SHEIN Privacy Notice

EFFECTIVE DATE: AUGUST 20, 2026

This Privacy Notice explains how Moda Sinfonía, S. de R. L. de C. V. (hereinafter, "SHEIN") collects and processes your personal data when you access the website shein.com.mx (the "Site") or use the SHEIN mobile application (the "Application") (the "Privacy Notice"). SHEIN collects and processes personal data as necessary, appropriate, and relevant for the proper functioning of the Site and/or the Application and for the purpose of facilitating the sale of products. All collection and processing is carried out in accordance with this Privacy Notice.

CONTENTS

Click on the links below to go to a specific section of this Notice.

• 1. Identity of the Data Controller >​

• 2. Additional Terms and Conditions >​

• 3. Withdrawal of Consent >​

• 4. Purpose of Information Processing >​

• 5. Online Marketplace; Information Transfers >​

• 6. Objection to Processing; Rights Regarding Your Personal Information >​

• 7. Information Security; Confidentiality >​

• 8. Changes to This Privacy Notice >​

• 9. Children's Data >​

• 10. Contacting the SHEIN Privacy Program >​

1. IDENTITY OF THE DATA CONTROLLER

In Mexico, the Site and the Application are operated by SHEIN. Should you need to contact SHEIN, you may do so by postal mail at the following address: Salamanca 87, Interior 2, Oficina 4, Colonia Roma Norte, C.P. 06700, Alcaldía Cuauhtémoc, Ciudad de México, or by email at [email protected]​.

2. ADDITIONAL TERMS AND CONDITIONS

Use of the SHEIN Site and Application in Mexico is governed by these Terms and Conditions​. We ask that you review them carefully for additional information on how SHEIN operates the Site, the Application, and the Online Marketplace (as such term is defined below).

3. WITHDRAWAL OF CONSENT

By using the Site or the Application, or by registering an account on the Site, you are deemed to grant your consent for SHEIN to collect and process your personal data as set forth in this Privacy Notice. If you wish to withdraw your consent, we ask that you contact us through the Privacy Center or by email at [email protected]​.

4. PURPOSE OF INFORMATION PROCESSING

SHEIN operates the Site and the Application and collects personal data as follows:

Purpose

Personal Data Collected by SHEIN

Account creation and management;

  • Contact information, including email address and password, to register on the Site or the Application.
  • Profile data, including your style preference, should you choose to provide such information voluntarily, in order to personalize your account.

Order processing and fulfillment;

  • Identity and contact information, such as name, phone number, and shipping address; as well as your financial or payment account information, for purposes of delivery, returns, refunds, sales tax determination, and payment operations.
  • Detailed information about your transactions, such as return and refund details, gift card number, and order history, in order to fulfill basic functions, including processing your payment and return requests, as well as keeping you informed of your order status and shipping logistics.
  • Location data (inferred from your IP address) to personalize your experience by displaying the appropriate local website, language, or user experience, and to calculate delivery time.
  • Additional identity information that you choose to provide, such as your name, email address, third-party payment processor account, and city, for purposes of identity authentication.
  • Your government-issued identification number, when your order is fulfilled by a third-party seller located outside Mexico and such information is required for customs clearance or cross-border shipping of your order.

Customer service;

  • Your communication history with us through various channels, such as email, telephone, social media, postal mail, instant messaging, and our customer service platform, to respond to your requests; to monitor, review, and analyze communications in order to improve the quality of our customer service; to evaluate and train our customer service personnel; to improve and develop our AI-powered virtual assistant; and to keep you informed about your account and the Services.
  • Photographs that you upload to the Site, in accordance with the Terms and Conditions of the Site, to provide product advice and to allow you to show other potential customers how items may look when purchased or worn.

Providing product and seller reviews;

  • Photographs, customer reviews, and other feedback that you upload to our Services in accordance with our Terms and Conditions, in order to offer product advice and to allow you to voluntarily show other potential customers how certain items may look when worn, or to share experiences with sellers on our Services.

Promotions, marketing, and advertising;

  • Contact information, such as phone number and email address, for telemarketing and email marketing purposes.
  • Device identifiers, device operating system data, and cookie information, for the purpose of targeting and measuring the effectiveness of SHEIN's advertising offerings.
  • Data related to how you interact with the SHEIN Site and its Application, such as browsing, adding items to your shopping cart, reserving products, placing orders and returns, conducting market research, performing statistical analysis, and displaying personalized advertising based on your activity on the Site and Application, as well as inferred interests.
  • Contact and identity information, such as name, email address, and phone number, when you voluntarily participate in a contest, market survey, or event, or other marketing campaigns organized by us.
  • Sharing your personal data with external advertisers.

