Privacy Policy
Mixue Americas Franchise Portal
Effective date: March 31, 2026
1. Who We Are
This website ("Mixue Americas Franchise Portal", accessible at www.mixuefranchise.com) is operated by Mixue Americas. It serves as a geographic routing portal that directs visitors to the official Mixue franchise website for their country. We are committed to protecting your privacy and complying with applicable data protection laws, including the California Consumer Privacy Act (CCPA/CPRA), Brazil's Lei Geral de Proteção de Dados (LGPD), Mexico's Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), and applicable privacy laws across the Americas.
2. Data We Collect
When you visit this portal, we collect the following limited data for the sole purpose of routing you to the correct regional website: • Country code — derived from your network connection via Cloudflare's edge infrastructure. No IP address is sent to any third party. • Device type — anonymized category only (Mobile, Tablet, Desktop, or Bot), derived from your browser's User-Agent string. The full User-Agent string is never stored. • Selection method — whether your country was detected automatically or chosen manually. • Redirect destination — the URL of the regional website you were directed to. • Timestamp — the date and time of your visit (UTC). We do NOT collect: names, email addresses, payment information, precise GPS location, or any other personally identifiable information beyond what is described above.
3. How We Use Your Data
The data listed above is used exclusively for: • Routing you to the correct country-specific Mixue franchise website. • Generating aggregate, anonymized analytics (e.g., total scans per country per day) to help us understand which regional websites are most visited. • Detecting and preventing abuse or unauthorized automated access. We do not use your data for advertising, profiling, or any purpose beyond the routing function described above.
4. Third-Party Data Sharing
We do not sell, rent, or share your personal data with third parties for commercial purposes. Geolocation is performed entirely by Cloudflare's edge network using the CF-IPCountry header — your IP address is never transmitted to any external geolocation service. Cloudflare processes data in accordance with its own Privacy Policy (cloudflare.com/privacypolicy). We may disclose data if required by law, court order, or governmental authority.
5. Data Retention
Access logs are automatically deleted after 90 days. Aggregate statistical data (total counts by country and date, with no individual identifiers) may be retained for up to 24 months for business analysis purposes.
6. Your Rights
Depending on your jurisdiction, you may have the following rights: • Right to know / access — request information about the data we hold about you. • Right to deletion — request that we delete your data. • Right to correction — request that we correct inaccurate data. • Right to opt out — for California residents under CCPA, you have the right to opt out of the sale of personal information (we do not sell personal information). • Right to non-discrimination — we will not discriminate against you for exercising your privacy rights. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).
7. Cookies & Local Storage
This portal does not use advertising or tracking cookies. A session cookie (app_session_id) is set only if you access the administrator panel and log in. This cookie is strictly necessary for authentication and is deleted when you log out or close your browser session. No third-party cookies are set on this portal.
8. Children's Privacy
This portal is not directed at children under the age of 13 (or 16 where required by local law). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at [email protected].
9. Security
We implement industry-standard technical and organizational measures to protect your data, including HTTPS encryption for all data in transit, access controls limiting data access to authorized personnel only, and automatic deletion of logs after the retention period.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the date of the most recent revision. Continued use of this portal after any changes constitutes your acceptance of the updated policy.
11. Contact & Data Controller
Data Controller: Mixue Americas Email: [email protected] Website: www.mixuefranchise.com For Brazilian users (LGPD): You may also contact our Data Protection Officer (DPO) at the same email address. For Mexican users (LFPDPPP): This notice (Aviso de Privacidad) is provided in accordance with Article 15 of the LFPDPPP.
Questions? Contact us at [email protected]
© 2026 Mixue Americas. All rights reserved.