Privacy Policy

1. Data controller

The controller responsible for processing your personal data is:

• Legal name: JUSTSV, Sociedad por Acciones Simplificada de Capital Variable (S.A.S. de C.V.).
• NIT: 0623-191125-107-1 · NRC: 3761660.
• Address: San Salvador Centro, departamento de San Salvador, El Salvador.
• Customer service email: [email protected].
• Privacy and personal data matters: [email protected].

2. Data we collect

Depending on how you use the store, we may collect:

• Identification and contact data: name, email address, phone number.
• Shipping data: address, municipality, department, and delivery references.
• Billing data needed to issue your Documento Tributario Electrónico (DTE), including your NIT/NRC if you request a tax credit.
• Payment data: processed by our payment gateway; we do not store full card numbers on our servers.
• Designs, images, text, and other content you upload to personalize your products.
• Order history and preferences.
• Technical browsing data and cookies (see the cookies section).

3. Purposes and legal basis

We process your data for the following purposes, each with its corresponding legal basis:

• Performance of the contract: process, produce, invoice, and ship your order, and provide customer service.
• Legal obligation: issue the DTE, meet accounting and tax obligations, and respond to requests from the competent authority.
• Consent: send you commercial communications or updates when you authorize it, install non-essential cookies, and analyze use of the store to improve our products and services.
• Security and fraud prevention: protect the store and its users against misuse and fraud.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

4. Cookies and similar technologies

We use cookies and similar technologies to make the store work and to understand how it is used:

• Essential cookies: necessary for the session, the cart, and security. They do not require consent.
• Analytics and marketing cookies: help us measure and improve; they are installed only with your consent and you can decline them.

Analytics and marketing cookies are only enabled with your consent. You can accept, reject, or customize them in the cookie notice, and change your decision at any time via “Cookie preferences” in the footer.

You can also configure or delete cookies from your browser. Blocking essential cookies may affect how the store works.

5. Processors and third parties with whom we share data

We share data only with the providers needed to deliver the service to you, subject to confidentiality and equivalent protection standards:

• Payment gateway, to process your payments securely.
• Courier and delivery companies, to deliver your order.
• Hosting, email, and store tooling providers.
• Competent authorities, when required by law.

We do not sell or rent your personal data.

6. International transfers

When we transfer data to providers located outside El Salvador (for example, cloud hosting, email, or payment gateway services), we do so through contractual commitments that require the provider to maintain a level of protection equivalent to that of Salvadoran law, and only for the purposes described in this policy. By accepting this policy and contracting our services, you consent to this transfer.

7. Data retention

We retain your data for as long as necessary to fulfill the purposes described and to meet legal, tax, and accounting obligations (for example, the retention periods for DTEs). Once that period has elapsed, we securely delete or anonymize it.

8. Information security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including encryption of information in transit. No system is completely infallible, but we work to reduce those risks.

9. Security incidents

In the event of an incident affecting your personal data, we will act in accordance with the Personal Data Protection Law, notifying the Agencia de Ciberseguridad del Estado (ACE) and the affected individuals within the timeframes established by law.

10. Your rights

As the data subject, you may exercise your rights at any time to:

• Access: know what data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Cancellation or erasure: request that we delete your data where applicable.
• Objection: object to certain processing.
• Portability: receive your data in a commonly used format.
• Restriction and erasure: restrict the use of your data in digital environments.

To exercise them, write to us at [email protected]. Exercising these rights is free of charge and we will respond within the legal timeframes. To protect your data, we may ask you to verify your identity before handling the request. If you believe we did not address your request, you may turn to the Agencia de Ciberseguridad del Estado (ACE).

11. Minors

Our store is intended for adults. We do not knowingly collect data from minors without the authorization of their mother, father, or legal guardian. If you find that a minor has provided us with data, write to us so we can delete it.

12. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. We will publish the current version on this page along with its update date.

13. Legal framework

• Personal Data Protection Law of El Salvador (Legislative Decree 144 of 2024).
• Constitution of the Republic of El Salvador, Article 2 (informational self-determination).
• Supervisory authority: Agencia de Ciberseguridad del Estado (ACE).

14. Contact

For any question about this policy or about your data, write to us at [email protected] or [email protected].