Privacy Policy

Xochi Advertising and Branding Inc. ("we", "us", "our") is committed to protecting your personal data in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA). This Policy describes how we process your personal data when you visit cala.shop ("Website") or purchase our products.

1. Company Information

2. Personal Data We Collect

We may process the following categories of personal data:

• Identity and contact data – name, email address, phone number, billing/shipping address.
• Payment authorisation tokens – managed securely by our payment provider (we do not store full card numbers).
• Technical data – IP address, browser data, device information, cookie identifiers.
• Communication data – messages sent to our support team.

3. Why We Process Your Data

We process personal data for:

• Performance of contract – to fulfil orders, process payments, and provide customer support.
• Legal obligations – accounting, reporting, and compliance with consumer protection and tax laws.
• Consent – where required for analytics or marketing communications.

4. Data Sharing

We may share personal data with:

• Payment processors
• Fulfilment and shipping partners
• IT/security providers
• Customer support systems

All third parties operate under data-processing agreements consistent with applicable privacy law.

5. Data Retention

We retain personal data only for as long as necessary:

• Financial records – up to 7 years as required by US tax and accounting law.
• Customer service records – a reasonable period for audit and quality assurance.

6. Cookies

We use essential, functional, analytics, and marketing cookies. You may adjust cookie settings via your browser at any time.

7. Your Rights

Subject to applicable law, you may request:

• Access to your data
• Correction of inaccurate data
• Deletion of your data
• Restriction or objection to processing
• Data portability
• Withdrawal of consent (where processing is based on consent)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale or sharing of personal information. We do not sell your personal information.

8. Contact

For privacy-related matters, contact: [email protected]