Skip to content

Privacy Policy

Last updated: October 18, 2026

At JustSV we respect your privacy. This policy explains what personal data we collect when you use our online store, for what purpose, on what basis we process it, and what rights you have over it. The JustSV store is operated by JUSTSV, Sociedad por Acciones Simplificada de Capital Variable, S.A.S. de C.V., domiciled in El Salvador.

We prepared this policy in accordance with El Salvador's Personal Data Protection Law (Legislative Decree 144 of 2024) and Article 2 of the Constitution of the Republic, and it reflects international data protection best practices because we also serve customers outside the country.

1. Data controller

The controller responsible for processing your personal data is:

  • Legal name: JUSTSV, Sociedad por Acciones Simplificada de Capital Variable (S.A.S. de C.V.).
  • NIT: 0623-191125-107-1 · NRC: 3761660.
  • Address: San Salvador Centro, departamento de San Salvador, El Salvador.
  • Customer service email: [email protected].
  • Privacy and personal data matters: [email protected].

2. Data we collect

Depending on how you use the store, we may collect:

  • Identification and contact data: name, email address, phone number.
  • Shipping data: address, municipality, department, and delivery references.
  • Billing data needed to issue your Documento Tributario Electrónico (DTE), including your NIT/NRC if you request a tax credit.
  • Payment data: processed by our payment gateway; we do not store full card numbers on our servers.
  • Designs, images, text, and other content you upload to personalize your products.
  • Order history and preferences.
  • Technical browsing data and cookies (see the cookies section).

3. Purposes and legal basis

We process your data for the following purposes, each with its corresponding legal basis:

  • Performance of the contract: process, produce, invoice, and ship your order, and provide customer service.
  • Legal obligation: issue the DTE, meet accounting and tax obligations, and respond to requests from the competent authority.
  • Consent: send you commercial communications or updates when you authorize it, install non-essential cookies, and analyze use of the store to improve our products and services.
  • Security and fraud prevention: protect the store and its users against misuse and fraud.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

4. Cookies and similar technologies

We use cookies and similar technologies to make the store work and to understand how it is used:

  • Essential cookies: necessary for the session, the cart, and security. They do not require consent.
  • Analytics and marketing cookies: help us measure and improve; they are installed only with your consent and you can decline them.

Analytics and marketing cookies are only enabled with your consent. You can accept, reject, or customize them in the cookie notice, and change your decision at any time via “Cookie preferences” in the footer.

You can also configure or delete cookies from your browser. Blocking essential cookies may affect how the store works.

Cookieless measurement by Cloudflare (always on)

Our network and security provider, Cloudflare, measures visits to the store with Cloudflare Web Analytics. This measurement uses no cookies and stores nothing on your device, builds no personal profiles, does not follow you across sites and does not use your IP address to identify you. It only shows us aggregated data: page views, approximate country, browser and device type, and load times.

We use it to keep the store fast and stable, based on our legitimate interest in the operation and performance of the site. That is why it is always on, including before you choose your cookie preferences, and it is not listed as a category you can switch off.

Google Analytics 4 (only with your consent)

If you accept the analytics category, we load Google Analytics 4, a service of Google LLC. Before that “yes” nothing from Google is loaded and no Google cookie is set. It helps us understand how the store is used and improve it: pages you visit, products you view or add to the cart, checkout starts and completed purchases.

  • Cookies it sets: _ga and _ga_<identifier>, which tell visits apart pseudonymously.
  • Cookie lifetime: up to 13 months.
  • Data retention in Google Analytics: up to 14 months, after which it is deleted.
  • Settings: we turn off Google signals and ad personalization, and Google Analytics 4 does not log or store full IP addresses.
  • Legal basis: your consent. Google may process this data outside El Salvador (see the international transfers section).

You can withdraw your consent at any time via “Cookie preferences” in the footer. When you do, we stop sending data to Google Analytics and delete its cookies from your browser.

Technical device identification: if you create designs without signing in, we store a random identifier we generate ourselves, in an essential cookie, together with a summary of your browser’s technical characteristics (screen resolution, language, time zone and graphics capabilities). We use it for one purpose only: to count how many trial designs you have made on that device and to prevent automated abuse of our generation service. We do not use it for advertising, do not share it with third parties, do not combine it with your profile, and it does not identify you as a person. It is kept for 180 days from your last creation. The legal basis is our legitimate interest in protecting the service from abusive use. Signing in removes this limit.

5. Processors and third parties with whom we share data

We share data only with the providers needed to deliver the service to you, subject to confidentiality and equivalent protection standards:

  • Payment gateway, to process your payments securely.
  • Courier and delivery companies, to deliver your order.
  • Hosting, email, and store tooling providers.
  • Audience measurement providers: Cloudflare (cookieless) and, only if you accept it, Google Analytics.
  • Competent authorities, when required by law.

We do not sell or rent your personal data.

6. International transfers

When we transfer data to providers located outside El Salvador (for example, cloud hosting, email, or payment gateway services), we do so through contractual commitments that require the provider to maintain a level of protection equivalent to that of Salvadoran law, and only for the purposes described in this policy. By accepting this policy and contracting our services, you consent to this transfer.

7. Data retention

We retain your data for as long as necessary to fulfill the purposes described and to meet legal, tax, and accounting obligations (for example, the retention periods for DTEs). Once that period has elapsed, we securely delete or anonymize it.

8. Information security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including encryption of information in transit. No system is completely infallible, but we work to reduce those risks.

9. Security incidents

In the event of an incident affecting your personal data, we will act in accordance with the Personal Data Protection Law, notifying the Agencia de Ciberseguridad del Estado (ACE) and the affected individuals within the timeframes established by law.

10. Your rights

As the data subject, you may exercise your rights at any time to:

  • Access: know what data of yours we process.
  • Rectification: correct inaccurate or incomplete data.
  • Cancellation or erasure: request that we delete your data where applicable.
  • Objection: object to certain processing.
  • Portability: receive your data in a commonly used format.
  • Restriction and erasure: restrict the use of your data in digital environments.

To exercise them, write to us at [email protected]. Exercising these rights is free of charge and we will respond within the legal timeframes. To protect your data, we may ask you to verify your identity before handling the request. If you believe we did not address your request, you may turn to the Agencia de Ciberseguridad del Estado (ACE).

11. Minors

Our store is intended for adults. We do not knowingly collect data from minors without the authorization of their mother, father, or legal guardian. If you find that a minor has provided us with data, write to us so we can delete it.

12. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. We will publish the current version on this page along with its update date.

13. Legal framework

  • Personal Data Protection Law of El Salvador (Legislative Decree 144 of 2024).
  • Constitution of the Republic of El Salvador, Article 2 (informational self-determination).
  • Supervisory authority: Agencia de Ciberseguridad del Estado (ACE).

14. Contact

For any question about this policy or about your data, write to us at [email protected] or [email protected].