Privacy Notice

We may collect the following personal data:

• Full name.
• Company name.
• Job title.
• Phone number.
• Email address.
• Tax and/or business address.
• Federal Taxpayer Registry (RFC).
• Billing information.
• Bank account details (when necessary for payments or refunds).
• Any other information voluntarily provided by the data subject through forms, email, phone calls or any other means of contact.

We do not collect sensitive personal data, unless strictly necessary for the provision of our services and with the data subject's express prior consent.

Personal data will be used for the following primary purposes:

• Responding to requests for information and quotations.
• Preparing commercial proposals.
• Processing orders and purchase orders.
• Manufacturing and delivering products.
• Issuing invoices and complying with tax obligations.
• Following up with customers and suppliers.
• Addressing questions, clarifications and requests related to our products and services.
• Complying with legal and contractual obligations.

We may also use your data for the following secondary purposes:

• Sending promotions, news and commercial content.
• Satisfaction surveys.
• Invitations to events and product launches.
• Statistical analysis and improvement of our services.

If you do not wish your data to be used for these secondary purposes, you may notify us via the email address indicated in this notice.

Cartón Craft Co may share personal data only when:

• It is necessary to comply with legal obligations.
• It is required by competent authorities.
• It is indispensable for the provision of our services through vendors acting on our behalf and subject to confidentiality obligations.

We will never sell or trade your personal data.

You have the right to Access, Rectify, Cancel, or Object to the processing of your personal data (ARCO Rights).

To exercise any of these rights, you must send a request to the contact email indicating:

• Full name.
• Means to receive a response.
• The right you wish to exercise.
• A clear description of the request.
• Documentation to prove your identity.

We will respond within the timeframes established by applicable law.

You may revoke the consent given for the processing of your personal data at any time, provided there is no legal obligation preventing such revocation.

Our website may use cookies, tracking technologies and analytics tools to improve the user experience, gather browsing statistics and optimize our services.

Users may adjust their browser settings to reject the use of cookies; however, some site functions may be limited as a result.

Cartón Craft Co implements reasonable administrative, technical and physical measures to protect personal data against damage, loss, alteration, destruction, unauthorized use, access or processing.

We reserve the right to modify or update this Privacy Notice to address legislative developments, internal policies or new requirements. Any changes will be made available on our website.

If you have questions about this Privacy Notice or wish to exercise your ARCO Rights, you may contact us at the following email address:

smolejaco@gmail.com

Last updated: July 21, 2026