Grupo Regalos

GET YOURS NOW

Privacy Policy

Effective Date: September 29, 2026‌

This Privacy Policy applies to the website www.gruporegalos.com operated by Grupo Francomexicano de Regalos, S.A. de C.V. (hereinafter referred to as “we”, “us” or “our”). As a dedicated travel essentials brand rooted in Mexico, we are committed to protecting the personal data and privacy rights of every user who browses, shops or interacts with our platform. This document clearly outlines how we collect, use, store, share and safeguard your personal information, in full compliance with applicable global data protection regulations including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and Mexico’s Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP, Federal Law for the Protection of Personal Data Held by Private Parties). We design compact, durable travel gear that slips easily into pockets and packs, turning messy trips into smooth, joyful adventures, and this commitment to delivering lightweight, intentional travel experiences extends fully to our approach to protecting your personal privacy.

1. About Us and Contact Information

We are Grupo Francomexicano de Regalos, S.A. de C.V., a Mexican registered enterprise specializing in the design and sale of high-quality travel essentials including toiletry bags, passport covers, luggage tags, and portable hydration accessories. You may contact us for all privacy-related inquiries via the following channels:

  • Physical Address: Pafnuncio Padilla No. 33 Int. 1B-G1, Col. Ciudad Satélite, C.P. 53100, Naucalpan de Juárez, Estado de México, México
  • Contact Telephone: +52 55 9331 4671
  • Official Email for Privacy Inquiries: bloomv@gruporegalos.com
  • Office Hours: Monday to Friday, 9:00 to 17:00 (Mexico City Local Time)

Our designated data protection team will respond to all legitimate privacy-related requests within 10 business days of receipt, in accordance with the requirements set forth in Mexico’s latest data protection regulations.

2. Definitions

To ensure full clarity and transparency for all users, we define the key terms used in this policy as follows:

  • ‌Personal Data‌: Any information that directly or indirectly identifies a specific natural person, including but not limited to your full name, contact information, payment details, browsing records, and order history.
  • ‌Sensitive Personal Data‌: A subset of personal data that relates to highly private information, including but not limited to health records, biometric data, religious beliefs, political affiliations, and financial information that exposes your payment credentials. Per Mexico’s revised LFPDPPP, processing of all sensitive personal data must meet strict dual requirements: explicit written consent from the data subject, and strict adherence to the principle of data minimization with processing limited exclusively to the purposes explicitly stated in this Privacy Policy.
  • ‌Data Subject‌: The identifiable natural person whose personal data is collected, processed and stored by us, namely you, the user and customer of our e-commerce platform.
  • ‌Processing‌: Any operation or set of operations performed on personal data, including collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. Categories of Personal Data We Collect

We only collect personal data that is directly relevant to providing you with a smooth, secure shopping experience on www.gruporegalos.com. We do not collect unnecessary or excessive data that is not required for our stated operational purposes. The categories of personal data we may collect include:

  1. ‌Account and Registration Data‌: When you create an account on our platform, you may voluntarily provide your full name, email address, delivery address, contact phone number, and account password. This data is used to manage your account, process your orders, and facilitate after-sales services.
  2. ‌Transaction and Payment Data‌: When you place an order on our website, we collect the full details of your purchase (including the types, quantities and prices of travel essentials you order), your billing address, and partial payment information necessary to complete the transaction. We do not store full credit card or debit card information on our own servers: all full payment credentials are processed and stored by our certified, PCI DSS-compliant third-party payment processors.
  3. ‌Browsing and Technical Data‌: When you access our website, we automatically collect limited technical data including your IP address, browser type, device model, operating system, time zone setting, browsing pages, click-through paths, and access timestamps. This data is collected via first-party cookies and similar tracking technologies to optimize our website performance, resolve technical bugs, and understand user preferences to improve our product offerings.
  4. ‌Communication Data‌: When you contact us via email, our contact form, or telephone to submit inquiries, request support, or provide feedback, we collect the content of your messages and the contact details you provide to respond to your request in a timely and effective manner.
  5. ‌Voluntarily Provided Data‌: You may choose to share additional information with us when you submit product reviews, participate in our marketing activities, or sign up for our newsletter, such as your travel preferences, hobbies, or feedback on our travel gear products.

We explicitly note that we will never collect sensitive personal data (as defined in Section 2) without your separate, explicit written consent. If for any operational reason we need to process sensitive personal data beyond the scope required to complete your order, we will provide you with a separate clear notice and obtain your explicit opt-in consent before proceeding with any such processing activity.

