Privacy Policy

Effective Date: January 1, 2024
Last Updated: January 13, 2026
Data Controller: Alpe Fresh S.A. de C.V.
Jurisdiction: United Mexican States (Mexico)

1. INFORMATION WE COLLECT

1.1 Information You Provide

When you register or use our Platform, we collect:

• Account Information: Name, email address, phone number, password
• Business Information: Company name, business type, tax ID (RFC/EIN), business address
• Transaction Data: Listing details, inquiry history, booking records, pricing information
• Communication Data: Messages between users, customer support inquiries
• Financial Information: Credit purchase history, transaction records (we do not store payment card details)
• Verification Documents: Business licenses, certifications, identity documents when required

1.2 Information Automatically Collected

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, features used, search queries, click patterns
• Location Data: General location based on IP address
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies

1.3 Information from Third Parties

• Public business directories and databases
• Credit reporting agencies (for business verification)
• Marketing partners (with your consent)

2. HOW WE USE YOUR INFORMATION

2.1 Primary Uses

• Facilitate connections between buyers and sellers
• Process and display listings
• Enable communication between users
• Manage your account and preferences
• Process credit purchases for listing fees
• Send transactional notifications and alerts

2.2 Business Purposes

• Verify user identity and prevent fraud
• Analyze platform usage and improve services
• Comply with legal obligations and court orders
• Enforce our Terms and Conditions
• Resolve disputes and provide customer support
• Send marketing communications (with consent)

3. INFORMATION SHARING AND DISCLOSURE

3.1 Shared with Other Users

• Business name and contact information when you engage in inquiries
• Location information for shipping and logistics
• Product specifications and pricing in listings
• Ratings and reviews (if implemented)

3.2 Service Providers

We share information with trusted service providers who assist us with:

• Cloud hosting and data storage (servers located in Mexico and USA)
• Email and SMS communication services
• Analytics and performance monitoring
• Payment processing (credit purchases only)
• Customer support tools

3.3 Legal Requirements

We may disclose information when required to:

• Comply with Mexican law or legal process
• Respond to government requests from Mexico or other jurisdictions
• Protect the rights, property, or safety of the Platform, users, or public
• Prevent or investigate fraud or security issues

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you of such changes.

4. DATA RETENTION

We retain your personal information for:

• Active Accounts: Duration of account plus 5 years per Mexican tax law
• Transaction Records: 5 years for tax and legal compliance
• Communications: 2 years or as required by law
• Marketing Lists: Until you unsubscribe
• Cookies: Session cookies expire at end of session; persistent cookies up to 1 year

5. YOUR RIGHTS UNDER MEXICAN LAW (ARCO RIGHTS)

Under LFPDPPP, you have the right to:

• Access (Acceso): Request information about your personal data we hold
• Rectification (Rectificación): Correct inaccurate or incomplete data
• Cancellation (Cancelación): Request deletion of your data (subject to legal retention requirements)
• Opposition (Oposición): Object to certain uses of your data

To exercise these rights, contact us at notificaciones@alpefresh.app with proof of identity. We will respond within 20 business days.

6. INTERNATIONAL DATA TRANSFERS

7. CALIFORNIA RESIDENTS (CCPA)

California residents have additional rights under CCPA:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (with exceptions)
• Right to opt-out of sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising privacy rights

California residents may make requests by emailing notificaciones@alpefresh.app or calling our toll-free number [TO BE PROVIDED]. We will verify your identity before processing requests.

8. EUROPEAN UNION RESIDENTS (GDPR)

EU residents have rights under GDPR including:

• Right to access, rectification, and erasure
• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with supervisory authority

Our legal basis for processing includes consent, contract performance, legal obligations, and legitimate interests in operating the Platform.

9. DATA SECURITY

We implement appropriate technical and organizational measures including:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive information
• Regular security audits and vulnerability testing
• Access controls and authentication requirements
• Employee training on data protection
• Incident response procedures

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. CHILDREN'S PRIVACY

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn we have collected information from a minor, we will delete it promptly.

11. COOKIES AND TRACKING

We use cookies and similar technologies for:

• Essential Cookies: Required for Platform functionality
• Performance Cookies: Analyze usage and improve services
• Functionality Cookies: Remember your preferences
• Marketing Cookies: Deliver relevant advertisements (with consent)

You can control cookies through browser settings, but disabling certain cookies may limit Platform functionality.

12. THIRD-PARTY LINKS

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Review their privacy policies before providing personal information.

13. MARKETING COMMUNICATIONS

With your consent, we may send promotional emails about products, features, and services. You can opt-out at any time by:

• Clicking "unsubscribe" in any marketing email
• Updating your notification preferences in account settings
• Contacting us at notificaciones@alpefresh.app

Transactional communications (order confirmations, security alerts) cannot be opted out of while you maintain an account.

14. DATA BREACH NOTIFICATION

In the event of a data breach that may pose risk to your rights and freedoms, we will:

• Notify affected users within 72 hours of discovery
• Provide information about the nature of the breach
• Describe measures taken to address the breach
• Recommend steps you can take to protect yourself

15. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the new policy on the Platform
• Updating the "Last Updated" date
• Sending email notification for significant changes

Continued use of the Platform after changes constitutes acceptance of the updated policy.

16. CONTACT INFORMATION

17. SUPERVISORY AUTHORITIES

Mexico: Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)
Website: www.inai.org.mx

European Union: You may lodge a complaint with your local data protection authority.
California: California Attorney General's Office
Website: oag.ca.gov/privacy