Casa Tesoro de México Privacy & Data Protection

Privacy should
be understandable.

This Privacy Policy explains how Casa Tesoro de México collects, uses, shares and protects personal information when you visit our website, shop online, contact the gallery, create an account or otherwise interact with us.

Casa Tesoro de México San Miguel de Allende · Guanajuato Effective August 17, 2026
At a Glance

The short version.

We collect information needed to operate the gallery and online shop, fulfill purchases, communicate with customers, protect the website and, where permitted, improve the experience. We do not intentionally sell personal information as a standalone business product.

01 / Orders Information needed
to serve you.

Contact, billing, shipping and order information can be collected when you shop.

02 / Payments Payment providers
process transactions.

Payment details may be handled by the payment processor offered at checkout.

03 / Website Cookies &
technical data.

The site may use essential cookies and, subject to applicable consent rules, analytics or embedded services.

04 / Rights You can ask
about your data.

Applicable law may give you access, correction, deletion/cancellation, objection and other privacy rights.

Who Is Responsible?

Casa Tesoro
and your data.

Casa Tesoro de México

Casa Tesoro de México is responsible for the personal information it collects and controls through this website and its direct customer relationships, except where another company acts independently as a payment provider, carrier, platform or other separate controller.

Address Principal 18-Loc 4, Zona Centro, 37766 San Miguel de Allende, Gto., Mexico
Information We Collect

Only what the
interaction calls for.

The information we receive depends on what you do on the site. Browsing the collection does not require the same information as purchasing an object, requesting delivery or contacting the gallery.

01 / Identity & Contact

Who you are
and how to reach you.

Name, email address, telephone number, account information and information you include when contacting us or submitting a request.

02 / Orders & Delivery

What is needed
to complete an order.

Billing and shipping addresses, order contents, delivery instructions, transaction status, purchase history, correspondence and information required for packing, shipping, customs or claims.

03 / Device & Website

How the site
is being used.

Depending on site configuration and consent choices, technical information can include IP address, browser/device details, approximate location inferred from network information, referral source, pages viewed, cookie identifiers, error logs and similar diagnostic or analytics information.

Sensitive information: Casa Tesoro does not intentionally request sensitive personal information through ordinary shopping or contact forms. Please avoid sending sensitive information unless it is genuinely necessary for a specific request and you understand why it is needed.

Why We Use Information

Purpose before
collection.

Personal information is used for legitimate and disclosed purposes connected with the gallery, e-commerce operations, customer service, legal obligations, security and—where permitted—communications or site improvement.

01 / SERVICE

Orders & customer care.

Process purchases, accounts, shipping, pickup, returns/claims, inquiries and gallery communications.

02 / OPERATIONS

Run the website.

Maintain functionality, troubleshoot issues, preserve security, prevent abuse and administer the online store.

03 / LEGAL

Meet obligations.

Maintain business records, respond to lawful requests, address disputes and comply with tax, customs, consumer and other applicable requirements.

04 / OPTIONAL

Improve & communicate.

Where permitted, understand site performance and send optional marketing or collection updates that you can decline or unsubscribe from.

E-Commerce & Payments

What happens
when you purchase.

WooCommerce & Orders

Store records support fulfillment.

When you place an order, the website may create and retain customer, order, billing, shipping and fulfillment records needed to complete the transaction and maintain appropriate business records.

  • Order and account information may be stored in the website's commerce system.
  • Shipping information may be provided to carriers or logistics providers.
  • Order information may be used to provide support, handle claims or prevent fraud.
Payment Processing

Card data should remain with the payment provider.

Payments may be processed by the payment method or provider presented at checkout. Those providers can receive information necessary to authorize and complete the transaction under their own privacy and security practices.

  • Casa Tesoro may receive transaction status, payment method type and related order references.
  • Do not send full card numbers or security codes to the gallery by email, social media or contact forms.
Cookies & Embedded Media

Small files,
real choices.

Cookies and similar technologies can support core site functions and, depending on the tools enabled, analytics or embedded third-party content.

Sharing & Transfers

Information follows
the service.

We may disclose personal information when reasonably necessary to operate the website, fulfill a purchase, deliver an object, comply with law or protect customers and the business.

01 / Service Providers

Technology & website operations

Hosting, website, commerce, security, database, support and other technology providers may process information to provide services to Casa Tesoro.

02 / Payments

Payment and fraud services

Payment processors, banks or fraud-prevention services may receive information needed to authorize, secure or complete transactions.

03 / Logistics

Carriers, freight & delivery partners

Names, addresses, telephone numbers, order details and customs-related information can be shared where needed to pack, ship, clear customs or deliver purchases.

04 / Professional & Legal

Advisers and lawful requests

Information may be disclosed to accountants, insurers, professional advisers or public authorities when reasonably necessary or legally required.

05 / Cross-Border

International processing can occur

Because Casa Tesoro serves customers internationally and uses online service providers, information may be processed in countries other than the country where you live, subject to applicable transfer and protection requirements.

Retention & Security

Keep what is needed.
Protect what is kept.

Retention

Different records have different lifetimes.

Personal information is kept only for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, customer service, account administration, warranty or claim handling, security, accounting, tax, customs, dispute resolution and other legal obligations.

When information is no longer required, it may be deleted, anonymized or retained only as permitted or required by applicable law.

Security

Reasonable safeguards, not impossible promises.

Casa Tesoro seeks to use reasonable administrative, technical and organizational measures appropriate to the nature of the information and the services being provided. No internet transmission, website, storage system or electronic service can be guaranteed to be completely secure.

If a security event creates notification obligations under applicable law, Casa Tesoro will take the steps required by that law.

Your Privacy Rights

Your information
is not a black box.

The rights available to you depend on the law that applies to your relationship with Casa Tesoro and your location.

You may have the right to understand, access, correct, delete/cancel, restrict or object to certain uses of your personal information.

Mexico — ARCO rights

Where applicable under Mexican law, you may request Access to your personal data, Rectification of inaccurate or incomplete information, Cancellation when appropriate, and Opposition to certain processing. You may also ask about revoking consent or limiting the use or disclosure of information where the law provides those options.

EEA and other jurisdictions

If privacy law in your jurisdiction applies to Casa Tesoro's processing, additional rights may include information about processing, access, correction, erasure, restriction, objection, portability and withdrawal of consent where consent is the relevant basis. You may also have the right to complain to the competent data-protection authority in your jurisdiction.

How to make a request

Email [email protected] with the subject line Privacy Request. Describe the right you want to exercise and the information or account involved. We may ask for information reasonably necessary to verify identity, protect the account and understand the request.

Marketing choices

You can unsubscribe from promotional email using the unsubscribe method included in the message or by contacting the gallery. Transactional communications about an order, security issue or customer-service request may still be sent when necessary.

Additional Information

A few important
boundaries.

Minors

We do not intentionally seek children's data.

The website is designed as a general retail and gallery experience rather than a service directed to children. If a minor uses the site, a parent or guardian should be involved where required by applicable law. Contact us if you believe personal information relating to a child has been provided improperly.

Third-Party Sites

Other services have their own policies.

Links to social networks, mapping services, payment providers and other external websites or platforms are governed by the privacy practices of those providers. Casa Tesoro does not control the privacy practices of unaffiliated third parties.

Changes

This policy can evolve.

We may update this Privacy Policy when our website, services, technology, business practices or legal obligations change. The effective or last-updated date on this page indicates the version currently published.

Questions

Ask before you share.

If you have questions about how personal information is handled, contact Casa Tesoro before submitting information that you do not understand or do not want processed.

Contact the Gallery
Privacy FAQ

Clear answers.

A practical summary of the information visitors most often need.

Depending on the purchase, Casa Tesoro may collect your name, email, telephone number, billing/shipping address, order information, account details, delivery instructions and related correspondence. Payment providers may separately collect the payment information required to complete the transaction.

Casa Tesoro does not intentionally operate a business model based on selling personal information as a standalone product. Information can, however, be shared with service providers, payment services, carriers and other parties when needed for the purposes described in this policy.

Third-party embedded content may allow the provider to receive technical, cookie, device, browser, IP or account-related information when the embed loads or when you interact with it. The provider's own privacy terms govern its independent processing.

Email [email protected] with the subject “Privacy Request,” identify the right you want to exercise and provide enough information for us to understand and appropriately verify the request.

Retention depends on why the information was collected and any applicable legal, tax, customs, accounting, security or dispute-related requirement. Information that is no longer reasonably needed may be deleted or anonymized, subject to applicable law.

Yes. You can use the unsubscribe option in a promotional email or contact the gallery. Necessary service communications related to orders, accounts, security or customer support may still be sent.

Questions about
your information?

Contact Casa Tesoro de México with privacy questions or requests. Please use “Privacy Request” in the subject line when exercising a data right.