Privacy Policy

Last updated: May 13, 2026

Casa Rosas Autlán ("Casa Rosas," "we," "us," or "our") operates a retail clothing boutique located in Autlán de Navarro, Jalisco, México, along with a product catalog website and AI-powered customer service tools. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, use our ChatGPT application, browse our product catalog, or interact with us through WhatsApp or other channels.

By using our services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Contact Information

When you contact us through our website, WhatsApp, email, or in-store, we may collect your name, phone number, email address, and shipping or delivery address.

1.2 Conversational Data and AI Query Tool

When you interact with our services through AI-powered tools (such as our ChatGPT application), we may receive and process the text you submit, including questions about our products, pricing, availability, sizes, and related inquiries. AI-generated responses are produced in reply to your queries. This data is used to provide the requested service, respond to your inquiries, and help you find the right products. Your inputs may also be processed by third-party AI platforms, including OpenAI, in accordance with their own privacy policies. We do not permanently store conversational data or AI-generated responses unless necessary for customer support, security, or legal compliance.

1.3 Product Browsing and Catalog Data

We also collect: free-text message content submitted through contact or inquiry forms, and product search terms, category selections, and price filters used when browsing our product catalog through the website or app. This data is used to improve the browsing experience and help you find relevant products.

1.4 Transaction and Order Data

When you place an order through WhatsApp or in-store, we may collect transaction details including items purchased, quantities, pricing tier (retail or wholesale), and payment method used (SPEI transfer or credit/debit card).

1.5 Automatically Collected Information

When you visit our website, we may automatically collect certain technical information, including your IP address, browser type, device type, operating system, referring URL, pages viewed, and time spent on our site. This information is collected through cookies and similar technologies.

2. How We Use Your Information

We use the information we collect for the following purposes:

3. Data Recipients and Third-Party Services

3.1 AI Platform — OpenAI

Our services operate through third-party AI platforms, including OpenAI, which processes user inputs submitted through our ChatGPT application under its own terms and privacy policies. OpenAI processes this data under our agreement and, for API usage, does not use customer interaction data for model training. OpenAI retains API request logs for up to 30 days for abuse detection purposes, after which they are permanently deleted. OpenAI's privacy policy can be found at openai.com/policies/privacy-policy.

3.2 Hosting and Infrastructure

Our website is hosted on third-party infrastructure providers that may process data on our behalf in order to deliver our services. These providers are contractually obligated to protect your data.

3.3 Payment Processors

We accept payments through SPEI bank transfer and credit/debit card terminals. Payment data is processed by our banking and payment partners; we do not store complete credit card numbers on our systems.

3.4 Messaging Platforms

We communicate with customers through WhatsApp (operated by Meta Platforms, Inc.). Messages you send us through WhatsApp are subject to WhatsApp's own terms of service and privacy policy.

4. Cookies and Tracking Technologies

Our website may use the following types of cookies and tracking technologies:

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect website functionality.

5. Data Retention

We retain your data for as long as necessary to fulfill the purposes described in this policy. Typical retention periods include:

6. Your Rights and Controls

Depending on your location and applicable law, you may have the following rights with respect to your personal data:

We will respond to all privacy requests within 30 days. To exercise any of these rights, please contact us at the information provided below.

Mexican Data Protection (LFPDPPP)

If you are located in Mexico, you have rights under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), including ARCO rights (Access, Rectification, Cancellation, and Opposition). To exercise these rights, please contact us using the information below.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Mexico, including the United States (where OpenAI processes data). By using our services, you consent to such transfers. We take reasonable steps to ensure that your data is treated securely and in accordance with this privacy policy.

10. Terms of Service

By using our website and services, you agree to the following terms:

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post any changes on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us:

Casa Rosas Autlán
Guadalupe Victoria 90, Autlán de Navarro
Jalisco, México 48900
WhatsApp: +52 331 799 8543
Email: chema.genel17@icloud.com