Governing language. This English text is provided for your convenience. Activación Web is a Mexican company and the Spanish version of this notice is the governing text; Mexican law (LFPDPPP) applies to the processing of your personal information. Where the two versions differ, the Spanish version prevails.
1. Who is responsible
Activación Web ("Activación Web", "we"), with tax domicile in Mexico City, Mexico, is responsible for processing your personal information under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the privacy notice guidelines issued by INAI.
For anything concerning your personal information, write tohola@activacionweb.mx or call+52 56 2646 8986.
2. Personal information we collect
We collect only what is necessary to provide our services:
- Identification: name, company, job title.
- Contact: email address, telephone and postal address where applicable.
- Operational: information about your business or project that you choose to share.
- Technical: IP address, browser, operating system and browsing data when you visit our site.
- Billing: tax identification, legal entity name and tax domicile when you contract services.
We do not collect sensitive personal data. If it ever became necessary, we would tell you beforehand and request your express consent.
3. Why we process it
Primary purposes (necessary for the relationship):
- Handling contact, quotation and diagnostic requests.
- Delivering contracted development, infrastructure, AI and marketing services.
- Issuing invoices and meeting tax obligations.
- Providing technical support and following up on active projects.
Secondary purposes (you may object without affecting the main relationship):
- Sending a technical newsletter with case studies and updates.
- Internal analysis to improve our services.
4. Data transfers
We transfer data only where strictly necessary to deliver the contracted service: for example to hosting providers (AWS, Google Cloud Platform), payment gateways (Stripe, Mercado Pago, Conekta) or tax authorities (SAT). All of our providers meet standards equivalent to or higher than those required by the LFPDPPP.
We do not sell or rent your personal information to third parties.
5. ARCO rights
Under Mexican law you have the right to Access,Rectify, Cancel or Object tothe processing of your personal data. To exercise any of them, send a request to hola@activacionweb.mx including:
- Your full name and a way to contact you.
- Valid official identification proving you are the data subject.
- A clear and precise description of the right you wish to exercise.
- Any document supporting your request.
We respond within a maximum of 20 business days.
6. Withdrawing consent
You may withdraw your consent at any time by writing tohola@activacionweb.mx. Withdrawal is not retroactive and may, in some cases, make it impossible to continue providing a contracted service.
7. Cookies and tracking
We use cookies and tools such as Google Analytics, Google Tag Manager and social network pixels to understand how the site is used and improve the experience. You can disable cookies from your browser settings or through the preferences panel on this site.
8. Security measures
We have implemented administrative, technical and physical measures to protect your data: encryption in transit (TLS 1.2+), encryption at rest, access control, audit logs, geo-replicated backups and retention policies in line with applicable law.
9. Changes to this notice
Any change to this Privacy Policy will be published on this page with the corresponding update date. We recommend reviewing it periodically.
10. Supervisory authority
If you believe your right to data protection has been infringed, you may contact Mexico's National Institute for Transparency, Access to Information and Personal Data Protection (INAI) athome.inai.org.mx.
11. Your California privacy rights
Scope of this section
Activación Web does not meet any of the three thresholds that define a "business" under the California Consumer Privacy Act as amended by the CPRA: our annual gross revenue is well below USD $26,625,000, we do not buy, sell or share the personal information of 100,000 or more California residents or households, and we derive no revenue from selling or sharing personal information. We are therefore not a covered business and we do not claim to be one. We nevertheless extend the rights described below to California residents on a voluntary basis, and we honour them as written.
Categories of personal information we collect
Using the categories defined in California Civil Code § 1798.140, in the past twelve months we have collected:
- Identifiers: name, email address, telephone number, company name and IP address.
- Customer records: billing name, tax identification and billing address when you contract services.
- Commercial information: services enquired about or contracted, and records of that relationship.
- Internet activity: pages visited, browser, operating system and interaction with our site.
- Professional information: job title and information about your business that you choose to share with us.
What we do not collect
We do not collect biometric information, precise geolocation, government identifiers beyond tax data required for invoicing, or any category of sensitive personal information as defined by the CPRA. We do not knowingly collect information from anyone under 16.
Sources of collection
Directly from you, when you complete a form, write to us, call us or contract our services; and automatically from your device when you browse the site, subject to your cookie choices.
Business purposes for which we use it
- Responding to your enquiry and preparing a proposal.
- Delivering, supporting and invoicing the services you contract.
- Complying with Mexican tax and accounting obligations.
- Measuring how the site is used and improving it, where you consent to analytics.
- Sending commercial communications you have opted into, which you can stop at any time.
Disclosure to third parties
We disclose personal information only to service providers acting on our behalf and bound by contract: hosting and infrastructure providers, email and CRM platforms, analytics providers where you consent, and payment or invoicing providers. We do not disclose personal information to third parties for their own independent purposes.
We do not sell or share your personal information
We have not sold or shared personal information in the past twelve months, and we do not do so today. "Share" here has the meaning given by the CPRA — disclosure for cross-context behavioural advertising. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" mechanism to offer; should that ever change, we would publish the mechanism before any such disclosure occurs.
How long we keep it
Enquiry data is retained for up to twenty-four months from the last contact. Client and billing records are retained for the period required by Mexican tax law, currently five years. After those periods the information is deleted or irreversibly anonymised.
The rights we extend to you
- Right to know: request the categories and specific pieces of personal information we hold about you, the sources, the purposes and the categories of recipients.
- Right to delete: request deletion of the personal information we hold, subject to the exceptions the law recognises, such as records we must keep for tax purposes.
- Right to correct: ask us to correct inaccurate personal information.
- Right to opt out of sale or sharing: we do not sell or share, so there is nothing to opt out of — but the right stands if that ever changes.
- Right to limit use of sensitive information: we do not collect sensitive personal information, so this right has no application here.
- Right to non-discrimination: we will not deny you service, charge you a different price or give you a lower quality of service because you exercised any of these rights.
How to exercise these rights
Write to hola@activacionweb.mx with the subject line "Privacy request". Tell us which right you wish to exercise and include enough detail for us to locate your information. We will acknowledge your request within ten business days and respond substantively within forty-five calendar days; if we need longer, we will tell you why and take no more than a further forty-five days.
Identity verification
To protect your information we must be reasonably certain you are who you say you are. We will ask you to confirm details we already hold — typically the email address or company through which we know you. We use anything you send for verification for that purpose only, and delete it afterwards.
Authorised agents
You may designate someone to make a request on your behalf. We will ask for written proof of that authorisation and will still verify your identity directly.
Questions about this section
Write to hola@activacionweb.mx or call +52 56 2646 8986. Because we are not a covered business under the CCPA, we do not operate a toll-free number; email reaches us fastest and creates a written record for both sides.