- Data Controller
SAN FRANCISCO TELAS, S.A. DE C.V., a corporate entity formally registered in Mexico, operates the website www.crestflexhat.com and acts as the Data Controller responsible for the collection, handling, and management of personal data belonging to consumers within the European region and other international jurisdictions. The Company is committed to handling personal information in compliance with the Federal Law on Protection of Personal Data Held by Private Parties (Mexico) and the General Data Protection Regulation (GDPR) for individuals residing within the European Union. - Information Collected and Purpose of Processing
The Company collects and processes personal data strictly necessary for the execution of retail contracts, fulfillment of retail headwear orders, and the administration of customer service communications. The categories of personal data processed include:
Identification Data: Full name.
Contact Information: Email address and telephone number.
Logistical Data: Delivery address and billing address.
The legal basis for processing this information is the performance of a commercial sales contract to which the consumer is a party, as well as compliance with applicable statutory legal obligations.
- Payment Processing and Third-Party Disclosures
To complete financial transactions on the website, the Company utilizes external financial infrastructure providers. All payment operations are processed directly through our payment processing partner, Stripe.
When an order is placed, necessary transactional details are transmitted to Stripe to authenticate and finalize the settlement. SAN FRANCISCO TELAS, S.A. DE C.V. does not store, retain, or have visibility over raw financial credentials or credit card numbers on its internal systems. The transfer of data to Stripe is carried out purely to execute the purchase agreement, and the processing of such data is governed by Stripe’s regulatory framework and operational policies.
- Data Retention Periods
Personal data is retained only for the timeframe necessary to fulfill the specific purposes outlined in this policy, or to meet mandatory legal, accounting, and fiscal requirements established under Mexican and European legislation.
Transactional and Accounting Records: Personal data linked to commercial sales, invoices, and financial settlements is stored for a mandatory period of up to ten (10) years following the completion of the transaction, in accordance with corporate and fiscal record-keeping laws in Mexico and European revenue guidelines.
Customer Correspondence and Support: Enquiries and communication logs are retained for a period of up to five (5) years from the date of the last interaction to address potential civil liabilities or operational queries.
- International Data Transfers
Given that SAN FRANCISCO TELAS, S.A. DE C.V. is situated in Mexico and serves consumers located within the European market, data collected from European residents is transferred outside the European Economic Area (EEA). The Company implements standard operational frameworks to maintain an appropriate level of information protection during cross-border data movements, ensuring that all processing activities align with international compliance requirements. - Security Standards
The Company maintains structured technical, physical, and administrative measures intended to manage risk and mitigate the possibilities of unauthorized access, loss, alteration, or disclosure of personal records. While standard industry protocols appropriate to the nature of the commercial data are applied to look after consumer information, no method of transmission over the internet or electronic storage can be characterized as entirely immune to external risk. - Data Subject Rights
Consumers residing in Europe possess specific statutory rights under the GDPR, including the right to access, rectify, or request the erasure of their personal information, as well as the right to restrict or object to certain processing activities. Consumers subject to Mexican legal frameworks retain ARCO rights (Access, Rectification, Cancellation, and Opposition) regarding their records.
To submit a formal request to exercise any of these legal rights, individuals may transmit a structured written application to our corporate email address: variety@crestflexhat.com.
Corporate Contact Details
Corporate Entity: SAN FRANCISCO TELAS, S.A. DE C.V.
Corporate Registration Number: SFT-030526-1S9
Registered Business & Warehouse Address: Calle 65 455 x 50 Y 52, C. 65 446E, Centro, 97000 Mérida, Yuc., Mexico
Customer Correspondence Email: variety@crestflexhat.com
Contact Telephone: +52 9999301200