Last updated: July 20, 2026
In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (the "Law"), Pumpum Desserts, a commercial brand operated by Juan Ángel Murillo Santiago, an individual engaged in business activity (hereinafter, the "Data Controller"), with address at Av. Monterrey #2205, Altamira, Tamaulipas, C.P. 89604, is identified as the party responsible for the processing of your personal data.
The purpose of this Privacy Notice is to inform you how we collect, use, protect and, where applicable, share the personal information that you provide to us through our websites, principally www.pumpumdesserts.com and accounts.pumpumdesserts.com (jointly, the "Site"). We ask that you read it carefully before providing us with your personal data.
In order to carry out the purposes described in this notice, the Data Controller collects the following categories of personal data:
Clarification regarding sensitive data: the Data Controller does not actively collect sensitive personal data, such as data relating to your health status, racial or ethnic origin, religious beliefs, or union membership.
Your personal data are used for the following purposes, which are divided into primary purposes (necessary to provide you with the service) and secondary purposes (ancillary, not indispensable).
A. Primary purposes (essential to the service):
B. Secondary purposes (not essential to the service):
Mechanism to express your refusal of the secondary purposes: if you do not wish your personal data to be processed for these secondary purposes, you may express your refusal from this moment by sending an email to privacy@pumpumdesserts.com with the subject "Refusal of Secondary Purposes." Your refusal shall not be grounds for us to deny you the services and products that you request or contract with us.
The Data Controller does not sell, rent, or assign your personal data to third parties for commercial purposes. In order to fulfill the primary purposes described, your information may be shared under two distinct arrangements:
Remittances to processors. A processor is a third party that processes your personal data on behalf of the Data Controller and in accordance with its instructions, without using such data for its own purposes. We rely on the following processors:
These remittances do not require your consent and are always carried out under contracts and agreements that guarantee the confidentiality and protection of your personal data.
Transfers to authorities. Your personal data may be transferred to competent authorities where required by a judicial order or an applicable legal provision, a transfer which likewise does not require your consent in accordance with the Law.
Processing of data outside Mexico. Some of our technology infrastructure providers may be located outside of the United Mexican States, and therefore your personal data could be processed or stored abroad. In all cases, we require such providers to maintain security measures and confidentiality obligations equivalent to those set forth in this Notice and in the Law.
Our Site uses cookies and other similar technologies to enhance your browsing experience. We use essential cookies, necessary for the operation of the shopping cart and your user session, as well as analytics and personalization cookies, which are activated solely with your consent.
The primary means for granting, refusing, or modifying such consent is the cookie banner displayed upon entering the Site. Likewise, you may manage, disable, or delete cookies through the settings of your web browser. To learn the details of the cookies we use, please consult our Cookie Policy.
You have the right to exercise at any time your rights of Access, Rectification, Cancellation, and Opposition (ARCO rights) over your personal data:
Procedure for exercising ARCO rights: to exercise any of your ARCO rights, you must submit the corresponding request by email to privacy@pumpumdesserts.com. Your request must contain:
We will attend to and respond to your request, and where applicable give effect to it, within the time periods established by the Law and its applicable regulations.
You may revoke at any time the consent you have granted us for the processing of your personal data. Likewise, you may limit the use and disclosure of your personal information, especially for marketing purposes, through the following means:
If you consider that your right to the protection of personal data has been infringed by any conduct or omission on our part, or you presume any violation of the provisions set forth in the Law, you have the right to file the corresponding complaint or claim before the competent authority on the protection of personal data. We suggest that you consult the means of contact and the procedures that such authority has made available for this purpose.
The Site and our services are directed exclusively to persons over 18 years of age. The Data Controller does not knowingly collect personal data from minors. In the event that we detect that we have collected information from a minor without the authorization of the person exercising parental authority or guardianship, we will proceed to delete such data from our records as soon as possible.
The Data Controller has implemented and maintains administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing. These measures include the use of SSL certificates to encrypt information, restricted access controls, and internal security policies.
Your personal data will be retained for as long as is necessary to fulfill the purposes for which they were collected and to meet our legal obligations (tax, commercial, among others). Once these purposes have been fulfilled, your data will be blocked and subsequently deleted in a secure manner.
This Privacy Notice may undergo modifications, changes, or updates arising from new legal requirements or from our own needs regarding the products or services we offer. We undertake to keep you informed of such changes through our Site, in the legal section of www.pumpumdesserts.com. In the case of significant changes, we will notify you directly at your registered email address.
If you have any question, comment, or complaint regarding this Privacy Notice or the manner in which we process your personal data, you may contact us through the following means:
Our Privacy Department will attend to your communication under the terms set forth in this Notice and in the Law.