Privacy policy

Braggao Privacy Policy

Data controller identification and responsibilities

Braggao (hereinafter “we,” “us,” or “our”), with its primary operations based in Mexico, is responsible for collecting, using, disclosing, and protecting your personal information as outlined in this Privacy Policy. This Privacy Policy applies to all interactions through our website braggao.com, mobile applications, and other communication channels, including services directed to residents of the United States.

Contact information

If you have any questions or concerns regarding your personal information or this Privacy Policy, you may contact us via the following:

Email: hola@braggao.com.mx
Phone: +52 33 1653 4113

Legal compliance and data processing in the United States

For U.S. residents, Braggao complies with federal and state data protection laws, including but not limited to:

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), which govern the collection, use, and sharing of personal information from California residents.
Federal Trade Commission (FTC) guidelines for fair business practices and consumer protection.

Our primary focus is to ensure that your data is handled with care and in compliance with U.S. regulations, including secure processing of payment data under Payment Card Industry Data Security Standards (PCI-DSS).

Third-party service providers

Braggao relies on trusted third-party providers, including Shopify, to facilitate our online transactions, store personal information, and process payments. These third parties adhere to strict security protocols and privacy policies to ensure the protection of your data, particularly sensitive financial information. Personal data shared with these providers is stored securely, complying with all necessary industry standards, such as PCI-DSS compliance.

Data protection measures

To safeguard your personal information, we implement advanced technical and organizational security measures:

Data storage: We store personal data on secure servers provided by our third-party service providers, ensuring the protection of your information from unauthorized access or breaches.
Access control: We limit access to your personal information strictly to authorized personnel who need it to perform their duties, such as processing orders, managing customer relations, and maintaining the security of our services.

International data transfers

Although Braggao is based in Mexico, this Privacy Policy is tailored to the needs of our U.S. customers. Your data may be transferred to and processed in Mexico, where our operations are located. We ensure that all such transfers comply with U.S. privacy laws and maintain robust security measures to protect your personal information.

For users in the United States, we comply with U.S. privacy regulations to ensure that your data is handled securely and with the utmost respect for your privacy rights.

Consent and cookie management

How we obtain your consent

When you interact with our website or make a purchase, you provide us with certain personal information necessary to complete the transaction, such as your name, address, and payment details. By submitting this information, you implicitly consent to its collection and use for the specific purposes of fulfilling your order, processing payments, and delivering your products.

If we need to collect personal information for secondary purposes, such as marketing or promotional communications, we will request your explicit consent through an opt-in mechanism. You will have the opportunity to decide whether or not you wish to receive these communications, and you can withdraw your consent at any time.

Withdrawing your consent

If at any time after providing your consent you wish to change your preferences or withdraw your consent, you may do so by contacting us at hola@braggao.com.mx or calling +52 33 1653 4113.

Withdrawing consent for marketing communications does not affect the legality of any data processing carried out before your consent was withdrawn. Additionally, you may still receive communications necessary for transactions or essential services related to your use of our site.

Cookies and other tracking technologies

Our website uses cookies and other tracking technologies to enhance your browsing experience, personalize your shopping experience, and analyze website traffic. Cookies are small data files stored on your device that allow us to remember your preferences, provide customized content, and help improve our website's performance.

Third-party cookies

We may allow certain third-party service providers to place cookies on your device for the purpose of improving our website’s functionality or delivering more relevant ads. These third-party cookies are subject to their own privacy policies, and we encourage you to review them to understand how your data is handled. For example, we use:

Google Analytics to track website traffic and user behavior to help us better understand how our visitors interact with our site.
Shopify for managing the e-commerce aspects of our website, which may use cookies to enhance the shopping experience.

Managing your cookie preferences

You can manage your cookie preferences at any time through your browser settings. Most web browsers automatically accept cookies, but you can modify your browser settings to reject cookies or alert you when a cookie is being set. Please note that disabling cookies may affect the functionality of our website, and you may not be able to fully experience all features, such as storing items in your shopping cart or logging into your account.

To learn more about how to control cookies and adjust your browser settings, you can visit www.allaboutcookies.org.

Purposes of data processing

We collect and process your personal information for specific purposes related to providing you with our services, maintaining and improving our website, and ensuring compliance with legal obligations. Below, we outline the primary reasons for which we collect and process your data:

To process transactions and fulfill orders

When you place an order on our website, we collect the necessary personal information to process and complete the transaction, including:

Name and contact details (e.g., address, email, phone number) to facilitate shipping and communicate with you regarding your purchase.
Payment information to process payments securely. This includes your credit card details or other payment methods, which are managed in compliance with PCI-DSS standards.
Order history to keep records of past purchases, allowing us to provide better customer service, process returns, and manage warranties.

