This Privacy Policy sets out how COMERCIALIZADORA Y SERVICIOS JCGURO, S.A. DE C.V. collects, uses, stores, and protects your personal data when you visit or make a purchase from www.lectistand.com.
1. Data Controller
The data controller responsible for processing your personal information under applicable Mexican laws and the General Data Protection Regulation (GDPR) for customers in the European Economic Area (EEA) and the United Kingdom is:
- Company Name: COMERCIALIZADORA Y SERVICIOS JCGURO, S.A. DE C.V.
- Tax Identification Number (RFC): CSJ211207TCA
- Brand Name: lectistand
- Official Website: www.lectistand.com
- Registered Business Address: Prolongación de Pedro C. Colorado S/N, Departamento 1, Colonia Mayito, Centro, Tabasco, C.P. 86098, México
- Email Contact: read@lectistand.com
- Telephone Contact: +52 4422290128
2. Information We Collect
When you interact with our website or place an order for reading stands, we collect necessary personal details, including:
- Contact Information: Full name, email address, telephone number.
- Delivery Information: Shipping address, billing address.
- Transactional Information: Order details, purchase history, and communication records.
3. Purpose and Legal Basis for Processing
We process your personal data for the following lawful purposes:
- Fulfillment of Contract: Processing orders, issuing order confirmations, arranging international dispatch, and providing customer support.
- Legal and Tax Obligations: Maintaining transaction records to comply with accounting, tax, and regulatory compliance duties in Mexico and Europe.
- Legitimate Business Interests: Responding to customer enquiries, improving service delivery, and maintaining website operational integrity.
4. Payment Processing by Stripe
All financial transactions submitted via our website are handled directly and securely by our third-party payment processor, Stripe.
- No Storage of Payment Card Details: We do not collect, process, handle, or store full payment card details, credit card numbers, or security codes (CVV) on our internal servers.
- Independent Payment Provider: Stripe operates as an independent payment gateway responsible for processing payment transactions in strict accordance with PCI-DSS standards and international financial security requirements.
- Data Handling: Your payment information is processed in accordance with Stripe’s privacy standards and security protocols.
5. Data Transfer and Third Parties
Your personal information is shared only with essential service providers necessary to operate our online store and fulfill purchases for European customers:
- Logistics Partners: Transport and courier companies handling physical order delivery to European destinations.
- Payment Processor: Stripe, for secure execution of payment transactions.
International transfers of personal data from the EEA/UK to our operations in Mexico are conducted using appropriate technical and organizational measures to ensure an adequate level of data protection. We do not rent, sell, trade, or share your personal information with third parties for marketing purposes.
6. Data Retention Period
We retain personal data only for as long as necessary to fulfill the operational purposes for which it was collected, or as required by statutory legislation:
- Transactional & Tax Records: Retained for 5 to 10 years following completion of an order, in accordance with applicable commercial and statutory tax record retention laws in Mexico and European standards.
- Customer Support Enquiries: Retained for up to 2 years after resolution of the query to assist with subsequent operational or delivery references.
Upon expiry of the applicable retention period, personal data is securely erased or anonymized.
7. Data Subject Rights (EU / EEA / UK Customers)
Under applicable European data protection legislation (GDPR / UK GDPR), European customers hold specific legal rights regarding their personal data:
- Right of Access: The right to request copies of personal data held by us.
- Right to Rectification: The right to request correction of inaccurate or incomplete personal information.
- Right to Erasure: The right to request deletion of personal data, subject to statutory legal and accounting retention duties.
- Right to Restrict or Object to Processing: The right to limit or object to the processing of personal data under specific statutory conditions.
To exercise any of these rights, please submit a formal written request to read@lectistand.com.
8. Updates to This Policy
We reserve the right to revise this Privacy Policy periodically to reflect changes in legal, regulatory, or operational requirements. Any updated policy will be published directly on www.lectistand.com.