Data processing

1. Controller and processor

The data controller is ROSALES FAMILY CORP, DBA CUBA ENVIOS, with its principal place of business at 1327 NE Pine Island Rd, Suites 101–103, Cape Coral, FL 33909, USA. The designated representative is Anett Díaz García, President of Rosales Family Corp, at the same principal place of business.

Site hosting is managed with cPanel and the domain with GoDaddy. The providers of those services act as processors to the extent applicable to them, because they maintain the infrastructure that serves the site and its domain.

The data protection address is Pending completion by legal counsel. While that address does not exist, any communication on this matter may be directed to the telephone number +1 (239) 258-7677, by WhatsApp at https://wa.me/12392587677, or at any of the three Florida offices (Cape Coral, Lehigh Acres, and Port Charlotte).

2. Categories of data and purpose

• Identification and contact data: to respond to the request and maintain the relationship during the operation.
• Request data: type of service, destination, approximate weight, and message, which the person writes in the browser and which leaves the site in the WhatsApp message it composes.
• Shipment data: tracking number and route milestones, to quote, invoice, and trace the shipment.
• Documentation of the goods: the documentation the operation requests to process destination controls or requirements.
• Communications with the sender and, where applicable, with the recipient, to inform of status and resolve incidents.
• Support records: the history of conversations and requests, to handle claims and justify decisions.

3. Legal basis

Processing of the data of a request is based on the consent you give by checking the corresponding box and on the need to respond to what you have requested before accepting it.

Processing of data necessary to comply with legal obligations and to defend the operation's rights is based on applicable law. Public shipment status queries are based on Cuba Envios's legitimate interest in ensuring traceability.

4. Recipients and transfers

Data is shared, only when the operation requires it, with the carrier moving the goods, with the operation's delivery network on the island, which performs delivery and whose identity is not published on this site, and, when the destination requires a procedure, with the authorities of the destination country and with the documentation the operation has prepared for that procedure.

This version of the site is exclusively informational: it does not allow contracting or registering shipments, does not register recipients, does not process electronic payments, and does not contemplate transfers of personal data to Cuba through its initial features. The form does not send data to any server: it composes the message in the browser and opens WhatsApp, and the only technical data that leaves the browser is the query of the tracking number to the public tracking API. If tools, forms, or providers involving an international transfer were incorporated in the future, that feature would be subject to applicable privacy and data protection law and to U.S. regulations concerning operations involving Cuba, and this policy would be updated before it was activated.

5. Retention and security

The data of a request is retained while the operation is active and, once closed, for the time necessary to address legal or defensive responsibilities. Shipment documentation is retained for the periods required by applicable law.

The operation applies reasonable technical and organizational measures: access control to information, use of secure communication channels, and limitation of the number of people with access to the data of each operation.

6. Rights of the data subject

You may request access, rectification, erasure, restriction, portability, and objection to the processing of your data, and withdraw consent at any time.

The written channel for exercising them is Pending completion by legal counsel, stating which right you wish to exercise and to which request or tracking number it refers. While that address does not exist, you may exercise them by telephone at +1 (239) 258-7677, by WhatsApp at https://wa.me/12392587677, or at any of the three Florida offices (Cape Coral, Lehigh Acres, and Port Charlotte).

7. Minors

The services offered are intended for persons of legal age. If the operation detects that a request comes from a minor, it does not continue processing until the responsible adult is available.

Contact is made with that adult, and the operation may request proof of the relationship with the minor before continuing.

8. Review of this policy

This policy is reviewed periodically and, in any event, when the operation, the site's technology, or applicable law changes. The last updated date appears at the beginning of the document.

Any relevant change is communicated visibly on this same page, and previous versions are retained so that the decisions made at each time can be justified.