Privacy policy

Last updated: 27 April 2026

This Privacy Policy explains how Olmteka S.A.S. de C.V. collects, uses, discloses, and protects personal data when you visit Axtlan Shop, contact us, place an order, use our customer support channels, interact with Axtlan content, or use supported sales channels and integrations.

Axtlan Shop is operated by Olmteka S.A.S. de C.V. in Mexico.

1. Controller / Business Identification

Where Olmteka S.A.S. de C.V. determines the purposes and means of processing personal data, the data controller is:

Olmteka S.A.S. de C.V.
RFC: OLM2108021T9
Blvd. Bernardo Quintana Arrioja 7001
Santiago de Querétaro, QRO, 76090
Mexico

2. Privacy and Support Contacts

Axtlan Shop customer privacy, order, account, and support-related inquiries:
shop@axtlan.mx

Axtlan general inquiries, licensing, collaborations, rights, permissions, and official-brand questions:
contact@axtlan.mx

Formal legal notices related to Axtlan Shop:
contact@axtlan.mx

3. Scope

This Privacy Policy applies to personal data processed in connection with Axtlan Shop and related Axtlan customer-facing operations, including:

the Axtlan Shop website and checkout flow;
customer accounts and order status pages;
customer support communications;
physical product fulfillment and shipping;
digital product delivery and access support;
refunds, returns, payment issues, disputes, and chargebacks;
marketing communications, where applicable;
analytics, cookies, advertising, and platform integrations where active.

If you interact with a third-party platform, marketplace, payment processor, fulfillment provider, social-commerce channel, messaging platform, music platform, or external storefront, that third party may process your data under its own privacy policy and may act as an independent controller.

4. Personal Data We Collect

4.1 Data You Provide Directly

Name.
Email address.
Billing and shipping address.
Phone number, if provided.
Order information.
Customer account information.
Support messages and claim communications.
Refund, return, replacement, and dispute information.
Files, screenshots, photos, or evidence submitted for support or claims.
Marketing preferences and consent choices.

4.2 Data Collected Automatically

IP address.
Device type.
Browser type.
Operating system.
Referring URLs.
Pages viewed.
Timestamps and interaction events.
Approximate location inferred from IP address.
Cookie, pixel, tag, analytics, and advertising identifiers where active.

4.3 Data Received From Third Parties

We may receive data from Shopify, payment processors, fulfillment partners, shipping carriers, marketplace platforms, social-commerce platforms, messaging-commerce channels, advertising platforms, analytics providers, and support tools where those services are used.

This may include order identifiers, payment status, fraud signals, fulfillment status, tracking numbers, delivery scans, support references, dispute references, catalog information, and platform messaging content.

5. How We Use Personal Data

We use personal data for the following purposes:

to process orders and provide products;
to provide customer accounts and order status access;
to process payments and payment status information;
to coordinate production, fulfillment, shipping, and delivery;
to provide digital downloads and access support;
to respond to customer support requests;
to handle returns, refunds, replacements, disputes, and chargebacks;
to detect, prevent, and investigate fraud, abuse, false claims, and security incidents;
to comply with tax, accounting, legal, consumer protection, and regulatory obligations;
to improve site performance, product operations, customer support, and business processes;
to send marketing communications where permitted by law and consent settings.

6. Legal Bases

Where applicable law requires a legal basis, we process personal data under one or more of the following grounds:

Contract: to perform a contract with you or take steps at your request before entering a contract.
Legitimate interests: to operate and improve the business, secure systems, prevent fraud, handle support, and manage disputes.
Consent: for certain cookies, marketing, and optional processing where consent is required.
Legal obligation: to comply with tax, accounting, legal, consumer protection, and regulatory obligations.
Vital interests: where necessary in rare safety-related cases.

7. Cookies, Trackers, and Similar Technologies

Cookies and similar technologies may be used to operate the site, remember preferences, run checkout and cart functionality, detect fraud, measure performance, analyze traffic, support advertising, and improve customer experience.

These technologies may include strictly necessary cookies, preference cookies, analytics cookies, advertising or measurement cookies, pixels, tags, local storage, and platform SDKs.

Depending on the page, region, platform, and integration involved, cookies and similar technologies may be provided by Shopify, installed Shopify apps, hosting providers, analytics providers, advertising platforms, embedded-content providers, payment tools, fraud-prevention tools, or other third-party services.

Where required by law, we use available consent, notice, and privacy-control mechanisms for non-essential cookies and similar technologies. You can also manage cookies through your browser settings. Blocking cookies may affect site functionality, checkout, personalization, analytics, advertising, embedded content, or customer account features.

