Privacy and cookie policy

Controller

Site controller: iHerbio Mexico (mx-iherbio.com). Contact for any privacy matter: contacto@mx-iherbio.com.

What data we process

• Order form. On some product pages you can leave your name and phone number. They are sent, together with the IP address of the connection, to the seller of the product or its distribution network, who calls you to confirm the order and arrange delivery. The site keeps no order database: it only stores a technical marker for 15 minutes to prevent duplicate orders.
• Emails you send us. If you write to us, we process your email address and the content of the message to reply.
• Technical connection data. Like any website, the server receives your IP address, browser type and the requested page, which the hosting provider uses to serve the pages and protect the site from abuse.
• We do not collect payment data: payment is handled by the seller on delivery.

Cookies and local storage

The site sets no cookies. It only uses functional browser storage:

• esb_geo (local storage): remembers the country chosen on the Esbelita pages to show the right price.
• esb_popup and sinoflex_popup_seen (session storage): keep the order window from reappearing during the same visit; cleared when you close the browser.

We use no analytics, advertising or social media pixels. You can delete this data at any time from your browser settings.

Providers involved

• Cloudflare: hosting, content delivery and security of the site, and the anti-duplicate order marker.
• The seller of the product and its distribution network: receive the name and phone number from the order form to confirm it by phone.
• Google Fonts: the fonts are loaded from Google servers, which receive your IP address when requested.
• Domain email provider (Beget): the mailbox that receives messages sent to contacto@mx-iherbio.com.

These providers may process data outside Mexico with the safeguards required by data protection law.

Official sites linked

When you follow a link to a product's official site and place your order there, your data is processed by that seller under its own privacy notice, which we recommend reading before sending the form.

Purpose, basis and retention

Order form data is used only to confirm and deliver the order you requested; emails, to answer your message; technical data, to keep the site available and secure. We send no advertising and sell no data. We keep messages for as long as needed to reply.

Your rights

You can exercise your rights of access, rectification, cancellation and objection (ARCO rights under Mexican law), and withdraw your consent, by writing to contacto@mx-iherbio.com. For an order already confirmed, also contact the seller who called you. If you feel your request was not handled, you can contact the competent personal data protection authority in Mexico.

Minors and changes

The site is intended for people over 18. We may update this policy when the way the site works changes; the date of the last update is shown at the end of the page.