This information is processed as part of our contractual obligation to fulfill your purchase and deliver your products.

Customer support and communications

We collect and use your personal information to provide customer support and address inquiries, concerns, or complaints. This includes responding to requests related to:

Purchases.
Product information.
Refunds, exchanges, or warranties.
General inquiries regarding our services.

Our goal is to provide a smooth and seamless customer experience. For this, we may use your email, phone number, or other contact information to reach you and ensure any issues are resolved efficiently.

Marketing and promotional activities (with consent)

With your explicit consent, we may use your personal information for marketing and promotional purposes. This includes sending you:

Newsletters about our products, promotions, or exclusive offers.
Updates on new product releases, special events, and discounts.

You can manage your marketing preferences at any time by opting out of these communications using the "unsubscribe" link provided in our emails or by contacting us at hola@braggao.com.mx.

Website performance and personalization

To provide a personalized experience and improve our website's functionality, we process data collected from cookies, such as:

Browsing behavior: We collect information on how you interact with our website, including the pages you visit, the time spent on the site, and the products viewed or added

to your cart. This helps us personalize your shopping experience by recommending products or services based on your preferences.

User preferences: We store information related to your language selection, region, or items saved in your cart to provide a more tailored shopping experience.
Performance tracking: We use cookies and analytics tools (e.g., Google Analytics) to monitor traffic patterns, improve the performance of our website, and resolve technical issues.

This information helps us optimize our website to better meet your needs and ensure you receive the best possible service while browsing.

Legal and regulatory compliance

Braggao is committed to complying with all applicable legal and regulatory requirements, including:

Tax and financial reporting: We may retain certain transaction-related data to fulfill our legal obligations under tax laws.
Prevention of fraud and illegal activities: We may process personal information for purposes of fraud detection and prevention. This includes monitoring and reviewing transactions for suspicious activity.
Responding to legal requests: We may disclose your personal information if required by law, court orders, or other legal processes, or if we believe such action is necessary to comply with the law, protect our rights, or ensure the safety of our users and the public.

Compliance with the California Consumer Privacy Act (CCPA)

If you are a resident of California, we ensure compliance with the California Consumer Privacy Act (CCPA) by allowing you to:

Access the personal information we have collected about you.
Request the deletion of your personal information, subject to legal exceptions. ● Opt-out of the sale or sharing of your personal information for targeted advertising.

To exercise your CCPA rights, you may contact us via email at hola@braggao.com.mx or call us at +52 33 1653 4113.

Disclosure of information to third parties

At Braggao, we value your privacy and only share your personal information with third parties under specific and limited circumstances. We ensure that any third party we work with follows

strict privacy and security protocols to protect your data. Below are the cases in which your personal information may be disclosed to third parties:

Service providers

We use trusted third-party service providers to help us operate our website, process transactions, and deliver products to you. These service providers perform essential functions on our behalf and may require access to personal information to perform their services, such as:

Payment processors: We use third-party services to process payments (e.g., Shopify, credit card processing companies) to ensure secure transactions. These providers are PCI-DSS compliant and handle your financial information securely.
Shipping and logistics companies: To fulfill your orders, we share your contact and shipping information with companies responsible for delivering products to you. ● Cloud storage and hosting providers: Your personal information may be stored securely by third-party cloud storage providers, ensuring that it is protected from unauthorized access.
Customer service platforms: We may use external platforms to manage customer inquiries, complaints, or other support requests.

These third parties are contractually obligated to protect your personal information and may only process it in accordance with our instructions. They are prohibited from using your information for any other purposes.

Legal compliance

We may disclose your personal information if we are required to do so by law, regulation, court order, or other legal process. This includes:

Responding to legal requests: We may disclose information to government authorities or other parties if we believe in good faith that such action is necessary to comply with legal obligations or protect our legal rights, property, or the safety of our users.
Fraud and security: If we detect fraudulent activities or other security issues, we may disclose information to law enforcement or relevant authorities to investigate or take action.

Business transactions

In the event of a merger, acquisition, sale of assets, or similar business transaction, your personal information may be transferred to the new owners or merged entities. This is necessary to ensure continuity in providing our services to you. In such a scenario:

We will notify you of any change in the ownership of your personal information.
The new owner will be required to use your data only in a manner consistent with this Privacy Policy.

