fraud, and maintain a safe and fair shopping environment for all users of our platform.
  4. ‌Product Improvement and Service Upgrade‌: We process fully de-identified, anonymized user behavior data for internal statistical analysis, to optimize the page layout of our Site, adjust our product selection to better meet user demand, fix existing functional flaws, and continuously improve the overall service quality of our platform.
  5. ‌Legal Compliance Obligations‌: Under the circumstances where we receive formal legal documents issued by judicial organs, administrative supervision departments, or other authorized government agencies, we may process and disclose your personal information to fulfill our statutory legal obligations, and ensure that we fully comply with the regulatory requirements that apply to our operations.

5. Personal Information Sharing, Transfer and Disclosure Rules

We will never sell, rent, or trade your personal information to any third party for commercial marketing purposes without your explicit separate consent, and all scenarios where we share your data with external parties strictly follow the principle of legality, necessity, and transparency:

  1. ‌Sharing with Authorized Service Partners‌: We only share your necessary personal data with strictly vetted third-party service providers who are required to assist us in completing order fulfillment and platform operation services. These partners include:
    • Logistics service providers: We only share the consignee name, contact phone number, and delivery address required to complete your order shipment. All logistics partners are contractually required to delete your delivery information immediately after the order is successfully delivered, and we conduct regular audits to ensure they comply with our personal data protection requirements.
    • Certified payment service institutions: We share only the necessary transaction amount and order verification information that is required to complete fund settlement. All data shared with payment providers is processed in compliance with global payment card industry data security standards (PCI DSS).
    • Platform operation service providers: We may share fully de-identified, anonymized user statistical data with our data analysis, website hosting, and customer service system providers, which cannot be used to identify any individual natural person at all, and poses no privacy risk to you.
      All our third-party partners are bound by strict data protection confidentiality agreements, which prohibit them from using your shared personal information for any purposes outside the scope of assisting us to provide services to you. You may view the full list of our current third-party partners in the “Third-Party Service List” section of our account privacy settings, and you may submit a request to stop sharing your data with a specific non-mandatory partner through our customer support channel at any time.
  2. ‌Personal Information Transfer‌: We will not transfer your personal information to any third party outside of the scenarios outlined in this Privacy Policy. If a business merger, acquisition, or asset transfer occurs in the future, we will require the new entity that takes over our business to continue to be bound by the terms of this Privacy Policy, and we will notify you via prominent notice on our Site 30 days in advance before any transfer of your personal data takes place.
  3. ‌Compulsory Disclosure Under Legal Requirements‌: We may disclose your personal information when we receive legally valid official requests from government authorities, including court summonses, administrative investigation orders, or other regulatory documents that legally require us to provide user data. When we are required to do so, we will only disclose the minimum scope of personal data that is explicitly required by the legal document, and we will make reasonable efforts to verify the legality of the request before disclosure.

6. Personal Data Storage Period and Cross-Border Processing Rules

We only retain your personal information for the shortest period necessary to fulfill the purposes for which the data was collected, as stipulated by relevant legal requirements:

  • For account related information: We will retain your basic account information for the full duration that your account remains active. After you submit a valid account cancellation request, we will delete all your personal non-statutory retention data completely within 15 working days, except for a small amount of order data that we are required to retain for tax and accounting purposes in accordance with Mexican commercial law, which we will delete after the statutory retention period of 10 years expires.
  • For order transaction information: We will retain your basic order record for as long as needed to handle after-sales service, return, and warranty requests, after which the data will be anonymized for statistical analysis purposes.
  • For marketing communication records: We will retain your subscribed marketing email address only for as long as you do not unsubscribe from our newsletter service, and we will remove your email from our marketing mailing list within 7 working days after you submit an unsubscribe request.

Our servers that store user personal data are located within certified secure data centers in North America and the European Union. In the event that any of your personal information needs to be transmitted across national borders for processing, we will ensure that the cross-border data transfer fully complies with the requirements of applicable data protection laws, and we will implement appropriate data protection measures (including signing standard contractual clauses approved by relevant regulatory authorities, or conducting data privacy impact assessments) to ensure that your personal data receives the same level of protection after cross-border transfer as it receives within your country of residence.