4. Legal Bases for Processing Your Personal Data

In full alignment with global regulatory requirements, we process your personal data only on the following valid legal bases:

  • ‌Contractual Necessity‌: Processing your personal data is necessary to perform the sales contract we enter into with you when you place an order on our website. This includes processing your delivery address to ship your ordered travel essentials, processing your payment data to complete the transaction, and sending you order confirmation and logistics update notifications. Without this data, we will not be able to fulfill our contractual obligations to deliver the products you purchase.
  • ‌Legitimate Interests‌: Where permitted by applicable law, we process your personal data to pursue our legitimate business interests, provided that such interests do not override your fundamental privacy rights. Our legitimate interests include optimizing our website functionality, improving our product design for travel essentials, preventing fraudulent transaction activities, sending you service notifications related to your order, and conducting internal data analysis to better understand customer needs. We always conduct a strict balancing test before carrying out any processing based on legitimate interests, to ensure your privacy rights are fully protected.
  • ‌Compliance with Legal Obligations‌: We process your personal data when it is necessary for us to comply with our legal obligations under applicable laws in Mexico, the European Union, the state of California and other jurisdictions where we operate, such as retaining transaction records for tax reporting purposes, responding to valid legal requests from competent regulatory authorities, and fulfilling our data leak notification obligations as required by LFPDPPP.
  • ‌Explicit Consent‌: For any processing activity that is not covered by the above legal bases, we will rely on your freely given, specific, informed and unambiguous consent. For example, we will only send you promotional newsletters and marketing materials for our new travel essentials products after you explicitly opt in to receive such communications. You retain the full right to withdraw your consent at any time, through the unsubscribe link included in all marketing emails or by contacting our data protection team directly. The withdrawal of consent will not affect the lawfulness of any processing activity we carried out prior to your withdrawal.

5. Purposes for Which We Use Your Personal Data

All processing of your personal data is limited explicitly to the purposes disclosed in this Privacy Policy. We use your collected personal data exclusively for the following objectives:

  1. ‌Order Fulfillment and After-Sales Support‌: We use your personal data to process your submitted order, verify your payment status, arrange the delivery of your purchased travel essentials, handle your return, refund or exchange requests in accordance with our Refund and Returns Policy, and provide you with timely customer support to resolve any issues you may encounter with our products or services.
  2. ‌Website Optimization and User Experience Improvement‌: We analyze your browsing behavior data to understand how users interact with our website, optimize the page layout of our product categories (including our toiletry bag, passport cover, and luggage tag collections), reduce page load times, and customize the display of products to match your travel preferences, creating a more intuitive and convenient shopping experience for every visitor.
  3. ‌Security and Fraud Prevention‌: We process your personal data to verify user identities, monitor for unauthorized access to our website, detect and prevent fraudulent transactions, malware attacks, and other malicious activities that may threaten the security of our platform and our users’ data. This processing activity helps us protect both your personal assets and our legitimate business operations from harm.
  4. ‌Marketing Communication (With Your Explicit Consent)‌: After you opt in to receive our promotional materials, we may send you email notifications about our new arrivals of travel gear, exclusive discount offers, seasonal sales, and useful travel tips curated for travel enthusiasts. You can unsubscribe from all marketing communications at any time, with no associated costs.
  5. ‌Regulatory Compliance and Legal Protection‌: We retain necessary personal data to fulfill our legal compliance obligations under applicable laws, resolve potential disputes with users, enforce our Terms of Service, and respond to lawful requests from courts, law enforcement agencies, and other competent public authorities.

We will never process your personal data for purposes that are incompatible with the purposes explicitly stated in this Privacy Policy, without providing you with advance clear notice and obtaining your separate explicit consent.

6. Third-Party Sharing of Your Personal Data

We will never sell, rent or trade your personal data to any third parties for their independent marketing purposes, in full compliance with CCPA requirements. We only share your personal data with carefully selected third-party service providers under the strict conditions outlined below, and all third parties we cooperate with are required to sign data processing agreements that mandate the same level of personal data protection as required by applicable laws:

  1. ‌Logistics and Shipping Partners‌: We share your necessary delivery information (including your full name, delivery address and contact phone number) with our contracted courier and logistics service providers, for the exclusive purpose of shipping your ordered travel essentials to the address you specify. Our logistics partners are only permitted to process your personal data for this specific delivery purpose, and are not authorized to use your data for any other unrelated activities.
  2. ‌Certified Payment Processors‌: We share necessary transaction data with our PCI DSS-compliant payment service providers, to complete your payment processing, verify your payment identity, and prevent payment fraud. As noted earlier, we never store your full payment card details on our own servers, all sensitive payment information is handled and protected directly by our certified payment processors.
  3. ‌Website Service Providers‌: We may share limited anonymous or pseudonymized user data with our website hosting providers, cloud service providers, and analytics tool providers, to maintain the normal operation of www.gruporegalos.com, conduct website performance analysis, and resolve technical malfunctions. These service providers are strictly prohibited from re-identifying any anonymized personal data we share with them.
  4. ‌Legal Successors‌: In the event of a merger, acquisition, asset sale or other corporate restructuring of Grupo Francomexicano de Regalos, S.A. de C.V., your personal data may be transferred to the relevant legal successor, under the condition that the successor assumes the rights and obligations specified in this Privacy Policy. We will provide you with advance notice of any such change of control, to give you the opportunity to exercise your rights as a data subject.
  5. ‌Lawful Required Disclosures‌: We may disclose your personal data if we are required to do so by applicable law, court order, or mandatory request from a competent government regulatory authority, to protect our legal rights, the property safety of our users, or the public interest.

7. Personal Data Retention Period

We adhere strictly to the principles of data minimization and storage limitation. We will only retain your personal data for as long as it is strictly necessary to fulfill the exact purposes for which the data was originally collected. The specific corresponding retention periods are as follows:

  • For order transaction data generated when you make a purchase on our platform: We retain this data for a period of 10 years after the completion of your order, to comply with Mexican tax law requirements and resolve potential post-sales disputes related to your purchased products.
  • For your registered account data: We retain your account data for the entire duration of your account’s active status. If you choose to delete your account, we will permanently erase all your personal account data within 15 business days, except for the transaction records we are legally required to retain for tax and accounting purposes.
  • For marketing communication related data: We retain your email address and marketing preference data until you exercise your right to unsubscribe, or you notify us that you no longer wish to receive our promotional communications.
  • For website browsing technical data collected via cookies: We retain this type of data for a maximum period of 12 months, after which all browsing records are anonymized or permanently deleted.

Upon the expiration of the applicable retention period, we will permanently delete, anonymize or safely destroy your personal data in accordance with our internal data security protocols, and we will no longer process this data for any purpose.

8. Your Rights as a Data Subject

Under applicable data protection laws including Mexico’s LFPDPPP, EU GDPR, and California CCPA/CPRA, you are endowed with a comprehensive set of legal rights over your personal data. You may exercise the following rights at any time by submitting a request to our data protection team via the contact channels listed in Section 1:

  1. ‌Right of Access‌: You have the right to obtain a clear, transparent copy of all personal data we hold about you, and to receive detailed information about how we process your data.
  2. ‌Right to Rectification‌: If you find that the personal data we hold about you is inaccurate, incomplete or outdated, you have the full right to request us to correct or update that data without undue delay.
  3. ‌Right to Erasure (Right to be Forgotten)‌: Under specific circumstances (including when the personal data is no longer necessary for the original collection purpose, you withdraw your consent, or our processing of the data violates applicable laws), you have the right to request us to permanently erase all your personal data from our systems, subject to a few legally permitted exceptions such as mandatory data retention requirements under tax laws.
  4. ‌Right to Restriction of Processing‌: You have the right to request us to temporarily suspend the processing of your personal data, for example when you dispute the accuracy of your data, or when our processing activity is found to be unlawful.
  5. ‌Right to Data Portability‌: You have the right to request us to provide all your personal data that you have submitted to us, in a structured, commonly used, machine-readable format, and to transmit that data to another data controller of your choice, where technically feasible.
  6. ‌Right to Object‌: You have the right to object to our processing of your personal data that is based on our legitimate interests, at any time, on grounds related to your specific situation. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your privacy rights, or the processing is necessary for the establishment, exercise or defense of legal claims. You also have the absolute right to object to our processing of your personal data for direct marketing purposes, at any time and free of charge.
  7. ‌Right to Opt-Out of Sale of Personal Data‌: As required by CCPA/CPRA, we explicitly inform you that we do not sell your personal data to any third parties, and you have the right to submit a request to opt out of any unauthorized sale of your personal data if any such activity ever occurs.
  8. ‌Right to Withdraw Consent‌: If you have previously given us your consent to process your personal data for any specific purpose, you retain the full right to withdraw that consent at any time. The withdrawal of consent will not affect the lawfulness of any processing that we carried out before you withdrew your consent.

We will not impose any unfair or discriminatory treatment on you for exercising any of your data subject rights. We will respond to all legitimate, verifiable data subject requests within 10 business days, free of charge, unless your request is manifestly repetitive, excessive or frivolous, in which case we may charge a reasonable administrative fee to cover our processing costs.