Marketing and advertising partners (with consent)

We may share personal information with third-party advertising and marketing partners to provide personalized content and advertisements. This includes:

Advertising platforms: We may share limited data with third-party platforms (e.g., Google Ads, Facebook) to deliver ads tailored to your preferences based on your browsing activity on our website.
Analytics providers: To understand how visitors interact with our website, we may share data with analytics providers (e.g., Google Analytics) that help us improve site functionality and user experience.

These disclosures are only made with your consent, and you can opt out of targeted advertising at any time by managing your cookie preferences or visiting the opt-out tools provided by the Digital Advertising Alliance or Network Advertising Initiative.

Aggregated information

We may share aggregated, anonymized, or de-identified information that cannot be used to identify you personally. This type of data is used for purposes such as improving our website, analyzing trends, and assessing the performance of our business. As this information is no longer linked to individual users, it falls outside the scope of this Privacy Policy.

Sale of personal information

Braggao does not sell your personal information for monetary compensation. However, in compliance with the California Consumer Privacy Act (CCPA), California residents have the right to opt out of the “sale” of their personal information in the context of data shared for advertising purposes. You may exercise this right by contacting us at hola@braggao.com.mx or by enabling Global Privacy Control (GPC) in your browser.

International data transfers

As Braggao operates internationally, your personal information may be transferred to and processed in countries outside of the United States, including Mexico. We ensure that any transfer of personal information complies with applicable privacy laws, and we take appropriate safeguards to ensure that your personal information is protected, regardless of where it is processed.

Security measures to protect your data

At Braggao, safeguarding your personal information is a top priority. We take all necessary measures to protect your personal data from unauthorized access, loss, misuse, or disclosure. We implement industry-standard security protocols and practices to ensure that your personal information is processed and stored securely, both during transmission and once it is received. Below, we outline the key security measures we use to protect your data.

PCI-DSS compliance for payment information

As Braggao processes payments through Shopify and other third-party payment gateways, we ensure compliance with the Payment Card Industry Data Security Standards (PCI-DSS). These standards help protect your financial data during and after the transaction by:

Encrypting payment information.
Limiting access to payment data.
Ensuring secure transmission and storage of credit card details.

By adhering to PCI-DSS, we ensure that your payment information is handled securely, whether you pay via credit card or other methods.

Access controls

Role-Based Access: Only authorized personnel with a legitimate need to access your data (e.g., to process orders, manage customer support, or maintain the website) are given access to your personal information. We limit access based on roles and job functions to ensure that your data is only accessed by those who require it to perform their duties.
Regular Monitoring: We continually monitor our website and internal systems for suspicious activity, potential security breaches, and unauthorized access attempts. This helps us quickly detect and respond to any potential threats to the security of your personal information.

Data retention and disposal

Data Retention Policies: We only retain your personal information for as long as necessary to fulfill the purposes for which it was collected, such as processing transactions, complying with legal obligations, or providing customer support. In cases where we no longer require your personal data, we securely delete or anonymize it.
Secure Data Disposal: Any personal information that is no longer required is securely disposed of through industry-standard methods to ensure it cannot be recovered or misused.

Security of third-party service providers

As part of our commitment to data security, we ensure that any third-party service providers we work with (e.g., payment processors, cloud storage providers) comply with the same strict security standards. These providers are required to:

Use industry-standard encryption and security protocols.
Limit access to personal information to only authorized personnel.
Provide us with regular updates on their security practices and notify us in the event of any security incidents.

User responsibilities

While we implement robust security measures, it's also important for users to take precautions when using our website. We encourage you to:

Ensure that your devices are secure and up-to-date with the latest security patches and antivirus software.
Be cautious when accessing sensitive information, such as payment details, from public or shared devices.

No guarantee

Although we take all necessary precautions to secure your personal information, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information using advanced security measures, we cannot guarantee the absolute security of your data.

Data retention and deletion

At Braggao, we only retain your personal information for as long as necessary to fulfill the purposes for which it was collected or to comply with legal and regulatory obligations. Once your data is no longer required, we take steps to securely delete or anonymize it, ensuring that it cannot be recovered or misused.

Retention periods

The length of time we retain your personal information depends on the nature of the data and the purposes for which it was collected. In general:

Transaction data: We retain transaction-related data (e.g., purchase history, payment information, and shipping details) for as long as is necessary to process your order, manage any returns or warranties, and comply with legal obligations related to financial reporting, taxes, or audits. Typically, this information is retained for up to 7 years, in line with accounting and tax laws.
Customer support data: Information related to customer inquiries, complaints, or support requests is retained for the duration of the inquiry and may be stored for a reasonable period thereafter to address any follow-up concerns or future requests.
Marketing and communication data: If you have provided consent to receive marketing communications, we will retain your contact information until you withdraw your consent or request that we delete your data. Once you opt out or unsubscribe, your data will be removed from our marketing lists promptly, but we may retain records of your preference for future compliance purposes.
Analytics and website usage data: Information collected through cookies or similar technologies is retained for varying durations depending on the type of cookie. For example, session cookies are deleted when you close your browser, while persistent cookies may be stored on your device for up to 24 months unless you delete them manually or opt-out.

