Joes LTD SAPI de CV (“Aora México”), with address at Av. Horacio #1022, PH, Polanco IV Secc., Miguel Hidalgo, CP 11550, Mexico City, is responsible for the processing of your personal data, and in This sense informs you of the following:

1. Identity and Address of the Responsible:
   Joes LTD SAPI de CV, domiciled at Av. Horacio #1022, PH, Polanco IV Secc., Miguel Hidalgo, CP 11550, Mexico City, is the entity responsible for the processing of your personal data.
   
2. Personal Data and Sensitive Personal Data:

By way of example, but not limitation, we collect the following personal data:

• Full name
• Home
• Telephone (landline and/or mobile)
• Email
• Birthdate
• Gender

Additionally, if you decide to voluntarily provide it during the registration process or at any other time, we may collect information related to your social networks such as:

• YouTube channel
• Twitter account
• Facebook page
• Among other

It is important to mention that we do not collect sensitive personal data without your express consent. Sensitive personal data are those that can reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, and sexual preference.

3. Purposes of Data Processing:

Your personal data will be processed for the following primary purposes, which are necessary for the contractual and/or commercial relationship you have with us:

• Process, track and confirm your purchases and transactions made in our store.
• Schedule, coordinate and notify you about the status of shipments of purchased products.
• Attend, process and manage returns, exchanges or guarantees of purchased products.
• Verify the legitimacy, authenticity and security of transactions carried out to prevent fraud and guarantee your financial security.

Additionally, with your express consent, your personal data may be processed for the following secondary purposes:

• Send you information, promotions and offers about our products and services.
• Invite you to participate in surveys, raffles or events organized by “Aora México”.
• Provide you with personalized recommendations of products and services that may be of interest to you.
• Improve our store, services and products through the analysis of your preferences, interactions and feedback provided.
  

4. Mechanisms to Express Refusal for Data Processing:

You have the right to refuse your consent to the processing of your personal data with respect to purposes that are not necessary or that are not directly related to the service or product you request from us. To express your refusal, you must follow the procedure detailed below:

Refusal Request: Send a refusal request to the email contacto@aoramakeup.com, clearly indicating the secondary purposes for which you do not want your personal data to be processed.

Identification: Provide a copy of an official identification to verify your identity, which will be used solely for this purpose and will be deleted once the process is completed.

Response: We undertake to respond to your request within a period of no more than 5 business days, informing you of the action taken as a result of your refusal request.

Additionally, at any time you can revoke the consent you have given for the processing of your personal data, using the same procedure described above. Revocation of consent may lead to the impossibility of continuing to provide certain services.

5. Data Transfers:

Your personal data may be shared with related entities, third-party service providers or competent authorities, under the following circumstances:

Related Entities: We may share your data with our affiliated, subsidiary or controlling companies, for the purpose of carrying out internal administrative activities and improving the quality of our services and products.

Third Party Service Providers: Your data may be shared with third party service providers that assist us in operations such as payment processing, product delivery, management of the e-commerce platform, among others. These providers have a contractual obligation to maintain the confidentiality of your data and use it only for the purposes for which it was shared.

Competent Authorities: In specific cases, your data may be shared with competent authorities, either to comply with legal provisions, regulations, legal processes, government requests, or to protect our rights and property.

Transfers with Consent: In any other situation, your personal data will only be shared with third parties if we have your express consent.

Data transfers will be carried out under the strictest security protocols to guarantee the confidentiality and integrity of your personal data. We will also ensure that the receiving parties comply with this Privacy Policy and applicable data protection laws.

For more information about data transfers, or if you would like to know the third parties with whom we share your data, you can contact us at contacto@aoramakeup.com.

6. ARCO Rights and Revocation of Consent:

You have the right of Access, Rectification, Cancellation and Opposition (ARCO Rights) regarding your personal data, as well as the revocation of the consent granted for their processing. These rights are described below:

Access: You have the right to know what personal data we have, what it is used for, and the conditions of use we give it.

Rectification: You have the right to request the correction of your personal data if it is outdated, inaccurate or incomplete.

Cancellation: You can request the deletion of your personal data from our records or databases when you consider that they are not being used in accordance with the principles, duties and obligations provided for in the regulations.

Opposition: You have the right to oppose the processing of your personal data with respect to any of the purposes established in this policy, as long as there is a legitimate cause and specific situation that justifies it.

Revocation of Consent: At any time, you have the right to revoke the consent you have given for the processing of your personal data, which will not have retroactive effects.

Procedure to Exercise ARCO Rights and Revocation of Consent:

To exercise your ARCO Rights or revoke your consent, you must submit a written request sent to the email contacto@aoramakeup.com, including the following information:

Full name and address or other means of receiving notifications.

Copy of your official identification or document that proves your identity or, where applicable, legal representation.

Clear and precise description of the personal data with respect to which you seek to exercise any of the ARCO Rights, or revoke your consent.

Any other element or document that facilitates the location of your personal data.

We undertake to respond to your request within a period of no more than 20 business days from the day the request was received, through the means you have indicated to receive notifications.

7. Mechanisms for the Exercise of ARCO Rights:

To exercise your ARCO rights, you must submit a request through the following email: contacto@aoramakeup.com.

8. Changes to the Privacy Policy:

We reserve the right to modify this privacy policy at any time. Changes will be available on our website.

9. Data Security:

We have implemented technical, physical and administrative security measures to protect your personal data.

10. Consent:

By using our website and providing your personal data, you express your consent to the processing of your personal data in the terms described in this policy.

11. Contact:

For any questions or clarifications regarding this privacy policy, you can contact us by email: contacto@aoramakeup.com.

12. Validity:

The date of the last update of this privacy policy is November 7, 2023.