Effective Date: September 22, 2026

MINI PETS S.A. DE C.V. (“we”, “us”, “our”) operates the pet accessories e-commerce website www.minipetsmex.com (the “Site”). This Privacy Policy is designed to clearly inform you, our valued customer and user, about how we collect, use, store, protect, and share your personal information when you access, browse, or make purchases on our Site. As a local Mexican brand founded by a group of dedicated pet lovers, we prioritize building long-term trust with every user who visits our store to find safe, durable, and practical small accessories for their furry companions. We strictly comply with the Federal Law for the Protection of Personal Data Held by Private Entities (LFPDPPP) of Mexico, alongside all applicable domestic data protection regulations, to ensure all processing of your personal information follows the principles of legality, fairness, transparency, and minimum necessity.

This policy applies to all personal information processing activities carried out through our Site, including account registration, product browsing, order placement, payment processing, after-sales support, and customer service interactions. It does not cover practices of third-party websites or services that you may access through external links on our Site, over which we hold no operational control or legal responsibility. By continuing to use our Site, you acknowledge that you have read, understood, and agree to all the terms outlined in this Privacy Policy. If you do not agree with any part of this document, we kindly ask that you discontinue your use of our services immediately.

1. Personal Information We Collect

We only collect personal information that is strictly necessary to deliver our pet accessory products and related services to you, and we never gather any irrelevant data without your explicit, informed consent. The categories of information we may collect include the following:

1.1 Information You Provide Directly to Us

• ‌Account and profile data‌: When you create a user account on our Site, we collect your display name, email address, and password to verify your identity and secure your account access. You may also voluntarily add a profile photo or pet-related preferences to customize your shopping experience, which you can edit or remove at any time.
• ‌Order fulfillment data‌: To process your purchases and ensure your selected pet accessories are delivered to the correct location, we require your full name, valid contact phone number, complete shipping address, and specific delivery instructions if you have any. This information is used exclusively for logistics coordination and order tracking.
• ‌Payment transaction data‌: We do not store your full credit card, debit card, or digital wallet account details on our local servers. We only share limited, transaction-necessary verification data with our authorized, PCI DSS-compliant payment service providers to complete payment processing securely, and we retain only the final payment confirmation status and partial transaction records for financial reconciliation and after-sales service purposes.
• ‌Communication data‌: When you reach out to our customer service team via email, phone, or the Site’s contact form to ask product questions, submit feedback, or file a service request, we collect the content of your messages, your contact information, and our corresponding reply records to resolve your issues efficiently and keep a traceable service log.
• ‌Voluntary survey and feedback data‌: We may occasionally invite you to participate in voluntary user satisfaction surveys to help us improve our product selection and shopping experience. Any opinions, suggestions, or feedback you submit through these activities will be linked only to the non-identifiable aggregated analysis data unless you explicitly consent to us using your identifiable information for follow-up communication.

1.2 Information We Collect Automatically

• ‌Device and access data‌: When you browse our Site, we automatically collect non-sensitive technical information including your device model, operating system version, browser type and settings, IP address, approximate geographic location at the city level, and the time and duration of your visit. This data helps us maintain website stability, resolve technical bugs, and optimize the loading speed of our product pages for different user devices.
• ‌Browsing behavior data‌: We collect anonymized records of your interaction with the Site, such as the pet accessory product pages you view, the search keywords you enter, the items you add to your shopping cart, and your click navigation path. This information is processed in an aggregated, de-identified form to analyze user preferences, optimize our product category layout, and recommend more relevant small accessories that suit your pet’s needs.
• ‌Cookie and similar tracking technology data‌: We use first-party functional cookies on our Site to remember your saved shopping cart items, your preferred language setting, and your logged-in account status during your visit. These cookies do not collect any sensitive personal information, and you can fully disable or delete cookie functions through your local browser settings at any time. Disabling cookies will only affect part of the interactive experience of the Site, and you will still be able to browse most of our public product pages normally.

2. How We Use Your Personal Information

Every processing activity related to your personal information strictly adheres to the minimum necessity principle, and we will never expand the scope of use beyond the purpose clearly stated when we collect your data without obtaining your separate explicit written consent. The core usage scenarios for your information include:

• To process and fulfill your orders: We use your shipping information, contact details, and payment confirmation records to arrange product packaging, coordinate with our partnered logistics providers, send you real-time order status notifications via email or SMS, and ensure your portable pet water bottle, deshedding grooming glove, or other selected pet accessory is delivered to you safely and within the estimated time frame.
• To maintain and optimize our Site operation: The automatically collected device and browsing data helps us diagnose system failures, prevent malicious login attacks, and continuously adjust our Site’s display logic to make it more user-friendly for local Mexican pet owners. For example, we can identify which product pages have higher loading latency and optimize their image resources to improve your subsequent browsing experience.
• To deliver you necessary service notifications: We will send you critical updates related to your transactions, such as order confirmation, shipment dispatch alerts, delivery attempt reminders, refund processing results, and changes to our shipping or return policies that directly impact your pending orders. These service-related messages are not commercial marketing content, and you will not be able to opt out of receiving them as they are essential to guarantee the normal completion of your shopping process.
• To provide responsive customer support: The contact information and communication records you share with us allow our pet-loving customer service team to quickly verify your account identity, locate your order details, and provide targeted assistance for issues such as incorrect product size selection, partial accessory damage during transportation, or return and refund application processing.
• To conduct aggregated product and service improvement analysis: We process de-identified user behavior data to identify which pet product categories are most popular among local users, adjust our inventory restocking plan to ensure best-selling items such as our leak-proof travel water bottles and soft deshedding gloves are always in stock, and design new pet small accessories that better match the actual usage habits of Mexican pet families.
• To send optional commercial marketing content: Only if you explicitly opt in to subscribe to our newsletter, we will periodically send you new product launch announcements, exclusive discount offers for registered users, and pet care tips tailored to local weather conditions in Mexico. You can unsubscribe from these marketing emails at any time by clicking the “unsubscribe” link placed at the bottom of every marketing message, or by sending an unsubscribe request to our dedicated contact email. We will never send you unsolicited marketing SMS messages to your personal phone number without your separate written consent.

3. Information Sharing and Disclosure

We value your personal privacy as much as we value the safety of our own pets, and we will never sell, rent, or trade your identifiable personal information to any unrelated third parties for their commercial marketing purposes under any circumstances. We only share necessary limited information with third parties under the following strictly controlled scenarios:

• ‌Sharing with authorized service providers‌: We may share your partial shipping information (redacted with the middle digits of your contact phone number hidden) with our pre-vetted local logistics partners, only to the extent necessary for them to complete the last-mile delivery of your pet accessories. We also share necessary transaction verification data with our authorized payment service providers to process your payments securely. All our third-party service providers are required to sign strict data confidentiality agreements with us, and they are prohibited from processing your personal information for any purposes outside of the services they are contracted to deliver for us.
• ‌Disclosure required by law or competent authorities‌: We may disclose your personal information when we are legally required to do so by a valid court order, official administrative notice from the Mexican National Institute of Transparency for Access to Information and Personal Data Protection (INAI), or other mandatory legal procedures. In such cases, we will only disclose the minimum scope of information explicitly requested by the authority, and we will make all reasonable efforts to verify the legality of the request before any data is handed over.
• ‌Transfer in the event of business reorganization‌: If we undergo a merger, acquisition, asset sale, or other form of business reorganization that involves the transfer of our e-commerce platform operations, your personal information stored on our systems will be transferred to the new operating entity under the same personal data protection terms outlined in this Privacy Policy. We will send you a clear notification via email at least 30 days in advance to inform you of the change of data controller, and you will have the right to object to the continued storage of your personal information by the new entity if you wish.

4. Data Storage and Security Protection

We adopt a multi-layered technical and organizational security protection system to safeguard your personal information against unauthorized access, accidental leakage, tampering, or destruction, fully meeting the compliance requirements of the Mexican LFPDPPP:

• ‌Transmission and encryption standards‌: All data transmitted between your browser and our Site’s servers is protected by HTTPS protocol with the latest TLS 1.3 encryption standard. All sensitive personal data including your full shipping address, contact phone number, and complete payment verification information are stored using AES-256 military-grade encryption, and these sensitive databases are physically isolated from our public-facing product display servers.
• ‌Access control mechanism‌: Only a very limited number of authorized core employees in our customer service and technology teams have partial, role-restricted access to user personal data, and all access operations are logged in a dedicated security audit server that is retained for no less than 6 months in accordance with legal requirements. Every access record is traceable, and we strictly prohibit unauthorized employees from copying, exporting, or leaking user personal data for personal use.
• ‌Reasonable data retention period‌: We do not retain your personal identifiable information for longer than is necessary to fulfill the stated purposes for which it was collected. We retain your core account information for the entire duration that your account remains active on our Site. After you submit a valid account deletion request, we will delete all your identifiable personal data within 30 working days, except for the limited transaction records that we are legally required to retain for a minimum of 5 years for tax, financial audit, and after-sales dispute resolution purposes. All anonymized aggregated data that can no longer be linked back to your personal identity may be retained indefinitely for product optimization analysis.
• ‌Regular security assessment and update‌: Our technical team conducts monthly vulnerability scans and annual third-party independent security penetration tests on our Site system. We also perform regular compliance reviews to update our data protection measures to match the latest regulatory requirements, ensuring that our security system can effectively respond to new emerging cyber risks in the digital environment.

