Español · English
Rosendo de Jesús Castellanos González (“Cardify” or the “Controller”), located at Calle 20 de Noviembre No. 313, Colonia Centro, Tepatitlán de Morelos, Jalisco, C.P. 47600, Mexico, is responsible for processing your personal information under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations.
To deliver your loyalty card through Apple Wallet or Google Wallet, we collect:
We do not collect sensitive personal information such as racial origin, health information, financial information, ideology, or sexual preferences.
Primary purposes (necessary to provide the service):
Secondary purposes (not essential):
You may opt out of secondary purposes at any time by emailing soporte@cardify.com.mx. Opting out will not affect the primary service.
Cardify may generate retention segments automatically, but it does not automatically send promotions or make decisions that have legal or similarly significant effects on you. The business reviews the audience and manually confirms each promotion.
We rely on the following processors to operate the service. We do not sell or disclose your information to third parties for their own commercial purposes:
These disclosures are necessary to maintain the legal relationship and provide the service, and therefore do not require additional consent under Article 37 of the LFPDPPP.
You have the right to know what personal information we hold, how we use it, and the conditions of that use (Access); to request correction of outdated, inaccurate, or incomplete information (Rectification); to request deletion when you believe the information is not being used in accordance with applicable principles and obligations (Cancellation); and to object to use for specific purposes (Opposition).
To exercise these rights or withdraw consent, email soporte@cardify.com.mx. We will respond within no more than 20 business days.
Your information is encrypted at rest and transmitted over TLS. The token that authenticates your card is stored as a cryptographic hash (SHA-256) and, when the service needs to reissue or update the pass, as a copy encrypted with AES-GCM; it is never stored as plaintext. Only authorized personnel of the business that issued your card may view your information to manage your loyalty activity.
We retain your information while your card is active and for up to 24 months after cancellation, unless a longer period is legally required. After that period, the information is deleted or anonymized.
The enrollment site does not use tracking cookies or advertising identifiers. It stores only technical information necessary for the form to work.
The Service is not directed to children under 13, and Cardify does not knowingly collect personal information from them. Enrollment requires a confirmation that the person is at least 13 years old. If we learn that we received information from a child under 13, we will cancel the enrollment and delete the information. A parent or guardian may report such information by emailing soporte@cardify.com.mx.
Changes to this Notice will be published at this URL with an updated date. We recommend reviewing it periodically. We will notify you by email if changes are material.
Questions about this Notice or our processing of personal information may be sent to soporte@cardify.com.mx.