Comprehensive Privacy Notice

Clause 01

1. Controller, identity, and scope of this notice

Data controller: Agaveros GABA S.A. DE C.V., a legal entity organized under the laws of Mexico, operating commercially as Destilería Nueva Santa Fe. Address for notices related to personal data: Ocampo 121, Col. Lázaro Cárdenas, San Juanito de Escobedo, Jalisco, México. C.P. 46560. Privacy contact email: info@destilerianuevasantafe.mx. Phone: +52 33 1608 5797. Website: https://destilerianuevasantafe.mx.

This Comprehensive Privacy Notice is issued under Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the privacy-notice guidelines of the competent authority. It covers personal-data processing by Agaveros GABA S.A. DE C.V. through https://destilerianuevasantafe.mx (including Spanish and English routes), the contact form, institutional email, WhatsApp linked to the brand, and direct interactions with Destilería Nueva Santa Fe’s official social accounts when those interactions result in processing under our control.

By providing personal data, you acknowledge that you have read this notice. Submitting the contact form, using messaging channels, or accepting measurement cookies is, as applicable, how you grant or confirm consent required for purposes that need it.

Clause 02

2. Personal data we collect explicitly

“Personal data” means any information concerning an identified or identifiable individual. Depending on the channel you use, we expressly collect the categories below. We do not ask for more than needed for the relevant purpose.

• Contact form · fields you complete

  Inquiry type (distributor, trade partner, press, or other); full name; email; phone (optional); company or organization (optional); geographic area of interest and estimated monthly volume in liters (for distribution inquiries); media outlet name and editorial deadline (for press); and the free-text message.

• Email and messaging channels

  Data you send by email to info@destilerianuevasantafe.mx or by WhatsApp to the institutional number published on the site (name, number, message content, and any file or detail you include).

• Legal-age verification (18+)

  Only confirmation that you declare you are 18 or older to access site content. We do not ask for date of birth, exact age, or ID at the age gate.

• Device preferences

  Preferred language (Spanish or English); cookie-consent choice (“all” or “necessary only”); and, if you choose “remember,” the age-verification flag in your browser (localStorage or sessionStorage). Technical keys: destnsf-locale, destnsf-cookie-consent, destnsf-age-verified.

• Technical browsing data (only with measurement consent)

  If you accept analytics cookies, third-party tools (e.g. Google Analytics and Meta Pixel) may automatically record device or cookie identifiers, truncated or pseudonymized IP as configured by the provider, pages visited, interaction events, browser type, operating system, and referrer. That processing does not occur if you choose “necessary only.”

• Data we do not collect on this consumer site

  This site does not request RFC, CURP, home address, banking details, or invoicing tax data. If a formal trade relationship arises later, such data would be requested through separate contractual channels with their own notice or clauses.

Clause 03

3. Digital channels and concrete uses of processing

We use personal data only in connection with the following services and channels. If a data element is not needed for the requested service, we do not ask for it.

• Contact form at /contacto (and /en/contacto): receive, classify, and answer distribution, trade-partner, press, or other inquiries.
• Institutional email info@destilerianuevasantafe.mx: same support purpose; messages may be forwarded internally only to staff authorized to reply.
• Institutional WhatsApp published on the site: handling inquiries equivalent to the form, with the content you choose to send.
• Age gate (18+ verification): block access to alcohol-related content for anyone who does not declare legal age, under Mexican rules on alcohol advertising and sale.
• Retailer/distributor directory: displays public business information of third parties; merely viewing it does not process your personal data.
• Language preference and cookie consent: remember your choice so we do not ask again every visit, according to what you configure.

Clause 04

4. Interaction on social networks

If you comment, send a direct message, react, or otherwise interact with Destilería Nueva Santa Fe’s official accounts on Instagram, Facebook, or other platforms, your public profile data and message content are governed first by each network’s privacy policies and terms (Meta Platforms, Inc. or the relevant operator).

Agaveros GABA S.A. DE C.V. uses that information only to read and, where appropriate, reply to your message or comment, or to moderate unlawful content or content that violates our policies. We do not systematically add social-network data to our own marketing databases, nor buy audiences based on your contact-form data without your consent.