Improving our products or services, or personalizing your account;

  • Collecting information from your device and usage data on our Site or Applications to analyze failures, troubleshoot issues, and perform system maintenance, as well as to configure default settings for you, such as language and currency.
  • When you optionally provide such information, we may collect general personal data through which you cannot be identified, such as your body shape, height, chest/waist/hip circumference, and weight. This information may be used by us to recommend clothing sizes or styles, personalize your account, or provide garment fit prediction services.
  • Sharing your personal data within and across our corporation, to fulfill our business purposes and personalize your account.
  • Collecting your records and "Like" votes when you are asked to indicate your preference between two items, to provide preference configuration options.
  • Displaying information that you choose to post in the public sections of the Site or the Application, such as customer reviews.

Preventing and investigating fraud and other illegal activities;

  • Information automatically collected through the Site or the Application, such as browser type, device information, operating system, and account configuration information, to prevent and detect fraud and reduce credit risk.
  • Login data to control risks and submit fraud reports.
  • Billing address to verify payment information.

Complying with legal or compliance requirements;

  • Identity information, such as information related to your identity document or passport, for customs clearance purposes.
  • Transaction history and certain identifying information to manage and resolve legal disputes, as well as for regulatory investigations and to comply with legal requests issued by a competent agency or court.

Managing our partner programs (e.g., the Refer-a-Friend Program)

  • Basic personal identifiers and contact information (such as email address and password), for profile creation, program onboarding, program promotions and incentives, and communication with program participants regarding rights, benefits, and services offered by SHEIN.
  • Location data, for profile creation and program onboarding.
  • Business information (information about referral orders, including transaction details and records) and payment card information and financial data, including the referrer's tax identification number (e.g., RFC), for purposes of commission accounting and payment, tax reporting and compliance, and internal auditing.
  • Referral link and associated content.
  • Information about the operation and administration of the program, including the referrer's nickname, SHEIN account information, program performance (i.e., use of the referral link/code, information about referred orders), and commission details, for purposes of operational management of the program and system maintenance. Aggregated and anonymized data may be used for business analysis purposes to improve the program.
  • SHEIN account and profile information, for purposes of regulatory compliance oversight, content moderation (e.g., conduct prohibited under the Terms and Conditions), and communication in accordance with applicable laws, risk management, and fraud prevention.

Other purposes.

  • SHEIN may use your information for any other purpose that has been communicated to you before you provided your personal information or that is reasonably necessary to provide the Site and the Application or other related products and/or services that you have requested, with your authorization or in accordance with your instructions.

5. ONLINE MARKETPLACE; INFORMATION TRANSFERS

SHEIN operates an online marketplace where affiliated and third-party sellers offer products for sale on the Site and the Application (the "Online Marketplace"). In connection with the Online Marketplace, SHEIN will transfer your personal data to third-party sellers operating on the Online Marketplace to facilitate order fulfillment and delivery. When your order is fulfilled by a third-party seller located within the national territory, such transfer will be limited to the personal data necessary for domestic order fulfillment. When your order is fulfilled by a third-party seller located outside Mexico, SHEIN may additionally share your government-issued identification number with such seller, as necessary for customs clearance and cross-border shipping of your order.

SHEIN is part of a broader group of companies collectively referred to as the "SHEIN Group." SHEIN may transfer your personal data among members of this corporation, in accordance with this Privacy Notice and applicable law.

In addition to the foregoing, SHEIN will also transfer your personal data to third parties both within and outside Mexico as follows:

Provider/Service Provider/Processor

Services Provided

IT software and systems service provider

  • Website hosting services (including cloud storage), mobile application or software optimization services, customer relationship management software, email service providers, or system maintenance services.

Payment service provider

  • Third-party payment processing services.

Marketing and advertising services

  • Assistance in reaching new potential customers through multiple communication channels or sharing with affiliated companies that promote products on the Site and the Application, on their websites.

Order fulfillment service provider

  • Provision of logistics, warehousing, and distribution services, as well as return and exchange services and order status notification services for the items you have purchased.

Customer service provider

  • Customer service and support assistance.

Fraud prevention and information security service provider

  • Identity verification, fraud prevention, or credit risk reduction services, to protect the Site, the Application, and SHEIN's business.

Other service providers selected by you

  • Other third parties, such as size recommendation and garment fit prediction service providers, if you have chosen to allow SHEIN to provide you with product recommendations.

Additionally, SHEIN may also transfer personal data to third parties in the following circumstances:

• Regulatory compliance. SHEIN may share your personal data as required by law, or when SHEIN considers that disclosure of your personal data is necessary to protect its rights or comply with applicable laws, regulations, or judicial decisions. SHEIN may also disclose your personal information in situations where it considers doing so is necessary to enforce its contractual or other rights against you, to protect its intellectual or physical property, or arising from other legally protected interests.

• Law enforcement requests. SHEIN may share your personal data in response to a valid and enforceable request issued by any law enforcement agency. SHEIN will endeavor to provide only the minimum information required to comply with such requests.

• Customer security. SHEIN may disclose personal data to enhance customer security or protect the safety of other customers.

• Consent. With your consent, SHEIN may transfer personal data for purposes other than those set forth in this Privacy Notice.

