Privacy Policy

Last updated: July 3, 2026

This Privacy Policy (the "Policy") describes how your personal information is collected, used, and shared when you visit or make a purchase from https://mx.hollyland.com (the "Store").

This Policy is issued in compliance with the Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares — "LFPDPPP") and its Regulations.

Data Controller

Data Controller: RED ALLIENCE S.A. DE C.V.
Address: Ciudad de México, Municipio Miguel Hidalgo, México
Email for privacy matters: patricio0yan@outlook.com

Personal Information We Collect

When you visit the Store, we automatically collect certain information about your device ("Device Information"), including:

• Information about your web browser, IP address, time zone, and cookies installed on your device.
• Information about the individual web pages or products you view, what webStores or search terms referred you to the Store, and how you interact with the Store.

We collect Device Information using cookies, log files, web beacons, tags, and pixels.

When you make or attempt to make a purchase through the Store, we collect certain information from you ("Order Information"), including:

• Name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.

When we refer to "Personal Information" in this Policy, we mean both Device Information and Order Information.

Purposes of Processing

We process your Personal Information for the following purposes:

Primary Purposes (necessary for the service)

• To process and fulfill your orders (including payment processing, shipping, and providing invoices/order confirmations).
• To communicate with you about your order.
• To screen orders for potential risk or fraud.
• To improve and optimize our Store (e.g., by generating analytics about how customers browse and interact with the Store).

Secondary Purposes (require your consent)

• To send you marketing communications about our products, services, and promotions.
• To display targeted advertisements or marketing communications we believe may be of interest to you.
• To share your information with third parties for advertising and marketing purposes.

Your consent for secondary purposes is optional and can be revoked at any time. If you do not consent to secondary purposes, you may still use the Store for purchases.

Data Sharing

We share your Personal Information with third parties to help us use it as described above. For example:

• We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
• We use Google Analytics to understand how our customers use the Store. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request, or to protect our rights.

ARCO Rights

Under the LFPDPPP, you have the right to:

• Access your personal data held by us.
• Rectify your personal data if it is inaccurate or incomplete.
• Cancel (delete) your personal data when you consider it is not required for any of the purposes stated in this Policy, or when the data has been used for nonconsented purposes.
• Oppose the processing of your personal data for specific purposes.

To exercise any of these rights, please contact us at the email address provided in the "Data Controller" section. Your request must contain:

• Your full name and contact information.
• A clear description of the right you wish to exercise.
• Any additional information that helps us locate your data.

We will respond to your request within 20 business days from receipt. If your request is admissible, we will implement it within 15 business days thereafter.

Consent for Financial and Asset Data

By providing your payment information (credit card numbers, billing details), you expressly consent to the processing of such financial and asset data solely for the purpose of completing the transaction you have requested.

International Data Transfers

Your Personal Information may be transferred to and processed in countries outside Mexico, including the United States and Canada, where our service providers operate. By using the Store, you consent to such transfers.

Data Retention

We will retain your Personal Information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

For Order Information, we will maintain the data for as long as your account is active or as needed to provide you services, and thereafter for a reasonable period for legal, tax, or accounting purposes.

Minors

The Store is not intended for individuals under the age of 14. We do not knowingly collect personal information from children under 14.

Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be posted on this page with a new effective date.

How to Contact Us

For more information about our privacy practices, if you have questions, or if you wish to exercise your ARCO rights, please contact us at:

Email: [Your email]

You also have the right to file a complaint with the Mexican Data Protection Authority (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales — INAI):

• WebStore: https://home.inai.org.mx
• Contact: https://home.inai.org.mx/contacto