Privacy Policy

Last updated: May 27, 2026 · Version 1.0 (pending client legal validation)

1. Data controller

Transxpo Coffee Holding (hereinafter "Transxpo", "we", or "the Controller") is responsible for processing your personal data in compliance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares — LFPDPPP), its regulations, and applicable international standards.

• Legal name: [TO BE CONFIRMED — registered business name]
• Registered address: [TO BE CONFIRMED — full registered address, Mexico]
• Privacy contact: privacy@transxpocoffee.com

2. Personal data we collect

We collect the following categories of personal data depending on how you interact with us (contact form, quote request, B2B client registration, commercial communication):

• Identification data: full name, job title, company you represent.
• Contact data: corporate email address, phone number, country and city of operation.
• Commercial data: estimated purchase volume, product format of interest (whole bean, ground, capsules, RTD), target market, required certifications.
• Fiscal data (only when a contractual relationship is formalized): legal entity name, tax ID, registered address, banking details for invoicing and payment.
• Browsing data: IP address, browser type, device, pages visited, referral source — collected via cookies and similar technologies (see Section 8).

Transxpo does not collect sensitive personal data in the ordinary course of its operations. We also do not collect data from minors: our services are directed exclusively at individuals or legal entities with legal capacity to contract.

3. Purposes of processing

Primary purposes (necessary for the legal relationship):

• Handling quote requests, commercial inquiries, and product sample requests.
• Executing and fulfilling manufacturing, supply, or distribution agreements.
• Issuing invoices, managing payments, and fulfilling tax and accounting obligations.
• Coordinating delivery logistics (DDP, EXW, FOB) and applicable customs processes.
• Providing customer service, technical support, and after-sales assistance.
• Complying with requirements from competent authorities under applicable law.

Secondary purposes (non-essential — you may opt out without affecting the primary relationship):

• Sending commercial communications about new products, sensory profiles, trade events, and technical publications.
• Conducting satisfaction surveys and market research.
• Statistical analysis to improve the Site and user experience.

To opt out of secondary purposes at any time, send an email to privacy@transxpocoffee.com with "UNSUBSCRIBE" in the subject line.

4. Legal basis for processing

We process your personal data on the basis of Articles 8, 9, 10, 12, 16, 17, 36, and 37 of Mexico's LFPDPPP and its regulations. Where applicable, we also rely on provisions of the Mexican Commercial Code, General Law of Commercial Companies, and federal tax law. For international data transfers to non-Mexican recipients, we apply appropriate safeguards in accordance with applicable law.

5. Data transfers

Your personal data may be transferred — only to the extent strictly necessary — to the following categories of recipients:

• Tax, customs, and regulatory authorities in Mexico and destination countries, when legally required.
• Logistics providers (carriers, customs brokers, warehouses) for delivery and export execution.
• Financial institutions for payment processing, collections, and invoicing.
• Technology providers for cloud services, email, CRM, and web analytics — subject to confidentiality agreements and data protection clauses.
• Affiliated entities within the Transxpo corporate group, under the same conditions as this Policy.

Per Article 37 of the LFPDPPP, your consent is not required for the transfers listed above. For any additional transfers outside those scenarios, we will request your express consent.

6. Your rights (ARCO)

Under Mexico's LFPDPPP, you have the right to:

• Access your personal data we hold and learn details of its processing.
• Rectify your data when it is inaccurate or incomplete.
• Cancel your data when you believe it is no longer required for the stated purposes or is no longer necessary.
• Object to the processing of your data for specific purposes.

You may also revoke your consent at any time and limit the use or disclosure of your data.

To exercise any of these rights, send a request to privacy@transxpocoffee.com including:

1. Your full name and preferred contact method for our response.
2. A copy of a valid government-issued ID.
3. A clear description of the right you wish to exercise and the data involved.
4. Any other information that facilitates locating your data.

We will respond within a maximum of 20 business days of receiving your request. If your request is approved, we will act on it within the following 15 business days.

7. Security measures

Transxpo has implemented reasonable administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, unauthorized use, access, or processing. These measures are reviewed and updated regularly.

No security measure is infallible. In the event of a breach that significantly affects data subjects' rights, we will notify affected parties in a timely manner in accordance with Article 20 of the LFPDPPP.

8. Cookies and tracking technologies

The Site uses cookies, pixels, and similar technologies to:

• Remember your browsing preferences.
• Analyze traffic and aggregate visitor behavior (Google Analytics, Search Console).
• Measure the performance of advertising and email marketing campaigns.

You can disable cookies in your browser settings. Note that some Site features may not function correctly without them.

9. Data retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, and thereafter for applicable statutory retention periods (tax, commercial, contractual). Once those periods expire, data will be blocked and ultimately deleted.

10. Changes to this Privacy Policy

Transxpo reserves the right to modify, update, or expand this Privacy Policy at any time due to legislative changes, internal policies, or new business requirements. Changes will be published at this URL and, where applicable, notified to active data subjects by email or a prominent notice on the Site.

11. Regulatory authority

If you believe your personal data protection rights have been violated, you may file a complaint with Mexico's National Institute for Transparency, Access to Information and Personal Data Protection (INAI):

• Website: home.inai.org.mx
• Phone: +52 800 835 4324

12. Acceptance

By providing your personal data to Transxpo Coffee Holding — whether through the contact form, email, phone, or any other means — you confirm that you have read, understood, and accepted the terms of this Privacy Policy.