Privacy notice

1. Data controller

The controller of your personal data is [Pending: full legal name of the controller], trading as Sondercode, with its address at [Pending: address of the controller] (Cancún, Quintana Roo, Mexico) and Mexican tax ID (RFC) [Pending: Mexican tax ID (RFC)].

For any matter related to your personal data you can write to sondercodemx@gmail.com or message us on WhatsApp at +52 999 512 0097. Person or team responsible for these requests: [Pending: person or team responsible for personal data].

2. Who this notice applies to

It applies to people who browse this site and to prospective clients who send us a request through the contact form, by email or on WhatsApp.

It does not apply to projects you hire us for: processing of data within a project (for example, your customers’ data in a system we build) is governed by the corresponding proposal or contract.

3. Personal data we process

We only ask for the data needed to handle a business enquiry:

• Identification and contact data: name and email (required); phone or WhatsApp and business name (optional).
• Request data: service or package of interest, project description, site language and date and time of receipt.
• Record of your choices: that you confirmed having read this notice and accepted the terms of use, whether or not you allowed marketing communications, the version of each document and the date and time assigned by our server.
• Technical data: IP address and browser data used to secure the form (see sections 7 and 12). The IP address is not stored with your request. If you accept analytics, also browsing data that is only used in aggregate (section 12).
• Communications: the messages we exchange by email or WhatsApp.

We do not ask for a postal address, bank or payment details, official ID, passwords or sensitive personal data (health, ethnic origin, beliefs, sexual orientation, biometric data, etc.). Please do not include them in your project description. If you need to share confidential business information, we can sign a non-disclosure agreement first.

4. What we use your data for

Necessary purposes (essential to handle what you ask us for):

• Receiving and answering your request for information, advice or a quote.
• Contacting you to understand your project, answer questions and, if you ask for it, prepare and send you a proposal.
• Sending you an automatic confirmation of receipt.
• Protecting the form and the site against automated submissions, abuse and fraud.
• Evidencing the acceptances and permissions you gave us and handling your rights requests.
• Complying with legal obligations and requests from competent authorities.

Voluntary purposes (not needed to handle your request):

• Sending you news, promotions and marketing information from Sondercode by email, only if you ticked the corresponding box. See section 6.
• Measuring, in aggregate, how the site is used (pages visited, country, browser and device type) to improve it, only if you accept analytics in the cookie notice.

We do not sell your data, use it for third-party advertising or make automated decisions that affect you. If we wanted to use it for a different purpose, we would tell you and ask for your consent first.

5. Legal basis

In Mexico, processing is governed by the Federal Law on the Protection of Personal Data Held by Private Parties (published in the Official Gazette of the Federation on 20 March 2025) and the regulations derived from it. For the necessary purposes, we make this notice available to you before collecting your data and we process the data you send us yourself in order to handle your request; if you do not agree, do not submit the form, or ask us to delete your data. For the voluntary purpose of marketing communications we ask for your express consent through a box that is unticked by default. For site analytics we ask for your consent in the cookie notice.

The required box on the form (“I have read the Privacy notice and accept the Terms of use”) serves to evidence that this notice was made available to you and that you accept the site’s rules of use. It is not consent to any and all processing and does not authorize advertising.

If the law of another country applies to you (for example, the EU General Data Protection Regulation), the legal bases are: taking pre-contractual steps at your request (answering your request and preparing a proposal); our legitimate interest in site security and in evidencing compliance; compliance with legal obligations; and your consent, for marketing communications and site analytics.

6. Marketing communications

We will only send you news and promotions if you allow it by ticking the corresponding box on the form, which is unticked. Sending a request does not imply that permission, and leaving it unticked does not affect your request.

You can withdraw your permission at any time, free of charge and without giving reasons, by writing to sondercodemx@gmail.com. We will record the withdrawal and stop sending you marketing communications; we will keep answering messages about your request.

7. Providers that process data on behalf of Sondercode

We use the following technology providers, which process data only to provide their service to us:

Cloudflare processes Turnstile data under its own privacy terms for this service. We recommend reading them if you want more detail.

