— privacy notice —
Privacy Notice
Last updated: October 1, 2026 · Effective from this date
Who we are
Lumberjack Kitchens, part of Lumberjack Group, based in Tijuana, Baja California, Mexico, is responsible for the personal information you give us through this website. As a Mexican business, we handle it under Mexico's federal law on the protection of personal data held by private parties. This notice also covers visitors from the United States, including California.
Privacy contact: privacidad@lumberjackkitchens.com · lumberjackkitchens@gmail.com · WhatsApp +52 664 207 2146.
Information we collect
We collect these categories of personal information when you fill out a form, book a visit, request a quote or message us:
- Identification: full name; when you sign a contract, a copy of an official ID and the tax information we need to invoice you
- Contact: phone / WhatsApp, email, city or area, ZIP or postal code, and the delivery or installation address
- Project: room measurements, site photos, design files you upload, material preferences and your notes
- Payments: bank transfer receipts and, for refunds, the account to send them to. We do not store card numbers; card payments are handled by the payment processor
- Messages: what you write to us by WhatsApp or email
- Browsing: IP address, browser and device type, pages visited, and the website, campaign tags (UTM) or ad click that brought you
How we use it
Primary purposes (needed to serve you):
- Answer your request for information or a quote
- Schedule and carry out the pre-quote visit
- Prepare your formal quote and, if you go ahead, the contract to manufacture and deliver your project (and to install it, in Baja California)
- Meet tax and legal obligations (invoices, receipts, records kept for 5 years)
- Warranty and after-sales service
- If an architect, designer or real-estate agent referred you through their link, record that referral so we can pay their commission
Secondary purposes (optional — you can object without affecting the above):
- Promotional messages by email or WhatsApp
- Customer satisfaction surveys
- Showing your project in our portfolio (without identifying you unless you expressly agree)
- Measuring how our website and our ads perform
Cookies and similar technologies
We use three kinds:
- Essential (always on): they remember your language and your cookie choice and keep forms working.
- Attribution (always on, set by our own site, kept for 90 days):when you arrive from an ad or a link with campaign tags, we store those tags (UTM) and the ad click identifiers from Meta and Google (fbclid, gclid). On your first visit our server also sets Meta's browser identifier (the _fbpcookie). We use them to know which ad or website brought you if you contact us. They are set even if you choose "Essential only".
- Analytics and marketing (only if you choose "Accept all"): Google Analytics and the Meta Pixel load in your browser only after you accept them.
Our hosting provider's analytics (Vercel Web Analytics and Speed Insights) count page views and measure site speed on every visit, without advertising cookies.
To change your choice, delete this site's cookies and stored data in your browser; the cookie banner will appear again on your next visit.
How we measure our ads with Meta
When you send us a form, our server sends Meta (Facebook and Instagram) a "lead" event through Meta's Conversions API, so we can tell whether our ads work. The event includes your phone number, email, first name and city in hashed form (turned into a code that does not show them as written), plus your IP address, your browser information, the page you sent the form from, and the Meta identifiers described above. Today this happens whether or not you accepted marketing cookies.
You can object to this use by writing to privacidad@lumberjackkitchens.com.
Tracking across other websites and "Do Not Track"
Other companies may collect information about your online activities over time and across different websites when you use our site: Meta, through the identifiers and the lead event described above, and Google and Meta, through their tags if you accept marketing cookies.
Our site does not respond to browser "Do Not Track" signals. The cookie banner controls Google Analytics and the Meta Pixel; it does not stop the attribution cookies or the Meta lead event described above.
Who we share it with
We share personal information only with these categories of third parties, for the purposes above:
- Service providers that run our site and systems: hosting and site analytics (Vercel), database (Supabase), email delivery (Resend), WhatsApp messaging (Meta) and an artificial-intelligence provider for our WhatsApp assistant
- Advertising and analytics platforms: Meta and Google, as described above
- Payment processors (MercadoPago / Stripe), when you pay by card
- Freight and logistics providers, and installation crews in Baja California
- Tax and legal advisors
- Authorities, when the law requires it
Automated assistant and artificial intelligence
To answer quickly on WhatsApp we use an automated assistant ("Jack") supported by artificial intelligence. It reads your messages to answer questions, guide you through our products and speed up your quote.
- There is always a person behind it: you can ask to talk to a person at any time and a member of our team will take over the conversation.
- No decisions with legal effects: the assistant does not make automated decisions that have legal effects on you or significantly affect you. Prices, contracts and commitments are always confirmed by a person.
- How your messages are used: the conversation is processed only to handle your request and improve our service, under the purposes of this notice. It is not used to train artificial-intelligence models and is not shared with third parties for their own commercial purposes.
- Technology provider: language processing relies on a specialized artificial-intelligence provider that acts under confidentiality obligations and only to provide this service.
If you prefer not to use the assistant, write "I want to talk to a person" and we will connect you with someone from our team.
Your rights: reviewing and changing your information
You can ask us at any time to access, correct or delete your personal information, to stop using it, to withdraw your consent, or to limit how we use or disclose it. In Mexico these are known as ARCO rights.
Send your request to privacidad@lumberjackkitchens.com with:
- Your full name and how you would like us to reply
- A copy of an official ID (to confirm it is you)
- A clear description of what you want us to do
- Anything else that helps us find your information
We reply within 20 business days of receiving your request. To stop promotional messages, just tell us by WhatsApp or email.
How long we keep it
- Leads and quotes not signed: 12 months from the last contact
- Clients with a signed contract: 5 years after the project closes (tax requirements)
- Warranty records: up to 12 months after the warranty ends
After that, we delete the data securely or anonymize it.
Changes to this notice
We post any change to this notice on this page and update the "Last updated" date at the top. We recommend checking it from time to time.
Complaints
If you believe your data-protection rights have been violated, contact us first at privacidad@lumberjackkitchens.com. If you are not satisfied with our answer, you can file a complaint with Mexico's data-protection authority for private companies, the Ministry of Anti-Corruption and Good Government (Secretaría Anticorrupción y Buen Gobierno): gob.mx/buengobierno.