8. Disclosure of Personal Data

We disclose personal data only as needed for the purposes described in this policy, including to:

Shopify and related storefront, checkout, account, and app providers;
payment processors and fraud-screening providers;
fulfillment partners and shipping carriers;
email, customer support, analytics, and hosting providers;
advertising and measurement providers where active and lawful;
marketplaces, social-commerce channels, messaging platforms, and external platforms where you interact with us through them;
professional advisors such as legal, accounting, and compliance providers;
authorities, courts, platforms, payment processors, or other parties where required by law or necessary to protect rights, safety, property, and fraud-prevention interests.

We do not sell personal data for money. If advertising measurement or audience-related sharing is considered “sharing,” “sale,” or “targeted advertising” under a specific law, we provide opt-out mechanisms where required and technically available.

9. International Data Transfers

Because we operate internationally and use global vendors and platforms, personal data may be processed in countries other than where you live.

Where required, we use appropriate safeguards, such as contractual protections, access controls, data minimization, and recognized transfer mechanisms.

10. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, including:

active customer relationship and support;
order and fulfillment recordkeeping;
tax and accounting obligations;
dispute, chargeback, and fraud-prevention evidence;
legal compliance and claims handling;
security and abuse prevention.

When data is no longer needed, we delete, anonymize, or securely archive it according to legal and operational requirements.

11. Security

We use commercially reasonable technical and organizational measures designed to protect personal data from unauthorized access, misuse, loss, alteration, and disclosure.

No system is completely secure. You are responsible for safeguarding your account credentials and using secure devices and networks.

12. Your Rights and Choices

Your privacy rights depend on where you live and how you interact with us. Where applicable, you may have rights to:

access your personal data;
correct inaccurate personal data;
delete personal data, subject to legal exceptions;
restrict or object to processing;
withdraw consent where processing is based on consent;
request data portability where applicable;
opt out of marketing communications;
opt out of certain targeted advertising or sharing where required by law;
lodge a complaint with a supervisory authority where applicable.

Mexico Privacy Rights

Where Mexico’s Federal Law on Protection of Personal Data Held by Private Parties applies, you may have ARCO rights: access, rectification, cancellation, and opposition, as well as rights related to consent and limitation of use or disclosure, subject to legal conditions.

EU / EEA / UK Privacy Rights

Where GDPR-style laws apply, you may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and complaint to a supervisory authority.

Canada and U.S. State Privacy Rights

Depending on your location, you may have rights to access, correct, delete, opt out of certain data uses, or receive information about categories of personal information processed, subject to legal exceptions.

13. How to Exercise Your Rights

To submit a privacy-related request, contact the route that matches your interaction:

Axtlan Shop customer privacy, order, account, and support-related privacy requests:
shop@axtlan.mx

Axtlan general privacy, licensing, rights, collaboration, or official-brand requests:
contact@axtlan.mx

Please include your name, the email address used, relevant order or platform IDs, and the specific request.

13.1 Verification

To protect customers from unauthorized requests, we may require proportionate verification, such as confirming control of the email account, verifying an order, or requesting additional proof where lawful.

13.2 Response Timing

We respond within the timeframes required by applicable law. Timing may be extended where legally permitted due to complexity or volume, in which case we will notify you.

13.3 Limits and Exceptions

Privacy rights are subject to legal exceptions, including retention required for tax, accounting, security, dispute evidence, fraud prevention, platform compliance, and legal claims.

14. Marketing Preferences

You can opt out of marketing emails at any time by using the unsubscribe link where available or by contacting us.

Transactional communications, such as order confirmations, shipping updates, support messages, account notices, legal notices, and policy-related communications, are not marketing and may still be sent where required or permitted.

15. Automated Signals and Fraud Controls

We may use automated or semi-automated signals for security, fraud prevention, payment risk review, abuse detection, and claims handling.

Where required by law, you may request human review or contest certain decisions, subject to platform constraints and mandatory law.

16. Children and Minors

Axtlan and Axtlan Shop are not directed to children. We do not knowingly collect personal data from children where prohibited by law.

If you believe a child has provided personal data, contact us and we will take appropriate action.

17. Third-Party Links and Platforms

Our websites, products, and channels may link to third-party websites, platforms, social networks, marketplaces, music platforms, or embedded content. Those third parties have their own terms and privacy policies.

We are not responsible for third-party privacy practices except where required by law.

18. Changes to This Policy

We may update this Privacy Policy to reflect legal, operational, technical, or channel changes. The “Last updated” date indicates the effective date.

Material changes may be posted on our site or communicated through relevant channels where required.

19. Language

The English-language version of this policy is the original and governing version. If translations exist, the English version prevails to the extent permitted by law.

20. Contact

For Axtlan Shop customer privacy, order, account, and support-related privacy inquiries:
shop@axtlan.mx

For Axtlan general inquiries, licensing, collaborations, rights, permissions, or official-brand questions:
contact@axtlan.mx

Business address:
Blvd. Bernardo Quintana Arrioja 7001
Santiago de Querétaro, QRO, 76090
Mexico

Item added to your cart