8. Transfers and disclosures

We do not transfer your data to third parties for their own purposes. We will only disclose it when required by law or ordered by a competent authority.

The providers in section 7 act on behalf of Sondercode and some are located outside Mexico, mainly in the United States. We choose providers that offer contractual confidentiality and security commitments.

9. How long we keep your data

• Requests received through the form (with their record of choices): [Pending: retention period — proposed: 24 months] from receipt, unless you ask us to delete them sooner. If we end up working together, project information is kept according to the contract and legal obligations (for example, tax obligations).
• Permission for marketing communications: until you withdraw it and, at most, for the period above. The withdrawal is kept with the request so that we can honor it.
• Form security counters: a cryptographic hash of the IP address is stored, not the IP itself, and it is deleted automatically in less than 48 hours.
• Emails and messages: kept on the same basis as the request they relate to.
• Hosting technical logs and Turnstile data: for the short periods set by Vercel and Cloudflare.
• Analytics (only if you accept it): Vercel identifies the visit with a value that is discarded after 24 hours and keeps only aggregate statistics. Your cookie choice is stored in your browser for 12 months at most.

At the end of the period, we delete the data or block it solely to deal with possible liabilities for the time required by law, and then erase it.

10. Your rights

You can access your data, rectify it if inaccurate, request its cancellation (deletion) and object to its processing for specific purposes. You can also limit its use or disclosure and revoke your consent (section 11).

To exercise them, write to sondercodemx@gmail.com stating: your name and the email you used to contact us; the right you want to exercise and a clear description of your request; and, if you act on behalf of someone else, the document proving that you represent them. We may ask for reasonable additional information to verify your identity before disclosing or changing data.

We will reply by email within the time limits set by applicable law and, where appropriate, give effect to your request within the legal deadline. The procedure is free of charge; only justified shipping or copying costs may be charged where the law allows it.

If you believe we did not handle your request properly, in Mexico you can contact the authority for personal data held by private parties, which since 2025 is the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).

11. Revoking consent and limiting use

You can revoke any permission you gave us at any time by writing to sondercodemx@gmail.com. Revocation is not retroactive. If you revoke the processing needed to handle your request, we will no longer be able to follow it up.

To stop receiving marketing communications, simply ask through the same channel. Before sending advertising, Sondercode will also honor any applicable public opt-out registers, such as PROFECO’s Public Registry to Avoid Advertising (REPEP).

12. Cookies and tracking technologies

This site does not use cookies or advertising or social media technologies. It uses Vercel Web Analytics, a cookie-free analytics service, only if you accept it in the cookie notice, and you can withdraw it at any time from Cookie preferences. The contact page loads Cloudflare Turnstile, a security service that analyzes technical browser data (such as the IP address and browser type) to check that the form is sent by a person. Your cookie choice is stored in your browser’s local storage. Details are in the Cookie policy.

13. Security

We apply reasonable administrative, technical and physical measures: encrypted connection (HTTPS), credential-restricted access to the database and exports, records that cannot be modified, anti-bot verification and submission limits. No system is completely secure; if a breach significantly affecting your rights occurred, we would inform you without delay as required by law.

14. If you contact us from outside Mexico

Sondercode is based in Mexico and mainly serves Mexican businesses, but it may receive requests from other countries. If a data protection law of another jurisdiction applies to you, we also recognize the rights that law provides to the extent applicable; for example, in the European Economic Area: access, rectification, erasure, restriction, portability, objection, withdrawal of consent and lodging a complaint with the supervisory authority of your country. You can exercise them through the channel in section 10.

Whether a foreign law applies depends on each case. This notice does not mean that Sondercode targets any country other than Mexico.

15. Minors

This site is aimed at businesses and adults. We do not knowingly collect data from people under 18; if we find that a minor has sent us data, we will delete it.

16. Changes to this notice

We will publish any change on this page, stating the version and the update date. If a change affects the purposes you consented to, we will ask for your consent again before applying it.

17. Contact

Email: sondercodemx@gmail.com · WhatsApp: +52 999 512 0097 · Address: [Pending: address of the controller].