5. Your Rights Over Your Personal Information

Under the Mexican Federal Law for the Protection of Personal Data Held by Private Entities (LFPDPPP), you are granted complete and enforceable rights over your personal information stored on our platform, and we have set up a convenient, low-threshold process to ensure you can exercise these rights at any time without unreasonable obstacles:

• ‌Right of access‌: You can log into your account settings page at any time to view all the personal information we have collected and stored about you, including your historical order records, saved shipping addresses, and contact preferences. If you need a full structured copy of all your personal data, you can submit a request to our contact email, and we will provide the complete data file to you in a commonly readable electronic format within 15 working days.
• ‌Right of rectification‌: If you find that any of your personal information stored on our platform is inaccurate or outdated, you can directly edit and update your profile information, shipping addresses, and contact phone number through your account settings page, or send us a rectification request. We will verify your identity and complete the correction of the incorrect data for free within 10 working days.
• ‌Right of erasure (right to be forgotten)‌: You have the right to request us to delete all your personal identifiable information completely from our system, under the condition that there are no pending uncompleted orders, unresolved after-sales disputes, or mandatory legal retention requirements that conflict with your deletion request. We will process your deletion application for free within 30 working days, and we will notify you by email once all the required data deletion operations are fully completed.
• ‌Right to revoke consent‌: You can withdraw the consent you previously granted to us for processing your personal information at any time, by adjusting the relevant permission settings in your account or submitting a revocation request to our customer service team. After you revoke your consent, we will immediately stop all processing activities that rely on that specific consent, except for the data processing that we are legally obligated to carry out to complete ongoing transactions. Please note that revoking your consent to certain necessary data processing activities may affect the normal use of some core shopping functions on the Site.
• ‌Right to data portability‌: You can request us to export all your provided personal data, including your saved shipping addresses and historical order lists, in a structured, machine-readable format that can be easily transferred to other third-party service providers, and we will not set any additional fee barriers for you to exercise this right.
• ‌Right to lodge a complaint‌: If you believe that our processing of your personal information has violated the relevant provisions of Mexican data protection laws and infringed your legal privacy rights, you have the right to submit a complaint to the National Institute of Transparency for Access to Information and Personal Data Protection (INAI) within the legal time limit.

If you want to exercise any of the above rights, you can send your signed request along with a copy of your official valid identification document to our email address orio@minipetsmex.com, or call our customer service phone number +52 800 004 6633 during our working hours. We will not charge you any service fee for processing your legitimate rights application for the first time, and we will respond to you promptly in accordance with the time limits required by law.

6. Protection of Minors’ Privacy

Our e-commerce website is not intentionally designed for children under the age of 14, and we do not knowingly collect any personal identifiable information from users under the age of 14 without the explicit written consent of their legal guardians. If we discover that we have accidentally collected personal information from a minor under 14 without guardian authorization, we will immediately delete all relevant data from our servers completely. If you are the parent or legal guardian of a minor and you believe that your child has provided us with personal information without your permission, please contact us immediately, and we will handle the related data deletion process as quickly as possible. For users aged 14 to 17, we recommend that they browse our Site and make purchases under the guidance and supervision of their parents or legal guardians to ensure that their personal information is properly protected.

7. Cross-Border Data Transmission

All of your personal information collected through our Site is stored on local servers located within the territory of Mexico, and we will not transfer any of your identifiable personal data to overseas servers or third parties located outside of Mexico, unless we are legally required to do so by mandatory legal procedures, or we obtain your separate explicit written consent after fully informing you of the risks related to cross-border data transmission. All cross-border data transmission activities we carry out will strictly comply with the data localization and security assessment requirements stipulated in the Mexican LFPDPPP and other applicable domestic laws, to ensure that your personal information will not face additional security risks during transmission.

8. Updates to This Privacy Policy

We may need to update and revise this Privacy Policy periodically to adapt to new adjustments to Mexican data protection laws, new functional upgrades to our Site, or changes to our actual business operation needs. When we make substantive revisions to the terms of this Privacy Policy, we will post the updated version on this page of our Site, clearly mark the new effective date at the top of the document, and display a prominent non-intrusive notification banner on the homepage of our Site for no less than 7 consecutive days to remind you to review the revised content. We will also send a notification email to all registered users who have provided us with a valid email address. Your continued use of our Site after the new effective date of the revised Privacy Policy will be regarded as your acknowledgment and acceptance of the updated terms. If you do not agree with the revised content, you can choose to stop using our services and apply for account deletion through the process we described above.

9. Contact Information

If you have any questions, comments, concerns, or requests related to this Privacy Policy, or if you need to contact our data protection representative for any privacy-related matters, you can reach us through the following official contact channels at any time:

• Full Data Controller Name: MINI PETS S.A. DE C.V.
• Official Contact Email: orio@minipetsmex.com
• Physical Business Address: C. Pino Mz 1 Lt 6, Col. Copalera, Chimalhuacán, Estado de México, C.P. 56337, México
• Customer Service Contact Phone: +52 800 004 6633

Our dedicated privacy management team will respond to your legitimate privacy inquiry within a maximum of 15 working days after we receive your message, and we will work with you to resolve any privacy-related issues properly and in full compliance with local data protection laws.