CPE Directo Privacy Policy

Who we are

CPE runs CPE Directo (the website, the app, WhatsApp and phone) so businesses in Puerto Rico can place orders with us. This policy explains what personal data we collect, why, and who we share it with, under Puerto Rico Act 39-2012 and its regulation. Although our customers are businesses, the name, phone and email of the person using the account are personal data, and we protect them as such.

What data we collect

• About you: name, phone, email and preferred language.
• About your business: name, type, address, municipality, ZIP code, merchant registration and CPE customer number.
• About your orders: products, quantities, delivery dates, receiving notes, payments, claims and invoices.
• About your use: sign-in date and time, IP address, browser or device type, and the consents you gave (text, date and IP).
• We do not store card numbers. Our payment processor receives and stores them.

How we use it

• To open and run your account, and to confirm it is you with sign-in codes.
• To take, prepare, deliver and invoice your orders, collect payment and handle claims.
• To keep you updated on your orders, deliveries, invoices and payments.
• To send you offers, only if you agreed.
• To comply with the law (tax, PACA, food safety) and prevent fraud.
• To improve the service with aggregated usage data.

Who we share it with

We do not sell or rent your data. We only share it with those who help us provide the service, and only for that:

• AFS, our internal ordering and billing system (ERP).
• Stripe, to process card payments.
• WhatsApp (Meta), for messages and sign-in codes.
• Resend, to send emails.
• Railway, which hosts the platform and the database.
• Authorities, when the law requires it.

Your phone number and your consent to receive messages are not shared with third parties for marketing purposes. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes; text messaging originator opt-in data and consent will not be shared with any third parties. Text messages (SMS) about your orders and your account access are part of the Caribbean Produce Exchange messaging program described in the brand's single [privacy policy](https://www.caribbeanproduce.com/privacy) and [terms](https://www.caribbeanproduce.com/terms); this policy complements them for the portal.

How long we keep it

• Orders, invoices, payments and IVU certificates: 7 years, for tax and PACA requirements.
• Message consents and opt-outs: 5 years.
• Your account data: while you have access. After that we delete it or make it anonymous, except what the law requires us to keep.
• Sign-in codes: deleted when used, and they expire after 10 minutes.

Your rights

• You can ask to see or correct your data. Call Customer Service or write to us; we answer within 30 days.
• You can ask us to delete your data, except what the law requires us to keep.
• You can stop receiving offers at any time: reply STOP or ask us by any means.

Cookies and "Do Not Track"

• We only use what the portal needs to work: a session cookie to keep you signed in and your browser's storage for your cart and preferences.
• We do not use advertising or third-party analytics cookies, and we do not allow third parties to collect data about your activity on CPE Directo. On the payment page, Stripe uses its own cookies to prevent fraud.
• We do not track your activity across other sites or over time. That is why your browser's "Do Not Track" signal does not change how CPE Directo works.

Security and breach notice

• We protect your data with encrypted connections, access limited to the staff who need it, and one-time codes instead of passwords.
• If a security breach affects your information, we notify you as soon as possible and notify DACO within 10 days, under Act 111-2005.

Minors

CPE Directo is for businesses and is not directed to anyone under 18.

Changes to this policy

We publish any change on this page with its new version. If the change is important, we let you know by WhatsApp or email before it applies.

Contact

Caribbean Produce Exchange LLC, KM 2.8 Interior Carr. 869, Las Palmas Industrial Park, Cataño, PR 00962. Customer Service: (787) 793-0750.