7. Your Statutory Personal Information Rights and Exercise Methods

As a personal data subject, you enjoy all the statutory rights granted to you by applicable data protection laws, and we have established multiple convenient channels for you to exercise these rights easily:

  1. ‌Right to Access and Review‌: You may log into your account on our Site at any time, go to the “Personal Information Management” page, and view all the personal information we hold related to you, including your account basic information, historical order records, saved delivery addresses, and active authorization records.
  2. ‌Right to Correction and Update‌: If you find that any of your personal information stored on our platform is inaccurate or incomplete, you may modify it directly in your account settings page, or contact our customer support team to submit a correction request, and we will update the relevant data for you promptly after verifying your identity.
  3. ‌Right to Deletion (Right to be Forgotten)‌: You may submit a request to us to delete your personal information under the following circumstances: you believe that we no longer need to process your personal information for the original stated purpose, you have revoked your previously granted consent to data processing, or you believe that our processing activities of your personal information violate applicable laws. We will process your deletion request within 15 working days after verification, except for data that we are legally required to retain.
  4. ‌Right to Withdraw Consent‌: You may withdraw any consent you previously granted to us for processing your personal information at any time, including revoking location permission authorization, unsubscribing from marketing emails, or turning on the setting to disable personalized recommendation. Please note that after you withdraw certain consents, some corresponding functions of our Site that rely on that specific data processing may no longer work normally, but this will not affect your ability to browse product pages and make basic order purchases.
  5. ‌Right to Data Portability‌: You may submit a request to us to obtain a copy of your basic personal data and order data in a machine-readable, structured common format, and we will provide this data to you free of charge within 30 working days after verifying your identity.
  6. ‌Right to Account Cancellation‌: You may submit an account cancellation request directly in the “Security Settings” section of your account page. After we complete the identity verification process, we will finish processing your account cancellation within 15 working days, and fully delete all your personal data in our system except the data we are required to retain by law.

To protect the security of your account and personal information, we will require you to verify your identity before processing any of the above rights exercise requests, to prevent malicious third parties from making unauthorized requests to access or delete your personal data. We do not charge any administrative fees for all legitimate personal rights exercise requests, unless your request is obviously repetitive, excessive, or places an unreasonable burden on our system resources, in which case we may charge a reasonable administrative fee as permitted by law. If for any reason we are unable to fulfill your rights exercise request, we will provide you with a written explanation within 15 working days.

8. Personal Information Security Protection Measures

We attach great importance to the security of your personal information, and we have built a multi-layered, full-coverage technical and administrative security protection system to minimize the risk of data leakage, unauthorized access, or misuse:

  1. ‌Technical Security Protection‌: All sensitive personal data including your account password and payment related information are transmitted using SSL/TLS industry standard end-to-end encryption protocols, and stored in our database with AES military-grade encryption algorithm. We have deployed industrial-grade firewalls and real-time intrusion detection systems on all our servers, to continuously monitor for malicious attack activities and block unauthorized access attempts 24 hours a day. We conduct quarterly full-platform security vulnerability scans and regular third-party security penetration testing, to fix all potential security risks in a timely manner.
  2. ‌Administrative Security Management‌: All of our internal employees who have access to user personal information are required to complete mandatory data protection privacy training before taking up their positions, sign strict non-disclosure agreements, and are only granted the minimum level of data access permissions required to complete their job duties. We conduct regular annual data security audits, and any employee who violates our data protection rules will face disciplinary action, including dismissal, and will be held legally responsible if their actions cause data security incidents.
  3. ‌Data Breach Emergency Response Mechanism‌: We have a fully documented Personal Information Security Incident Emergency Response Plan. If a personal data security incident that leads to user information leakage occurs, we will immediately activate the emergency response procedure, take remedial measures to contain the impact as soon as possible, notify all affected users through prominent on-site notices and email within 72 hours after we identify the incident, and report the situation to the relevant data regulatory authorities in accordance with legal requirements.

9. Protection of Minors’ Personal Information

Our e-commerce platform and associated services are exclusively intended for use by users who are 18 years of age or older. We do not intentionally collect any personal information from children under the age of 18. If we discover that we have accidentally collected the personal data of a minor under 18 years old without the verified explicit consent of their parent or legal guardian, we will take immediate measures to delete the relevant personal information completely from our storage systems. If you believe that we have collected personal information from a minor, please contact us immediately via our official contact channels, and we will process the deletion request as soon as possible.

10. Updates to This Privacy Policy

We may occasionally update and revise the terms of this Privacy Policy to adapt to changes in our service operation, meet new regulatory requirements, or respond to user feedback. When we make significant changes to this Privacy Policy, we will post the updated version on the Privacy Policy page of our Site, adjust the “Effective Date” mark at the top of the document, and notify you via a prominent pop-up notice on our homepage at least 30 days before the changes take effect. Your continued use of our Site and services after the effective date of the updated Privacy Policy will be deemed as your agreement to the revised terms. If you do not agree with the content of the updated policy, you may stop using our services and apply to cancel your account before the new policy takes effect.

11. How to Contact Us

If you have any questions, comments, complaints, or requests related to this Privacy Policy or our personal information processing activities, you may contact us through any of the following channels:

  • Mailing Address: Av. Hidalgo Pte. 399, Col. Centro, Torreón, Coahuila, C.P. 27000, México
  • Official Email: voidk@cimacoshop.com
  • Customer Support Phone: +52 871 716 0160