• Corporate Transactions. SHEIN may transfer your personal data, including your account information, to a buyer, prospective buyer, or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding in which personal data held by SHEIN about the Site, the Application, or the Online Marketplace is among the assets transferred, assigned, or sold. By using the Site or the Application, you acknowledge and agree that SHEIN has the unrestricted right to assign your personal data under the conditions set forth in this paragraph.

6. OBJECTION TO PROCESSING; RIGHTS REGARDING YOUR PERSONAL INFORMATION

If you wish to limit the collection of your personal data by SHEIN, you may visit the My Account section on the Site and update your personal information. Please note that if you delete certain types of personal information (for example, your shipping address), SHEIN may not be able to process orders, enable certain features of the Site or the Application, or provide proper access to and use of the Online Marketplace.

You have certain rights regarding your personal data. To exercise such rights, we ask that you contact SHEIN by visiting our Privacy Center and submitting the corresponding request.

Additionally, you have the following rights regarding your personal information:

  • Objection. You have the right to object to the processing of your personal data by SHEIN. If your objection does not conflict with SHEIN's legal obligations or the rights of other customers, SHEIN will consider your objection as a request to delete your personal data and will act in accordance with such request.
  • Access to Personal Data. You have the right to access, in a reasonable and usable format, the personal information that SHEIN has collected from or about you.
  • Cancellation/Deletion. You have the right to request that SHEIN cancel the processing or delete the personal information it has collected from or about you.
  • Correction. You have the right to correct or update any account-level information you share with SHEIN, other than your initial account email address.

SHEIN evaluates requests to exercise information rights on a case-by-case basis, including by verifying your identity.

You may also write to [email protected] to request additional assistance or inquire about SHEIN's privacy practices.

7. INFORMATION SECURITY; CONFIDENTIALITY

SHEIN maintains reasonable physical, electronic, and procedural safeguards designed to protect your personal data against unauthorized processing, use, or disclosure. SHEIN's security measures include industry-standard physical, technical, and administrative measures to preserve the confidentiality of your personal data and prevent unauthorized access to or disclosure of your personal information.

The Internet is not a secure environment and SHEIN cannot guarantee that your personal data will be secure. Therefore, SHEIN strongly recommends that you use a secure method and a complex password to help ensure the security of your account. SHEIN also recommends that you do not share your password with others or reuse passwords on our Site, Application, or Online Marketplace that you use on other sites or applications, as doing so increases the likelihood of becoming a victim of a credential stuffing attack or other malicious cyber activity. If you believe that the security of your account or personal information has been compromised, contact SHEIN immediately.

8. CHANGES TO THIS PRIVACY NOTICE

SHEIN may modify this Privacy Notice from time to time to reflect the way it processes your personal data. In the event that SHEIN makes modifications, it will update the effective date indicated at the top of this Privacy Notice. In general, SHEIN reserves the right to modify this Privacy Notice without prior notice by posting a copy thereof on the Site. Your use of the Site or the Application after the effective date of the updated Privacy Notice, in accordance with this Section, will constitute your acceptance of the changes. If you do not agree with the modified Privacy Notice, we ask that you discontinue use of the Site and the Application. In the event that the modifications made substantially affect your privacy rights under this Privacy Notice, SHEIN will attempt to provide you with advance notice (including through real-time or near-real-time disclosures) or by any other means through the Site, or by any other contact method, so that you have a reasonable opportunity to review the changes before continuing to use the Site or the Application.

9. CHILDREN'S DATA

If a minor has provided personal information without the consent of their parents or guardians, the parent or guardian must contact us immediately to delete the relevant personal information and deactivate the minor's account. As described further in our Terms and Conditions​, please do not upload photographs depicting other persons, especially if they are minors.

To use this site, you must be at least 18 years old. SHEIN does not sell products for minors. We may sell children's products for adults. If you are under 18 years of age, you may only use SHEIN under the supervision of a parent or guardian.

If you are under 18 years of age, SHEIN may process some of your personal data:

Product Reviews: A parent, guardian, or other adult who purchases an item for you may take your photograph and post it as part of a product review. Parents are advised not to post photos in which the child's face is identifiable.

Children's Profiles: A parent, guardian, or other adult may add a profile for you to their personal profile. This allows them to indicate to us what types of products they like to purchase. We use this information to recommend other products that we believe may be of interest to them. To create this profile, we need to know the approximate age of the child (i.e., the month and year of birth) and whether the child is a boy or a girl. We also ask parents to confirm that they have the legal authority to publish the information provided. They will also be asked to create a nickname for the profile. To protect the child's privacy, the child's real name should not be used.

This profile will only be visible to the person who created it.

10. CONTACTING THE SHEIN PRIVACY PROGRAM

If you have questions or concerns regarding any information contained in this Privacy Notice, we ask that you contact us through our dedicated Privacy Center​.

SHEIN's Global Privacy Program can be contacted via the email address indicated below or through SHEIN's postal address:

SHEIN Privacy Office

777 S. Alameda St., Suite 400

Los Angeles, CA 90021