1. Identity and Address of the Data Controller
The entity responsible for the processing of your personal data is:
Legal name: RANU Health
Privacy email: [email protected]
Privacy Policy
RANU Health is committed to protecting the privacy of your personal data in compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) — Mexico's Federal Law on Protection of Personal Data Held by Private Parties — and its Regulations.
2. Personal Data We Collect
For the purposes described in this policy, we collect the following categories of personal data:
- Identification data: full name.
- Contact data: email address.
- Shipping data: full postal address (street, number, neighborhood, city, state, postal code, and country).
- Technical data (IP hash): we store a one-way hash of your IP address for security purposes, fraud prevention, and affiliate attribution. We do not store your IP address in plain text.
We do not collect sensitive personal data within the meaning of Article 3, Section VI, of the LFPDPPP.
3. Purposes of Processing
Primary purposes (necessary for the contractual relationship)
- Order fulfillment: processing, managing, and delivering purchased products, as well as handling returns and refunds.
- Transactional communications: sending order confirmations, shipping notifications, and updates related to your purchase via email.
- Tax and accounting compliance: retaining transaction records in compliance with applicable Mexican tax legislation.
- Affiliate attribution: recording the origin of your visit via the IP hash to correctly credit commissions to the corresponding affiliate.
Secondary purposes (subject to consent)
- Marketing communications: sending you information about new products, promotions, and content related to gut health, via email.
If you do not want your data to be processed for secondary purposes, you may opt out at any time by using the unsubscribe link included in every marketing email we send you.
4. Data Retention Period
We retain your personal data for the following periods:
- Order and billing data: 5 years from the date of the transaction, in compliance with tax and accounting obligations established by the Código Fiscal de la Federación (Mexican Federal Tax Code) and the Ley del Impuesto sobre la Renta (Income Tax Law).
- Email communication data: for as long as you remain subscribed to our communications, or until you exercise your right to cancellation or objection.
- IP hash for affiliate attribution: 60 calendar days from registration, corresponding to the affiliate cookie attribution period.
5. ARCO Rights
Under the LFPDPPP, you have the right to Access, Rectify, Cancel, or Object to the processing of your personal data (ARCO rights). The scope of each right is described below:
- Access
Know what personal data we hold about you, the purposes for which we use it, and the conditions under which we use it.
- Rectification
Correct your personal information when it is inaccurate or incomplete.
- Cancellation
Request that we stop using your personal data. Please note that cancellation may be subject to legal obligations that prevent us from immediately deleting certain data (for example, billing data required by the tax authority).
- Objection
Object to the use of your personal data for specific purposes, in particular for secondary purposes (marketing).
How to exercise your ARCO rights
Send your request to [email protected] stating:
- — Your full name and registered email address.
- — The right you wish to exercise (Access, Rectification, Cancellation, or Objection).
- — A clear description of the processing you wish to reference.
- — A copy of your official ID to verify your identity.
We will respond to your request within 20 business days of receipt, as established by the LFPDPPP.
6. Unsubscribe (Opt-Out)
You may cancel receipt of marketing emails at any time through any of the following options:
- Unsubscribe link in the email: every marketing email includes an unsubscribe link at the bottom of the message. Simply click that link to opt out immediately.
- Direct request: you may send an email to [email protected] requesting cancellation of your subscriptions.
Cancelling marketing communications does not affect the sending of transactional emails necessary for fulfilling your order (confirmations, shipping notifications, etc.).
7. Cookie Policy
Our website uses cookies and similar technologies. Below we describe the types of cookies we use:
Essential cookies (session)
Purpose: enable the basic functioning of the website, such as maintaining the state of your browsing session during your visit.
Duration: session cookies (deleted when you close your browser).
Consent: do not require your prior consent, as they are strictly necessary for the functioning of the site.
Affiliate tracking cookies
Purpose: record which affiliate link originated your visit to the site, in order to correctly credit commissions to the corresponding affiliate if you make a purchase.
Duration: 60 calendar days from your first visit via an affiliate link.
Data stored: affiliate identifier and visit timestamp. No personally identifiable data is stored in these cookies.
Cloudflare Web Analytics (privacy-preserving analytics)
Purpose: measure website traffic and page performance in aggregate, without tracking individual users.
Privacy: Cloudflare Web Analytics does not use cross-site tracking cookies or browser fingerprinting. Data is anonymised and aggregated by Cloudflare before being processed.
For more information, see the Cloudflare Privacy Policy .
You can control or delete cookies directly from your browser settings. Please note that disabling certain cookies may affect the functionality of the site.
8. Data Transfers to Third Parties
To fulfil the purposes described in this policy, we may share your personal data with the following third parties (data processors), who act on our behalf and under our instructions:
- Email service provider (Resend): for sending transactional and marketing emails. Resend acts solely in accordance with our instructions and does not use your data for its own purposes.
- Logistics and shipping provider: to deliver your order, we share your name and shipping address with the relevant courier company.
- Payment processor: payment data is processed directly by the payment gateway. RANU Health does not store credit or debit card data on its systems.
- Cloudflare: provision of content delivery network (CDN) services and privacy-preserving web analytics.
We do not sell, assign, or transfer your personal data to third parties for their own advertising purposes.
9. Privacy Contact
For any enquiry, exercise of ARCO rights, or complaint related to the processing of your personal data, please contact our privacy officer:
Email: [email protected]
Response time: within 20 business days of receiving your request, as established by the LFPDPPP.
If you believe that the processing of your personal data has not been carried out in accordance with the LFPDPPP, you have the right to file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) — Mexico's National Institute for Transparency, Access to Information and Personal Data Protection — at www.inai.org.mx .
10. Amendments to this Privacy Policy
RANU Health reserves the right to modify or update this Privacy Policy at any time to adapt to legislative, jurisprudential, or internal policy changes, or to industry practices.
Any modifications will be published on this page with the date of the last update. In the event of material changes that affect the processing of your personal data, we will notify you by email.
Last updated:
This privacy policy has been prepared in compliance with the provisions of the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) — Mexico's Federal Law on Protection of Personal Data Held by Private Parties — and its Regulations, published in the Diario Oficial de la Federación.