Privacy notice

01 — Who answers for your data

Weffy is the party responsible for processing your personal data, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties. These are its identification and contact details:

Data controller

Weffy

Email for personal data matters

contacto@weffy.com.mx

02 — What we collect

Only what you type into the contact form, or what you send us if you'd rather write on WhatsApp or social media.

• Your name.
• Your company name, if you fill it in: that field is optional.
• Your email address.
• The project type you pick from the list.
• The message you write, and whatever you decide to tell us in it.

We don't ask for sensitive, asset-related or financial data, or for your address. Separately, the provider hosting this site records technical connection data —your IP address, for instance— in security logs that are kept for a limited period and put to no other use.

03 — What we use it for

To reply to you. That's all:

• Answering your message and following up on it.
• Putting together a proposal or a quote if the conversation moves forward.
• Formalising and delivering the work if you decide to hire us.

There are no secondary purposes. We send no newsletters, run no advertising with your data, build no profiles, and never sell, rent or trade your information. If we ever wanted to use it for something other than replying to you, we'd ask you first and separately.

04 — Who else touches it

We don't transfer your data to third parties. We do rely on providers that process it on our behalf and under our instructions, with no right to use it for their own ends:

• Vercel Inc. (United States): hosts the site and runs the form.
• Resend (United States): delivers the email carrying your message to our inbox.
• Google LLC (United States): the inbox where we read that email.

Beyond those three, we'd hand over your data only if a competent authority required it in writing and in accordance with the law.

05 — Your rights

Mexican law gives you four rights over your data, known as ARCO rights:

• Access: knowing what we hold about you and what we do with it.
• Rectification: correcting anything wrong or incomplete.
• Cancellation: asking us to delete it.
• Objection: asking us to stop using it for a given purpose.

To exercise any of them, write to the address above. Tell us your name, a way to reach you, which of the four rights you want to exercise and over which data, and attach an ID that lets us confirm it's you. We answer within twenty business days at most and, where the request stands, act on it within the following fifteen business days. There is no charge for this.

06 — How to ask us to stop

You can withdraw your consent whenever you like, without explaining why: an email to the address above is enough. You can also ask us merely to limit the use or disclosure of your data, short of deleting it.

In some cases the law doesn't let us act on the request straight away — an outstanding tax or contractual obligation, for example. If that happens, we'll tell you which one and for how long.

07 — How long we keep it

We keep your message for as long as the conversation is alive. If no project comes of it, we delete it no later than twenty-four months after the last contact.

If we do work together, we keep what's necessary for as long as the applicable tax and contractual obligations require, and delete it once that period ends.

08 — Cookies and tracking

This site uses no cookies, no pixels, no analytics tools and no advertising. Nothing here records what you do or follows you to other sites.

The only technical thing the form does is note the moment you opened it, so we can tell a person from a bot that fills it in and submits in one second. That value identifies no one, is never stored, and doesn't leave your browser until you submit the form.

09 — Changes to this notice

If we change this notice, we publish the new version at this same address and update the date in the heading. If the change is substantial and you had already written to us, we'll let you know at the address you used.

10 — If you think we got something wrong

Write to us first: chances are an email settles it. If you still believe your right to the protection of personal data has been violated, you may turn to the competent Mexican federal authority for the protection of personal data held by private parties.