Privacy Notice

1. Data controller

WITS, domiciled in Guadalajara, Jalisco, Mexico, is responsible for the processing of your personal data in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP) and its Regulations.

For any matter related to your personal data, you can contact us at: privacidadwits.mx

2. Personal data we collect

When you use our contact forms, we collect:

• Full name
• Email address
• Phone number (optional)
• Company name (optional)
• Information about your use case or business challenge

In addition, we automatically collect technical data when you browse our site: IP address, browser type, device, pages visited and performance metrics (Core Web Vitals). This data is used in aggregated and anonymized form.

We do not collect sensitive personal data (health, religious beliefs, racial origin, sexual preferences, among others covered by the LFPDPPP).

3. Purposes of processing

Primary purposes (essential to handle your request):

• Respond to your contact or quote request
• Send technical or commercial information you have requested from us
• Contact you to schedule meetings or calls
• Prepare service proposals
• Comply with obligations arising from a contractual relationship

Secondary purposes (not essential; you may object):

• Sending informational communications (newsletter)
• Invitations to events or webinars
• Improving the experience on our site

If you wish to object to processing for secondary purposes, send an email to privacidadwits.mx stating your name and the specific objection.

4. Data transfers

Your personal data may be shared with third parties only in the following cases, which do not require your consent under Article 37 of the LFPDPPP:

• Technology providers that render services to us under confidentiality agreements (hosting, email, CRM and web analytics: Google Analytics by Google LLC and PostHog by PostHog Inc., whose servers may be located outside Mexico)
• Competent authorities, pursuant to legal requirements
• In the event of a merger, acquisition or corporate reorganization of WITS

We do not sell or trade your personal data for advertising or any other purpose.

5. ARCO rights

At any time, you have the right to exercise your rights of Access, Rectification, Cancellation or Objection (ARCO rights), as well as to revoke your consent. To do so, send a request to privacidadwits.mx with the following information:

• Your name and a means to receive the response
• A document proving your identity
• A clear description of the right you wish to exercise
• The data or information the request refers to

We will respond to your request within a maximum of 20 business days, in accordance with Article 32 of the LFPDPPP.

6. Use of cookies and similar technologies

Our site uses cookies and similar technologies that are strictly necessary for its operation (session preferences) and anonymized performance metrics (Core Web Vitals).

Only if you accept cookies in the notice shown when you enter the site do we also use web analytics tools to understand how the site is used and to improve it:

• Google Analytics (Google LLC): measures visits, page views, traffic sources and contact requests submitted.
• PostHog (PostHog Inc.): records the pages visited, clicks and a recording of the browsing session on the site. In the recording, the content of form fields is masked: what you type is never recorded.

These tools are not used to identify you personally or to sell advertising. We do not use advertising cookies or cross-site tracking cookies. If you reject cookies, they are not activated.

You can change or withdraw your consent at any time: Change my cookie preferences. You can also disable cookies in your browser settings, although this may affect some features of the site.

7. Data retention

We retain your personal data only for as long as necessary to fulfill the purposes described or as required by applicable law. For sales prospects that do not result in a contract, data is retained for a maximum of 24 months from the last contact.

8. Security measures

We implement reasonable administrative, technical and physical measures to protect your personal data against damage, loss, alteration, destruction or unauthorized use. These include, among others: encryption in transit (HTTPS/TLS), access controls, backups, and staff training on data protection.

9. Changes to this Privacy Notice

Any material change to this Notice will be published on this same page with its update date. We recommend that you review it periodically. If you have provided your email address and we make substantial changes, we will notify you by that means.

10. INAI

If you believe your right to the protection of personal data has been violated, you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales, INAI): home.inai.org.mx