9. Data Security Measures

We implement a comprehensive set of technical, organizational and administrative security measures to protect your personal data from unauthorized access, accidental loss, destruction, alteration or leakage, in full compliance with Mexico’s LFPDPPP security requirements:

  • All data transmission between your browser and our www.gruporegalos.com website is protected by industry-standard TLS 1.3 encryption technology, to prevent third parties from intercepting your data during transmission over the public internet.
  • Our servers that store personal data are hosted in certified, high-security data centers located in compliant jurisdictions, with multi-factor access authentication, 24/7 video surveillance, fire prevention and anti-theft protection systems deployed at all physical access points.
  • We have established strict role-based access control systems for our internal staff: only a very limited number of authorized employees who need to access personal data to fulfill their work duties are granted permission to process user personal data, and all access operations are logged for audit purposes. All our employees receive regular data protection and privacy compliance training.
  • We have established a formal data breach emergency response plan. If a personal data breach that poses a high risk to your rights and freedoms ever occurs, we will notify the Mexican National Institute of Transparency, Access to Information and Personal Data Protection (INAI) and all affected users without undue delay, in full compliance with the 72-hour notification requirement specified in Mexico’s data protection regulations.

10. Cross-Border Data Transfers

As an e-commerce brand operating globally, it may be necessary for us to transfer your personal data to jurisdictions outside of Mexico, for example to our cloud service provider’s data centers located in other countries. All cross-border transfers of your personal data will only be carried out under strict conditions that ensure an adequate level of data protection, as required by LFPDPPP. We will ensure that any cross-border data transfer is protected by appropriate safeguards including standard contractual clauses approved by the relevant data protection authorities, or other legally recognized transfer mechanisms that guarantee your privacy rights are fully protected to the same standard as required under Mexican domestic law.

11. Use of Cookies and Tracking Technologies

Our website www.gruporegalos.com uses first-party cookies and similar web tracking technologies to collect non-identifiable browsing data, to optimize your user experience. The types of cookies we use include strictly necessary cookies (which are essential for the basic functions of our website to work, such as maintaining your shopping cart status during your browsing session), performance cookies (which help us analyze website traffic and optimize page performance), and functional cookies (which remember your preference settings such as selected currency and region). You can fully manage and disable cookies at any time through the settings of your web browser. Please note that disabling strictly necessary cookies may affect the normal operation of some basic functions of our website, such as the ability to add products to your shopping cart and complete the checkout process.

12. Protection of Minors

Our e-commerce platform and travel essentials products are intended for use by adults aged 18 and above. We do not knowingly collect any personal data from children under the age of 13. If we become aware that we have collected personal data from a minor under 13 years old without verifiable parental consent, we will immediately take steps to permanently erase that personal data from all our servers. If you believe that we may have collected personal data from a minor, please contact our data protection team immediately, and we will resolve the issue as quickly as possible.

13. Updates to This Privacy Policy

We may revise and update this Privacy Policy from time to time, to adapt to new changes in our business operations, updated regulatory requirements, or new features we add to our www.gruporegalos.com website. Whenever we make material changes to this Privacy Policy, we will prominently display a notice on the homepage of our website, update the “Effective Date” at the top of this document, and notify you via email if we hold your registered contact information. Your continued use of our website and services after the effective date of the revised Privacy Policy will constitute your acknowledgement and acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

14. Contact and Complaint Information

If you have any questions, concerns, or complaints about our personal data processing practices, or you wish to submit a request to exercise your data subject rights, you can contact our dedicated data protection team via the following channels:

  • Email: bloomv@gruporegalos.com
  • Physical Mail: Grupo Francomexicano de Regalos, S.A. de C.V., Pafnuncio Padilla No. 33 Int. 1B-G1, Col. Ciudad Satélite, C.P. 53100, Naucalpan de Juárez, Estado de México, México
  • Telephone: +52 55 9331 4671, during office hours (Monday to Friday, 9:00 to 17:00 Mexico City Local Time)

If you are not satisfied with our response to your privacy-related request or complaint, you also have the right to submit a formal complaint to the local data protection authority in your jurisdiction of residence, including the Mexican National Institute of Transparency, Access to Information and Personal Data Protection (INAI).

This Privacy Policy constitutes the full and legally binding agreement between you and Grupo Francomexicano de Regalos, S.A. de C.V. regarding the protection of your personal data when you use our www.gruporegalos.com e-commerce platform. By accessing our website, browsing our travel essentials product collections, and placing an order, you confirm that you have read, understood, and agree to all the terms outlined in this document.