This Privacy Notice is issued in compliance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations, published in the Official Gazette of the Federation.
01Data Controller
Flouvia Boutique (hereinafter "Flouvia"), with registered address in Mexico City, Mexico, and contact email hola@flouvia.com, is the data controller responsible for the processing of your personal data as described in this Privacy Notice.
02Personal Data Collected
Flouvia may collect the following categories of personal data:
- Identification: full name, legal business name.
- Contact: email address, phone / WhatsApp number.
- Professional: company name, job title, industry sector.
- Financial: billing information required to provide services (tax ID, fiscal address).
- Browsing: IP address, device type, pages visited, session duration (via cookies and analytics tools).
We do not collect sensitive personal data as defined by the LFPDPPP.
03Purposes of Processing
Primary purposes (necessary for the contractual relationship):
- Provision of contracted digital engineering, design, and web development services.
- Billing, payment management, and tax compliance.
- Project-related communication: progress updates, deliverables, and support.
- Access to and operation of the Client Portal (Flouvia OS).
Secondary purposes (you may opt out at any time):
- Sending commercial communications about new services or updates.
- Statistical usage analysis to improve our services.
04Data Transfers
Flouvia may share your data with third parties solely to fulfill the purposes described above:
- Clerk Inc. — authentication management for the client portal.
- Supabase Inc. — project data storage.
- Stripe Inc. — payment processing.
- Shopify Inc. — commerce platform on which we develop and install apps and integrations (see section 5).
- Google LLC — analytics services (Google Analytics 4) and communications.
These transfers are made under agreements that guarantee the same level of protection required by the LFPDPPP. We do not sell or transfer your data to third parties for their own commercial purposes.
05Shopify Partner, Apps & Store Data
Flouvia is a Shopify Partner and develops, installs, and maintains apps and integrations on the Shopify and Shopify Plus platform. In connection with these services, Flouvia may access data held in the Client's store through Shopify's APIs, including product catalog, orders, inventory, and—where the service requires it—the merchant's Protected Customer Data.
Flouvia's role: with respect to store data and the merchant's end-customer data, Flouvia acts as a data processor on behalf of and following the instructions of the Client, who remains the controller of such data. Flouvia processes this data solely for the purpose of providing the contracted service or app functionality.
In processing this data, Flouvia undertakes to:
- Comply with the Shopify Partner Program Agreement, the Shopify API Terms, and the Protected Customer Data Policy.
- Access and process only the data strictly necessary for the contracted functionality (data minimization principle).
- Never sell, transfer, or use store or end-customer data for our own purposes, advertising, or training of artificial-intelligence models.
- Apply reasonable security measures (encryption in transit and at rest, access controls) appropriate to the sensitivity of the data.
- Retain data only for as long as necessary and delete it upon app uninstallation or at the Client's request, except where retention is legally required.
- Notify the Client without undue delay of any security incident affecting their data.
Processing of personal data of end customers located outside Mexico may be subject to additional regulations (e.g., the GDPR in the European Union or the CCPA in California). Flouvia will cooperate with the Client to address data-subject requests within the framework of those regulations.
Flouvia's liability with respect to this data is limited to providing the service in accordance with the Client's instructions and the terms of the platforms involved; the Client is responsible for the lawfulness of the data it makes available and for informing its own end customers as required by applicable law.
06Your Rights
You have the right to Access, Rectify, Cancel, or Object to the processing of your personal data (ARCO rights), as well as to revoke any consent you have granted.
To exercise your rights, send a request to hola@flouvia.com including the following:
- Your full name and contact details.
- A clear description of the right you wish to exercise.
- Documents proving your identity or legal representation.
We will respond within a maximum of 20 business days from receipt of your request.
07Cookies
Our site uses technical cookies (necessary for functionality) and analytics cookies (to measure performance). You may configure your browser to block or delete cookies; however, some site features may be affected.
Cookies used by third-party tools (Google Analytics) may transfer data to servers located outside Mexico, in accordance with the privacy terms of those providers.
08Changes to this Privacy Notice
Flouvia reserves the right to modify this Privacy Notice at any time. Any changes will be published at flouvia.com/en/privacy. We recommend reviewing it periodically.
09Contact
For any questions regarding the processing of your personal data or this Privacy Notice: