Full Privacy Notice

This is a courtesy translation. The legally binding version of this notice is the Spanish original, Aviso de Privacidad Integral. In the event of any discrepancy, the Spanish text prevails.

Last updated: August 2026

1. Identity and address of the data controller

DEVOLADA PREP CENTER (hereinafter, the “Data Controller” or “the Website”), with a digital presence at the domain https://devoladaprepcenter.com, is responsible for the processing and protection of your personal data in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP) of the United Mexican States, and in compliance with the applicable international standards for international visitors, including the General Data Protection Regulation (GDPR) of the European Union and the applicable privacy laws of the United States of America.

For any question, request or exercise of privacy rights, our designated channel and Privacy Department is:

Contact email address: [email protected]

2. Personal data we collect

The Data Controller collects only the personal data that the data subject provides voluntarily through our web contact/quotation form or by direct communication via email. The data collected is strictly limited to:

Identification and contact data: Full name, email address and telephone number.

Corporate and commercial data: Company or brand name, business URL or website, and a description of the message or logistics requirement.

Express declaration: The Data Controller does not collect or process sensitive personal data, financial data, or credit or debit card data through this website.

3. Purposes of data processing

The personal data collected will be used for the following purposes:

A. Primary purposes (necessary for the legal relationship or the service)

To attend to, process and respond to your requests for information, questions or quotations regarding logistics services, goods preparation (Prep Center), inspection, labelling and fulfillment (FBA/FBM).

To assess the operational requirements of your business in order to put together tailored commercial proposals.

To establish technical and commercial follow-up communication arising from your initial request.

B. Secondary purposes (optional and marketing)

Statistical and web performance analysis through analytics tools (Google Analytics 4).

Creation of custom audiences and remarketing campaigns aimed exclusively at prospective customers for B2B logistics services, through advertising platforms (Meta / Facebook Ads).

Mechanism for refusing secondary purposes: If you do not wish your personal data to be processed for secondary purposes, you may reject non-essential cookies through our cookie settings banner on the website, or state your refusal by sending an email to [email protected].

4. Transfer and remittance of personal data

The Data Controller does not sell, rent or transfer your personal data to commercial third parties outside the operation.

Your data may be processed only by essential data processors or service providers, under strict standards of confidentiality and security, such as:

Providers of web hosting infrastructure and business email services.

Providers of analytics and advertising tools (Google LLC and Meta Platforms, Inc.), subject to the prior consent given in the Cookie Policy.

5. Data retention period

Personal data provided through the contact form will be kept in our systems for a maximum period of one (1) year from the last commercial interaction with the data subject, after which it will be blocked and securely deleted, unless a contract for the provision of logistics services has been formalised or a legal retention requirement exists.

6. Exercising ARCO rights and international rights (GDPR / CCPA)

You have the right to know what personal data we hold about you, what we use it for, and the terms on which we use it (Access). You likewise have the right to request the correction of your information (Rectification), that we delete it from our records (Cancellation / Erasure), or to object to the use of your data for specific purposes (Opposition) — together, the ARCO rights — as well as to exercise your rights of restriction or portability under the GDPR.

To exercise any of these rights, you must send a written request to:

Email address: [email protected]

Requirements for the request:

The data subject’s name and the email address to which the response should be sent.

An official document proving your identity or legal representation.

A clear and precise description of the data in respect of which you are seeking to exercise one of the rights, and the specific right you wish to assert.

Response times: Requests will be answered within a period of no more than 20 business days (in accordance with the LFPDPPP) or 30 calendar days (in accordance with GDPR standards).

7. Amendments to this privacy notice

The Data Controller reserves the right to make amendments or updates to this Privacy Notice at any time, in order to address legislative or case-law developments or internal policies. Any amendment will be made publicly available at this same web link.