HomePRIVACY POLICY

PRIVACY POLICY

1. Data Controller Information

The digital entity www.aromavellum.com acts as the primary data controller responsible for the collection, processing, and management of personal data collected through this storefront. Operating from headquarters in Mexico and serving consumers across European jurisdictions, www.aromavellum.com handles customer personal data in adherence with statutory data protection standards.

  • Company: DEKANDELA, S.A. DE C.V.
  • Registration Number: DEK230220TN8
  • Email: reed@aromavellum.com
  • Address: Av. Casa Blanca 1440, Residencial San Cristóbal, San Nicolás de los Garza, Nuevo León
  • Phone: +52 8181902525

2. Information We Collect

When visitors interact with www.aromavellum.com, complete purchases, or submit written enquiries, specific personal data categories are processed to perform basic contractual obligations:

  • Identity Data: Full name, title, and contact preferences.
  • Contact Details: Delivery address, billing address, email address, and telephone number.
  • Transaction Data: Details regarding purchased home fragrance merchandise, order numbers, and fulfillment records.
  • Technical & Usage Data: IP address, browser information, time zone settings, and website navigation patterns collected via standard functional cookies.

3. Payment Processing & Third-Party Gateways

Financial security and transaction processing are handled through dedicated payment infrastructure:

  • Payment Service Provider: All credit card transactions, payment validations, and merchant settlement procedures are securely processed directly by Stripe.
  • Data Security Protocol: Customer payment card details are transmitted directly to Stripe via encrypted channels. www.aromavellum.com does not collect, store, view, or retain raw payment card details or full card numbers on internal servers.
  • Stripe Compliance: Payment processing complies strictly with Payment Card Industry Data Security Standards (PCI-DSS) enforced through Stripe’s checkout systems.

4. Legal Basis for Data Processing

Personal data collected via www.aromavellum.com is processed under legitimate legal grounds established within European and Mexican legal frameworks:

  • Contractual Necessity: Processing details required to fulfill orders, issue transaction confirmations, and manage international physical shipments.
  • Legal Obligation: Retaining mandatory commercial records, tax documentation, and accounting data pursuant to statutory requirements.
  • Legitimate Interests: Managing customer communication, resolving service enquiries, and maintaining site infrastructure operations.

5. Data Retention Schedules

www.aromavellum.com retains personal data only for periods strictly necessary to fulfill the original collection purpose or satisfy applicable legal, accounting, and tax record-keeping requirements:

  • Transactional & Order Data: Retained for up to five (5) to seven (7) years following order completion, in accordance with Mexican commercial tax regulations and European fiscal obligations.
  • Customer Communication Records: Retained for up to two (2) years following initial submission to ensure accurate order resolution history.
  • Technical Logs & Cookies: Functional analytics logs and session data are retained for up to twelve (12) months.

Upon expiration of applicable retention windows, data is securely erased, anonymised, or archived according to regulatory protocol.

6. Consumer Data Rights

European and Mexican consumers retain statutory rights regarding personal data held by www.aromavellum.com:

  • Right of Access & Rectification: Request copies of personal data held or demand correction of inaccurate records.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of personal data where legal retention obligations do not apply.
  • ARCO Rights (Mexico): Exercise statutory rights of Access, Rectification, Cancellation, and Opposition under Mexican privacy legislation.
  • Data Portability & Restriction: Request transfer of data or restriction of processing under qualified conditions.

To exercise any statutory data right, formal requests must be submitted directly to reed@aromavellum.com.

Get a Quote

Please fill out the form and our team will get back to you in 24 hours.