Privacy Notice

Personal data we collect

Personal data may be obtained directly when you provide it through this website.

We collect only the data you choose to provide and what is strictly necessary to operate the site securely:

• Contact form: full name and email address (required); company, phone number, and industry sector (optional); and the content of the message you write.
• Newsletter subscription: email address and a record of your consent.
• Technical security data: IP address and browser information, processed automatically and transiently to rate-limit submissions and verify that they are not automated.

We do not collect sensitive data

This site does not request sensitive, financial, or asset-related personal data. Please do not include them in the message field; if the matter you raise requires the processing of sensitive personal data, it will only be processed when strictly necessary to provide the legal services and in accordance with applicable law, using the confidential channels established once a professional relationship begins.

Purposes of processing

Primary purposes, necessary for the relationship with the firm: to respond to your inquiry, assess the matter you raise, determine the feasibility of a possible professional relationship, communicate with you, and, where applicable, schedule a consultation.

Secondary purpose, which requires your express consent: sending you our newsletter with tax and administrative law analysis. You may decline this purpose without affecting how your matter is handled, and unsubscribe at any time from the email itself or by writing to us.

Processors and transfers

We do not sell, assign, or trade your personal data. Personal data may be processed by third parties acting as data processors, exclusively to provide the technology services necessary to operate the site and always under our instructions.

To operate the site we rely on technology providers acting as processors, which handle data solely under our instructions and whose servers are located outside Mexico:

• Vercel Inc. (United States): website hosting and aggregate usage metrics.
• Resend (United States): delivery of the email generated by the form and management of the newsletter list.
• Upstash (United States): rate-limiting of submissions by IP address.
• Cloudflare, Inc. (United States): anti-automation verification of the form.

International transfers resulting from the use of these providers are carried out with the security measures and contractual obligations necessary to protect your personal data, in accordance with applicable law.

Security measures

We implement reasonable administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized access, use, or processing. However, no transmission or storage system is completely secure, so we cannot guarantee the absolute security of data transmitted over the Internet.

Retention of personal data

Personal data will be retained only for as long as necessary to fulfill the purposes described in this notice and applicable legal obligations, after which it will be deleted or, where applicable, anonymized in accordance with our internal procedures.

Data subject rights and withdrawal of consent

You have the right to access your personal data, rectify it when inaccurate, cancel it when you consider it unnecessary, and object to its processing for specific purposes, as well as to withdraw any consent you have given us.

To exercise any of these rights, write to a@pagaza.mx stating your name, the right you wish to exercise, and the specific data your request refers to. The request must meet the requirements set by applicable law, including documentation proving your identity or, where applicable, the corresponding legal representation. You may also submit it at our offices. We will respond within the period established by applicable law and, where appropriate, will implement your request within the timeframes set by that law.

If you believe your right to the protection of personal data has been infringed, you may file a complaint with the competent authority on personal data protection.

Cookies and similar technologies

This site does not use advertising or cross-site tracking cookies, and does not build profiles of its visitors. The form's anti-automation check and the aggregate usage metrics may use temporary technical identifiers necessary for those functions to work. You can configure your browser to block or delete these technical identifiers; however, doing so may affect certain functionality on the site, including the contact form.

Changes to this notice

This notice may be amended due to legislative changes, requirements from the authorities, or adjustments to our processes. Any amendment will be published on this same page, along with its update date.