Clause 05

5. Sources of the data

We obtain personal data through the following explicit channels:

• Directly from you: when you complete the form, write an email, use WhatsApp, confirm legal age, choose a language, or accept/reject measurement cookies.
• Automatically on your device: cookies, localStorage, and sessionStorage described in clause 15, and —only if you consent to measurement— Google Analytics and Meta Pixel scripts.
• From social-network operators: only public information or the content of the message you send us on those platforms.
• We do not purchase third-party databases to contact you without a prior relationship or your consent.

Clause 06

6. Processing purposes (primary and secondary)

Primary purposes are necessary for the relationship you request or for lawful site operation. Secondary purposes require your consent; you may object without affecting primary purposes.

• Primary · Handling your request

  Identifying you, recording your inquiry (type, message, and contact details), and replying via the same channel or the email/phone you provided. Without name and email we cannot complete the form.

• Primary · 18+ and alcohol-rule compliance

  Requiring a legal-age declaration before showing alcohol-related content, and storing that preference only if you ask us to remember it.

• Primary · Site operation, security, and language

  Keeping the site running, applying language preference (cookie/localStorage destnsf-locale), preventing technical abuse, and recording cookie consent (destnsf-cookie-consent).

• Primary · Site measurement (conditioned on “all” consent)

  If you accept all cookies, loading Google Analytics and/or Meta Pixel to measure visits and events in aggregate or pseudonymized form, to improve content, performance, and traffic understanding. If you choose “necessary only,” we do not load those tools.

• Secondary · Institutional or commercial communications

  Sending information about brands, news, or materials from Destilería Nueva Santa Fe only if you expressly ask in your message or give clear consent. You may object or revoke that consent at any time by writing to info@destilerianuevasantafe.mx, without affecting handling of your original request.

Clause 07

7. Transfers and processors

Agaveros GABA S.A. DE C.V. does not sell, rent, or trade personal-data databases. We communicate or allow access to personal data only in the cases below, limited to what is necessary and under confidentiality and restricted-use obligations:

• Hosting and infrastructure

  Site hosting and delivery providers (e.g. cloud infrastructure / Cloudflare or equivalent), which may process technical logs (IP, user-agent, URL) for security and availability.

• Contact-form delivery

  Transactional email services (e.g. Resend or another configured provider) that receive message content to deliver it to info@destilerianuevasantafe.mx or the configured institutional recipient. Reply email may include your address as reply-to.

• Measurement and advertising (only with “all” consent)

  Google LLC (Google Analytics) and Meta Platforms, Inc. (Meta Pixel), acting under their own policies. That access means technical browsing data may be processed on servers outside Mexico. You control that transfer by accepting or rejecting measurement cookies.

• Authorized internal personnel

  Employees or advisors of Agaveros GABA S.A. DE C.V. who need the data to answer your inquiry (trade, press, or support), subject to confidentiality.

• Any further transfer that the law treats as such and that is not covered by a legal exception will be made only with your consent, except for competent-authority orders (clause 8).

Clause 08

8. Authority requests and defense of rights

Destilería Nueva Santa Fe will disclose personal data only when required by a legally founded administrative or judicial order, or when necessary to protect a public interest, third-party rights, or to exercise or defend Agaveros GABA S.A. DE C.V.’s rights before authorities or courts, under the LFPDPPP and its Regulations.

In those cases we will limit disclosure to the minimum necessary and document the request under our internal procedures.

Clause 09

9. Security measures applied to your data

We apply reasonable administrative, technical, and physical safeguards proportionate to the risk, aimed at protecting personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing, including:

• Site transmission over HTTPS (encryption in transit).
• Restricted access to email and inboxes that receive form submissions, limited to authorized staff.
• Separation between local browser preferences (which you control) and messages sent to our systems.
• Loading measurement tools only after your explicit “all” consent, never by silent default.
• Review and deletion of minors’ data or sensitive data sent by mistake, when we detect them.

Clause 10

10. Retention periods

We keep personal data only as long as needed for the stated purposes and to meet legal duties. Explicitly:

• Contact requests

  For as long as needed to handle and follow up on your request and, afterward, the minimum period required by commercial, tax, or rights-defense obligations (e.g. retaining business correspondence). After that period with no legal need, data are deleted or de-identified so they no longer identify you.

• Language preference (destnsf-locale)

  Up to 1 year in a cookie (or until you clear it) and while it remains in your browser’s localStorage.

• Cookie consent (destnsf-cookie-consent)

  Until you clear it in the browser or reopen the cookie panel from the footer and choose another option.

