Comprehensive Privacy Notice

1. Identity and address of the controller

Arturo Santiago Chávez Machorro, an individual engaged in business activities (persona física con actividad empresarial) who operates under the trade name Arturo Web Developer (hereinafter, “the Controller”), is responsible for the processing of the personal data collected through the website https://arturowebdeveloper.com, the contact channels indicated in this notice and, when available, its forms.

Personal data is processed in accordance with the applicable Mexican legislation on the protection of personal data held by private parties.

2. Personal data processed

To fulfill the purposes described in this notice, the Controller may process the following categories of personal data:

• Identification and contact data: name, business name, email address, telephone number, WhatsApp number and general location of the business.
• Business information: services requested, objectives, project characteristics, features, approximate budget, timelines and other information the data subject shares when requesting a quote, as well as the answers to the quote questionnaire when it is available.
• Attachments: logos, images, photographs, texts and documents related to the project.
• Technical information: access logs, browser and device data, and identifiers needed for the security and operation of the website, when processed.

Current availability: for now, the website does not include forms or an online questionnaire; inquiries and quote requests are handled through the published contact channels. References in this notice to forms or to the quote questionnaire describe a future feature and will apply when it becomes available.

The Controller does not deliberately request sensitive personal data.

Data subjects are asked not to share passwords, identity documents, sensitive personal data or third-party data that is not necessary for their request or project.

3. Purposes of processing

Personal data is processed for the following primary purposes, which are necessary for the relationship that the data subject requests or maintains with the Controller:

• Responding to inquiries and quote requests.
• Understanding the needs of the project.
• Preparing cost estimates and commercial proposals.
• Communicating with prospects and clients through the channels they have authorized.
• Arranging meetings and following up on requests and projects.
• Managing contracted services.
• Managing client and project information through internal systems.
• Reviewing the files sent in order to evaluate or carry out the project.
• Maintaining the security of the services.
• Handling requests related to the exercise of data protection rights.
• Complying with applicable legal and contractual obligations.

At present, the Controller does not use personal data for independent advertising campaigns, promotional newsletters or the sale of databases.

4. Communication via WhatsApp Business and email

WhatsApp Business and email are the channels the Controller uses to respond to inquiries, send quotes and follow up on projects.

Contact via WhatsApp is subject to the corresponding authorization of the data subject. When the quote questionnaire is available, that authorization may be given by checking the corresponding box.

The data subject may at any time request that communications be suspended or that a different channel be used by writing to arturo.sach@arturowebdeveloper.com.

The commercial follow-up that the data subject requests regarding their inquiry, quote or project does not amount to a general authorization to receive advertising.

5. Quotes and preliminary estimates

When available, the quote questionnaire may display preliminary cost estimates calculated from the project characteristics indicated by the data subject.

These estimates are for information purposes only and do not constitute a final contractual offer. The final quote is subject to a review of the project and to the acceptance of the corresponding commercial terms.

6. Attachments and client materials

The materials provided by the data subject, such as logos, images, photographs, texts and documents, are used to evaluate, quote, design, develop, modify or deliver the requested services.

The Controller will not use client materials as promotional examples, in its portfolio or as testimonials without the corresponding authorization, when such authorization is required.

If the materials contain personal data of third parties, for example photographs of people or contact details, whoever shares them must have the authorization or legal basis required to do so and should share only the information that is essential for the project.

7. Retention of personal data

Personal data is kept only for as long as necessary for the purposes that justified its processing:

• Prospects who do not hire services: the intended retention period is six months from the last interaction related to their request, unless a legal obligation or a legitimate reason justifies keeping the data for longer.
• Clients who hire services: data is kept for the duration of the contractual relationship and for the additional periods required by legal, tax and contractual obligations.

Once these periods have ended, and where appropriate under the applicable legislation, the information will be deleted or cancelled. Where applicable, data will be blocked before deletion, meaning it will be kept solely to address potential liabilities during the corresponding legal period and will not be used for any other purpose. These actions are managed directly by the Controller.

8. Security and confidentiality

The Controller will adopt appropriate administrative, technical and organizational security measures to protect personal data against damage, loss, alteration, destruction or unauthorized use, access or processing.

Personal data may be stored on web hosting infrastructure, databases and private administration systems.

Access to the information is limited to the Controller, authorized collaborators and providers that need it to deliver their services. Authorized persons must keep the information they have access to confidential.

9. Technology providers and data transfers

To operate the website and communicate with data subjects, the Controller relies on the following technology providers and services:

• Hostinger: provider of web infrastructure and business email.
• WhatsApp Business: communication channel with prospects and clients.
• Other technology services and internal management tools that may be involved in managing client and project information.

Depending on the actual operating conditions of these providers, certain processing may involve infrastructure located outside Mexico.

Personal data is not sold or commercialized.

Processing carried out by processors, that is, providers that process data on behalf of the Controller and in accordance with its instructions, is different from a transfer, which consists of communicating data to an independent third party that processes it for its own purposes. Transfers that legally require the data subject’s consent will be subject to the corresponding authorization mechanisms.

