Privacy notice
HYPSTERS FASHION STYLE, S. DE R.L. DE C.V. (“Hypsters”), with address at Blvd. Aeropuerto Miguel Alemán No. 154 – Nave 11, Col. Corredor Industrial Toluca Lerma, Lerma de Villada, Estado de México, C.P. 52004, in compliance with the applicable provisions of the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations and other applicable regulations (the “Law”), makes this privacy notice (the “Privacy Notice”) available to you.
Personal data is considered any information or documentation concerning a natural person, which identifies them or which can be associated with an identifiable person (the “Personal Data”). Hypsters protects privacy and is responsible for the processing of Personal Data provided by its owner (the “Owner”). In terms of Article 8 of the Law, the Owner tacitly consents to the processing of their Personal Data, accepting that the Privacy Notice was made available to them and not expressing opposition to it.
We ask you to carefully read this Privacy Notice, since the mere provision of your personal data, either by physical or digital means through the different platforms it has, constitutes the express acceptance of this Privacy Notice and, consequently, an express authorization to the processing of your personal data.
Hypsters has the technological, physical, administrative and legal mechanisms to protect the Owner's information and Personal Data, and Hypsters applies the best international practices in the handling and administration of Personal Data. In any case, Hypsters manages the Owner's Personal Data with high standards of ethics, responsibility and professionalism.
The Privacy Notice is addressed to any Owner who provides their Personal Data by virtue of the following: (1) Customers who make purchases in Hypsters Stores (hereinafter the “Stores”); (2) Customers and/or users who make purchases or use the website located at www.hypsters.com (hereinafter “Website”), and (3) Any person who uses the social networks managed by Hypsters and other possible means of communication, in-person surveys at own or third-party events, as well as for information collected by any other means.
1. PERSONAL DATA THAT WILL BE COLLECTED
Hypsters will collect and process the following Personal Data:
Identification data, contact data, personal patrimonial and/or financial data, tax data, collected derived from the purchase process, photographs, electronic records, including but not limited to: name, electronic signature, federal taxpayer registry (RFC), official identification, country of birth, city of residence, age, address, tax address, delivery address, email, home phone, contact phone and other contact information. In addition, it may access the IP address to access the Website, Owner's preferences, browser type, activity on the Website, URL, hit, page, file, visitor (IP address or https cookie), visit, host, web browser, data that may use or require browsing habit analysis tools such as Google Analytics, image and/or voice recordings obtained through video surveillance systems in the Stores, among other records.
Hypsters does not collect sensitive personal data. The data collected is necessary for the commercial relationship between the Owners and Hypsters.
The Owner undertakes that the Personal Data is true, complete, accurate, as well as to have the ownership and right to provide and use it. Any false, incomplete, inaccurate data or data that requires third-party authorization will be the exclusive responsibility of the Owner, for which reason they hereby release Hypsters from any type of liability derived from the Owner's omission of what is established in this paragraph.
2. PROCESSING OF PERSONAL DATA.
The Personal Data collected by Hypsters is used, in general, to process requests, transactions, provide services, inform about new products and generally to provide any useful information to the Owner. Some other uses are:
Primary purposes:
a) Process requests and payments for the purchase of Hypsters products, as well as to evaluate the payment method, prevent fraud and coordinate the delivery of any Hypsters product order.
b) Process the Owner's Personal Data to issue invoices, process returns of Hypsters products, administer the Owner's transaction history, follow up on clarifications and investigations, and manage any Hypsters marketing program.
c) Establish communication with the Owner for any reason arising from the commercial relationship with Hypsters, including aspects related to the delivery of Hypsters product orders, follow-up on any clarification, or notification of any modification to Hypsters products.
d) To send the Owner any type of promotional information such as publications, surveys, offers and recommendations from Hypsters, by any type of electronic means.
e) To personalize services for the purchase of any Hypsters product.
The foregoing uses extend to generative AI (Artificial Intelligence) models and other machine learning technologies that power Hypsters' services.
The Holder has the right, at any time, to refuse to receive any information from Hypsters, without affecting the commercial relationship with Hypsters for the acquisition of new Hypsters products.
Additionally, Hypsters is authorized to process personal data for any of the following secondary purposes:
Send by any physical, electronic or magnetic means, including but not limited to, regular mail, email, phone calls, electronic downloads, or by personnel authorized by Hypsters previously identified:
a. News and general announcements that are or may be important or related to Hypsters.
b. Campaigns, benefits, or invitations to events.
We inform you that the aforementioned secondary purposes are based on your consent. This means that you can object to any of them or revoke your consent at any time. It is important to note that, if you grant your consent, it will remain valid even after your relationship with Hypsters has ended, which means that Hypsters may continue to process your personal data necessary to fulfill these secondary purposes.
Hypsters collects the Holder's Personal Data in compliance, at all times, with the principles of legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility, as stipulated by law.
If you do not wish for Hypsters to process your personal data for any of the secondary purposes described in this section, please send an email to datospersonales@shasa.com. You can change your option at any time.