Legal obligations and exceptions

Certain types of data may need to be retained for longer periods to comply with legal or regulatory requirements. For example:

Tax and financial records: We are legally required to retain certain financial records for tax reporting and auditing purposes. These records may include transaction details and payment information.
Dispute resolution: In the event of a legal dispute, fraud investigation, or security incident, we may retain relevant data for as long as necessary to resolve the issue or comply with legal obligations.

Data deletion and anonymization

Once the retention period has expired or the data is no longer required, we will securely delete or anonymize the personal information. We use industry-standard data destruction methods to ensure that your data is fully erased and cannot be recovered or misused.

Deletion: Personal information is deleted from our systems and databases through secure deletion protocols, ensuring that it is not accessible or retrievable.
Anonymization: In some cases, we may anonymize your data instead of deleting it, particularly for analytics or research purposes. Anonymized data is stripped of all personal identifiers and cannot be used to identify you.

As a user, you have the right to request the deletion of your personal information under certain circumstances, subject to legal and regulatory exceptions. For example:

You may request the deletion of personal data that is no longer necessary for the purposes for which it was collected.
However, we may retain certain data to comply with our legal obligations, such as tax reporting, or to protect our legitimate business interests, such as fraud prevention.

To request the deletion of your personal data, please contact us at hola@braggao.com.mx or call us at +52 33 1653 4113. We will process your request in accordance with applicable laws.

User rights

As a user of Braggao, you have certain rights regarding the personal information we collect and process about you. These rights are designed to give you control over your data and ensure transparency in how your information is used. Below, we outline the rights you are entitled to under applicable privacy laws, including the California Consumer Privacy Act (CCPA).

Right to access

You have the right to request access to the personal information we have collected about you. This includes:

The specific pieces of personal data we have collected.
The categories of personal information we have collected.
The purposes for which we are processing your personal information.
The categories of third parties with whom your personal information has been shared. ● The sources from which we have collected your personal data.

Right to correction

If any of the personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update the information. To request a correction, please contact us using the details provided above.

Right to deletion

You have the right to request the deletion of your personal information that is no longer necessary for the purposes for which it was collected. We will delete your personal data unless we are required to retain it for legal or legitimate business reasons, such as:

Complying with a legal obligation (e.g., tax or financial reporting).
Resolving disputes or investigating fraud.
Protecting our rights and interests, or those of other users.

Braggao does not sell your personal information for monetary compensation. However, if we share your information for targeted advertising or similar purposes, you have the right to opt out of this data sharing.

California residents: If you are a resident of California, you can exercise your right to opt out of the sale of your personal information under the CCPA. To opt out, you can adjust your cookie preferences on our website or contact us directly.
Global Privacy Control (GPC): You may also enable Global Privacy Control (GPC) in your browser, which sends a signal to our website to stop sharing your data for advertising purposes.

Right to data portability

You have the right to request a copy of the personal information we hold about you in a portable and easily accessible format. This right allows you to transfer your data to another service provider, if you choose to do so.

Right to non-discrimination

We will not discriminate against you for exercising any of your privacy rights under this policy. This means we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through the use of discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.

You are entitled to receive equal service and treatment, regardless of whether you exercise your rights under the CCPA or other applicable privacy laws.

How to exercise your rights

To exercise any of your rights under this Privacy Policy, please contact us by:

Email: hola@braggao.com.mx
Phone: +52 33 1653 4113

Please include your full name, contact information, and a detailed description of your request. We will respond to your request within the time frame required by law, typically within 45 days for CCPA-related requests.

Changes to this privacy policy

We may update or modify this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or the services we offer. When we make significant changes to this Privacy Policy, we will notify you through appropriate means, osting the updated Privacy Policy on our website braggao.com.

By continuing to use our website or services after we have posted updates to this Privacy Policy, you are agreeing to the updated terms. If you do not agree with the changes, you have the right to discontinue using our services and request that we delete your personal information.

Material changes

If we make material changes to how we collect, use, or disclose your personal information, we will provide you with clear and direct notice of these changes. Material changes may include:

Expanding the types of personal information we collect.
Changing the purposes for which we use your personal data.
Updating our practices for sharing personal information with third parties.