10. ARCO rights

The data subject may at any time exercise the rights of Access, Rectification, Cancellation and Opposition (ARCO rights) with respect to their personal data:

• Access: to know what personal data the Controller holds about them, what it is used for and the conditions of its processing.
• Rectification: to request the correction of their data when it is inaccurate, incomplete or out of date.
• Cancellation: to request that their data be removed from the Controller’s records or databases when they consider that it is not required for the stated purposes, subject to any prior blocking required by law.
• Opposition: to object to the processing of their personal data for specific purposes when there is a legitimate reason.

How to submit a request

The request must be sent to arturo.sach@arturowebdeveloper.com and include:

• The full name of the data subject and a means of communicating the response.
• Proof of their identity or, where applicable, of the legal representation of the person submitting the request on their behalf, in the manner described below.
• A clear and precise description of the personal data with respect to which they seek to exercise any of the ARCO rights, as well as the right they wish to exercise.
• Any other information that helps locate the data, for example the reference number of their quote request, if they have one, or the WhatsApp number or email address they used.
• For rectification requests, the changes to be made and, where applicable, the supporting documentation.

Proof of identity or representation

Before handling a request, the Controller will verify the identity of the data subject or, if a representative is acting, the representative’s identity and legal representation, in accordance with the applicable legislation.

Initial contact takes place through the email address indicated, and identity documents do not need to be attached to that first message. Upon receiving the request, the Controller will inform the data subject which proof is required depending on the right being exercised and the data involved, for example a valid official identification or the instrument that proves the representation, and will agree with them on how the verification will be carried out. Efforts will be made to keep that verification secure, proportionate and limited to the information strictly necessary, in accordance with the applicable legislation. It is recommended not to send copies of official identification by email before the form of verification has been agreed.

This documentation will be used solely to verify identity or representation and to handle the request. If the information received is insufficient, the Controller may ask the data subject to complete it.

Response times

• Up to 20 business days from receipt of the request to inform the data subject of the decision adopted.
• If the request is granted, up to 15 additional business days from the date the decision is communicated to make the right effective.

These periods may be extended in the cases and under the terms permitted by the applicable legislation.

Costs

Exercising ARCO rights is free of charge. The data subject will only have to cover, where applicable, the reproduction or shipping costs that are legally appropriate.

11. Revocation of consent

The data subject may revoke the consent they have given for the processing of their personal data by sending a request to arturo.sach@arturowebdeveloper.com, with the same information and proof of identity indicated for ARCO rights.

Revocation will not have retroactive effects and will not prevent processing that is legally necessary, for example to comply with legal, tax or contractual obligations.

12. Limiting the use and disclosure of data

In addition to ARCO rights, the data subject may limit the use and disclosure of their personal data. In particular, they may request contact limitations, the suspension of communications via WhatsApp or their inclusion in the Controller’s internal exclusion lists, in order to stop receiving communications.

These requests are submitted to arturo.sach@arturowebdeveloper.com.

13. Cookies and similar technologies

According to the declared configuration of the website, Google Analytics, Meta Pixel and equivalent advertising tracking tools are not currently used.

Hosting and operating the website may require technical cookies, access logs and security mechanisms needed to display the pages, protect the service and prevent misuse.

In addition, the website uses the visitor’s browser storage for the following technical purposes:

• Language preference (currently available): the chosen language (Spanish or English) is remembered. It is kept in the browser until the visitor chooses another language or clears the site data.
• Quote questionnaire draft (future feature): when the questionnaire is available, while the tab remains open, the answers entered, including the contact details provided, will be kept temporarily so they are not lost if the page is reloaded. The draft will be deleted when the questionnaire is submitted successfully or when “Clear my answers” is chosen, and the browser will normally discard it when the tab is closed. It will not include files or passwords.

This information remains on the visitor’s device and is not used for tracking. The draft answers will only be sent to the Controller when the data subject submits the questionnaire.

If additional tools are incorporated in the future, this notice will be updated.

14. Processing of personal data of minors

The services of Arturo Web Developer are aimed primarily at adults and at representatives of companies or businesses. Personal information of minors is not deliberately requested through the contact channels or, when available, through the commercial forms.

If an unauthorized collection of personal data of minors is identified, the Controller will adopt the corresponding legal measures.

15. Service to international clients

Arturo Web Developer provides services to clients located in Mexico, the United States and other countries.

Personal data is processed in accordance with the Mexican legislation applicable to the Controller, without prejudice to any additional obligations that may apply in other jurisdictions.

16. Changes to this notice

This privacy notice may be updated due to changes in the services, the purposes of processing, the technologies used or legal provisions.

Updates will be published on the official website, on this page (https://arturowebdeveloper.com/privacy-policy.html) and on its Spanish version (https://arturowebdeveloper.com/aviso-de-privacidad.html), stating the corresponding date and version.

When a change requires new consent from the data subject, it will be requested in accordance with the applicable legislation.

17. Contact information

For any questions about this privacy notice or to exercise their rights, the data subject may contact:

This English version is a translation of the Spanish original, the Aviso de Privacidad Integral, and has the same scope.

Arturo Web Developer — Comprehensive Privacy NoticeVersion: 2026-11-02