• 18+ verification (destnsf-age-verified)

  In localStorage if you asked to “remember”; in sessionStorage only for the browser session if you did not. It is removed when you clear site data or end the session, as applicable.

• Analytics data (Google / Meta)

  Subject to each provider’s retention policies and configuration. New data stop being generated if you withdraw measurement consent.

Clause 11

11. Persons under 18

The site https://destilerianuevasantafe.mx and all alcohol-related content are intended exclusively for people 18 or older. Agaveros GABA S.A. DE C.V. does not target alcohol advertising at minors and does not knowingly collect personal data from minors.

If a parent, guardian, or any person informs us —or if we detect— that a minor sent data via the form, email, or messaging, we will delete that data from active records as soon as practicable, unless the law requires otherwise, and block improper use to the extent technically possible.

Clause 12

12. Links to third-party sites

The site may link to social networks, maps, directories, certifiers, vendors, or other third parties. Destilería Nueva Santa Fe does not operate those sites and does not control their privacy notices, cookies, or security practices.

Please read each external site’s privacy notice before providing personal data. A link does not mean endorsement or responsibility by Agaveros GABA S.A. DE C.V. for that third party’s processing.

Clause 13

13. ARCO rights, consent revocation, and use limitation

You (or your legal representative) may at any time exercise Access, Rectification, Cancellation, and Opposition rights (ARCO), revoke consent granted for secondary purposes or measurement cookies, and request limitation of use or disclosure of your data, under the LFPDPPP.

• A · Access

  Learn what personal data we hold about you, how we use it, with whom we have shared it under this notice, and its source.

• R · Rectification

  Correct inaccurate, incomplete, outdated, or erroneous data (for example a mistyped email or phone).

• C · Cancellation

  Request deletion of your data from our active records when they are no longer needed for the stated purposes or when the law so requires (subject to mandatory legal retention).

• O · Opposition

  Object to processing for secondary purposes (e.g. commercial communications) or on legitimate grounds regarding a specific processing activity.

• Revocation and limitation

  Revoke consent for measurement (by choosing “necessary only” again in the cookie panel) or for secondary communications (email info@destilerianuevasantafe.mx). You may also ask us to limit use or disclosure when the law allows.

Clause 14

14. Changes to this privacy notice

Agaveros GABA S.A. DE C.V. may amend this notice when the law, our services, processors, or purposes change. The current version will be published at this same URL (https://destilerianuevasantafe.mx/aviso-de-privacidad and its English equivalent), with the update date visible in the page metadata.

If a change affects purposes that require consent, we will seek fresh consent when the law requires it. Continued use of the site after an updated version is published means you are aware of the current text; that does not replace consent when the law demands it expressly.

Clause 15

15. Cookies, local storage, and measurement tools

We use cookies and browser storage. Before loading measurement tools we show a notice so you can choose “Accept” (all) or “Necessary only.” You can reopen that choice from the cookies link in the footer.

• Necessary / technical

  Basic operation, security, and essential preferences. Includes the language cookie/localStorage (destnsf-locale) and recording of your consent decision (destnsf-cookie-consent). Not used for behavioral advertising.

• 18+ preference

  If you choose to remember age verification, we store destnsf-age-verified = true in localStorage; otherwise only in sessionStorage for the visit. It does not contain your name or date of birth.

• Measurement (optional · require “Accept” / all)

  Google Analytics (gtag) and Meta Pixel: record visits and events for analytics and, for Meta, possible advertising uses under its policy. Injected only after “all” consent. If you choose “necessary only,” those scripts are not loaded.

• You can clear cookies and site data in your browser settings. If you remove destnsf-age-verified, the age gate will ask again. If you remove destnsf-cookie-consent, we will show the cookie notice again.
• Browsers can block third-party cookies; that may limit measurement features if you had accepted them.

Clause 16

16. Institutional privacy contact

For questions about this notice, ARCO requests, consent revocation, or personal-data reports, use only the following details:

• Controller

  Agaveros GABA S.A. DE C.V., operating as Destilería Nueva Santa Fe

• Privacy / ARCO email

  info@destilerianuevasantafe.mx

• Phone

  +52 33 1608 5797

• Address for notices

  Ocampo 121, Col. Lázaro Cárdenas, San Juanito de Escobedo, Jalisco, México. C.P. 46560

• Website

  destilerianuevasantafe.mx

• Supervisory authority

  National Institute for Transparency, Access to Information and Personal Data Protection (INAI), for complaints when appropriate under the law.