Privacy Policy

At thickcanvasapron (operated via www.thickcanvasapron.com), we recognize the significance of data protection and privacy regulatory compliance. This Privacy Policy outlines how we collect, process, and manage your personal details when you interact with our platform, purchase our utility apparel items, or communicate with our team.

Our operations are structured to respect international data governance frameworks, including the General Data Protection Regulation (GDPR) for individuals within Europe, the California Consumer Privacy Act (CCPA/CPRA) and relevant state standards within the United States, and the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) within Mexico.

1. Data Controller

For the purposes of applicable data protection legislation, the Data Controller responsible for your personal information is the independent owner-operated brand:

• Brand Name: thickcanvasapron
• Operational Address: Av. Paseo de la Reforma 250, Col. Juárez, Cuauhtémoc, Ciudad de México, CDMX, México, C.P. 06600
• Contact Email: canvas@thickcanvasapron.com

2. Information We Collect

We process information necessary to fulfill standard commercial transactions and maintain operational communications. This includes:

• Identity and Contact Data: First name, last name, billing address, delivery address, email address, and telephone number.
• Transaction Data: Specific details regarding items purchased, order totals, and historical commercial interactions on our website.
• Technical and Usage Data: IP address, browser type, operating system, and interaction logs with our web interface collected via standard functional cookies.

3. Third-Party Payment Processing

To facilitate secure transactional commerce, we utilize the services of Stripe as our external payment processing infrastructure provider.

• When you complete a transaction on www.thickcanvasapron.com, your financial and payment card information is collected and processed directly by Stripe.
• thickcanvasapron does not store, retain, or have visibility into your full credit or debit card numbers on our internal databases.
• All payment transmissions managed via Stripe are protected under industry-standard cryptographic frameworks utilized by international banking networks.

4. Data Retention Period

We adhere to data minimization standards. Your personal data is stored only for as long as required to satisfy the commercial purposes for which it was originally gathered, or to comply with statutory, fiscal, and operational legal obligations.

• Standard Commercial and Tax Records: In alignment with standard accounting practices across Europe, the United States, and Mexico, data associated with purchases, tax invoicing, and financial compliance will be retained for a standard period of up to seven (7) years following the completion of the transaction.
• Communication Logs: General enquiries and corresponding text histories not associated with a finalized commercial purchase are retained for up to two (2) years to maintain service continuity.

5. Data Disclosures and International Transfers

Your personal data is managed by our internal team based in Mexico. Disclosures to external parties are strictly limited to necessary functional operations:

• Logistics & Fulfillment Providers: Shared with verified international courier networks solely for packaging, destination routing, and dispatch execution.
• Legal Obligations: Where required by enforceable judicial orders, administrative mandates, or governmental authorities operating within Europe, the United States, or Mexico.
• We do not sell, rent, or trade your personal data to third-party marketers.

6. Rights of the Data Subject

Depending on your geographic location (such as Europe under the GDPR, or the United States under local state statutes), you possess specific rights regarding your personal records. These include:

• The right to request access to the information we hold.
• The right to request rectification of inaccurate data.
• The right to request erasure of data, subject to statutory retention overrides (such as financial or tax record-keeping laws).
• The right to restrict or object to certain operational processing methods.

To exercise any of these established administrative rights, please submit a formal request to our designated email channel: canvas@thickcanvasapron.com.

7. Operational Modifications

We reserve the right to amend this Privacy Policy periodically to align with evolving legal interpretations or modified internal administrative workflows. Any updates will be designated by a revised effective date at the top of this document.

Brand Operations Contact: thickcanvasapron Av. Paseo de la Reforma 250, Col. Juárez, Cuauhtémoc, Ciudad de México, CDMX, México, C.P. 06600 Telephone Helpline: +52 55 8526 4739