3. TRANSFER OF PERSONAL DATA.
Hypsters does not sell, assign, or profit in any way from Personal Data with third parties, but Hypsters may share Personal Data with its Related Parties, and/or its service providers for the terms established in this Privacy Notice and in accordance with the purpose of the processing of Personal Data, in which case such disclosure will be subject to our privacy policy in force on that date and we will maintain, with respect to such data, the privacy or confidentiality treatment required under applicable law and said policy and in accordance with what is established below.
Hypsters reserves the right to share and/or transfer Personal Data to third parties, in accordance with the provisions set forth below.
a) Transfers not subject to consent: Hypsters may transmit your Personal Data without requiring your consent in the following cases:
- If it falls within the assumptions established in article 37 of the Law.
- Competent authorities in legally established cases, especially in those cases necessary for the fulfillment of obligations regarding personal data protection.
- Competent authorities for the issuance of certificates necessary for the performance of their obligations within the company.
- To Group companies, which operate under privacy policies that comply with the applicable provisions to fulfill the purposes indicated in this notice.
- To insurance companies to provide the insurance we offer as an employee benefit and/or, if applicable, to apply to your retirement plan.
b) Transfers subject to your consent:
If you do not object, Hypsters may transfer your personal data to the following entities in the following cases:
- To entities that are dedicated to evaluating the quality of the work environment or offering recognition to companies through employee surveys in order to obtain distinctions related to the work environment.
- To companies with which we have agreements to offer you promotions and/or discounts on their services and/or products.
If for any reason you do not agree to the transfer of your Personal Data, you may exercise your ARCO rights in accordance with the procedure established for this purpose in this Privacy Notice.
4. ARCO RIGHTS
The Holder may exercise their ARCO rights (Access, Rectification, Cancellation, and Opposition) as well as revoke their consent for the processing of their Personal Data at any time, by directly contacting Hypsters at the email address datospersonales@shasa.com
The request must contain the information indicated below, regardless of what is established in article 29 of the Federal Law on Protection of Personal Data Held by Private Parties.
(i) Data of the owner: Full Name, Full Address, Telephone, and Email (where the response to your request will be communicated), attaching a copy of your official identification (INE or Passport).
(ii) Legal representative’s information (if applicable): Full Name, and if acting as the legal representative of the owner, you must attach the corresponding original public instrument to your written request, or, if applicable, a power of attorney signed before two witnesses, as well as a copy of your official identification (INE or Passport).
(iii) ARCO Rights: Indicate the right(s) you wish to exercise: Access, Rectification, Cancellation, and/or Opposition. Likewise, a description of the Personal Data regarding which the aforementioned right(s) are to be exercised and/or any other comment that helps us better address your right must be provided.
(iv) Other necessary documentation: Supporting documentation for the request must be attached as a simple copy, for example, for a request to rectify Personal Data, the incorrect data, the correct data, and the supporting document must be listed and attached.
If the information provided in the request is erroneous or insufficient, or if the corresponding accreditation documents are not attached, Hypsters may require the Owner to remedy what is necessary within 5 (five) business days following the date of receipt of the request. In such a case, the Owner will have 10 (ten) business days, counted from Hypsters' requirement, to remedy or rectify the corresponding request, otherwise, if what is requested is not remedied within said period, the request will be deemed not submitted.
Hypsters will communicate the adopted resolution to the Owner within a period of 20 (twenty) business days counted from the date the request was received or from the date the Owner rectified the requirement made by Hypsters, as applicable. The resolution will be effective within 15 (fifteen) business days from the date of notification of the corresponding resolution. The resolution will be provided through the same channel by which you sent your request.
You may limit the use or disclosure of your personal data by sending your request to datospersonales@shasa.com. The requirements to prove your identity, as well as the procedure to handle your request, will be governed by the same criteria indicated in the previous section.
If your request is deemed appropriate, you will be registered in Hypsters' own exclusion list so that you stop receiving our promotions.
If you deem it necessary, we inform you that you have the right to appeal to the National Institute of Transparency, Access to Information and Personal Data Protection (INAI) to assert any disagreement related to your right to personal data protection.
5. USE OF COOKIES, WEB BEACONS, AND OTHER TRACKING TECHNOLOGIES
The website uses "cookie" technology. A cookie is a piece of information that is sent to your web browser when you visit a website. Our cookies are stored by Google Analytics, anonymizing the information and without safeguarding your personal data. Your browser's Help section can tell you how to control the use of cookies.
6. MODIFICATIONS
Hypsters reserves the right to change the content of this Privacy Notice at any time. Should there be any changes to this Privacy Notice, Hypsters will communicate them as follows: (a) by sending an email to the account registered by the Owner on the Website or by any other in-person and/or electronic data collection method, (b) by publishing a visible note anywhere on the Website. The Owner hereby accepts that the notification of modifications to the Privacy Notice will take effect from the moment Hypsters publishes them on the Website.
Hypsters will not be responsible if the Owner does not receive the notification of changes in the Privacy Notice, due to a problem with the email account data or internet data transmission provided by the Owner. The Owner accepts and undertakes to review the content of this Privacy Notice on the Website from time to time.
Last modification to the Privacy Notice on January 29, 2026.