1. Data controller
Ricardo Johnson Rodríguez, a registered sole proprietor trading as R&R Technology Consulting, based in the Guadalajara metropolitan area, Jalisco, Mexico, contactable at hablemos@rrtechconsulting.com.mx, is responsible for the processing of your personal data.
This notice is issued under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette on March 20, 2025 (LFPDPPP), and other applicable provisions.
2. Data collected
The diagnostic form collects only the data you provide directly and voluntarily:
- Identification and contact: full name, role, email address and phone number.
- Employment data: company name, sector, number of people and location.
- Requirement data: your description of the need, the systems you use and the urgency level.
- Technical data: IP address and submission time, recorded solely for security and abuse prevention.
No sensitive personal data and no financial or asset data are collected. Please do not include confidential company information in the free-text field: a non-disclosure agreement can be signed before any technical conversation.
Self-assessment. The answers you give to Rumbo, our self-assessment assistant, are processed only in your browser: they are not sent to or stored on our servers. Only if you choose to send the diagnostic form does the summary shown in it become part of your request.
3. Purposes
Primary purposes, necessary to handle your request:
- Answering your diagnostic or information request.
- Contacting you by email, phone or WhatsApp to follow up on that request.
- Preparing and sending you a proposal for professional services.
- Providing, managing and following up on contracted services, where applicable.
- Meeting applicable tax and accounting obligations.
There are no secondary purposes. Your data is not used for marketing, unsolicited prospecting, profiling or newsletters. Should any be added, your consent will be requested separately.
4. Consent
By ticking the acceptance box and sending the form, you give your express consent to the processing of your personal data under this notice.
5. Processors and transfers
Your personal data is not sold, assigned or transferred to third parties. The form is processed on a web server contracted from a hosting provider, which acts solely as a processor for technical storage and does not use the information for its own purposes.
Only the transfers that the LFPDPPP allows without your consent may take place, such as those required by a competent authority or needed to meet a legal obligation.
If you choose to contact us via WhatsApp, the data you share there is also processed under that service’s own privacy notice, which is outside this controller’s responsibility.
6. ARCO rights
You have the right to know what personal data we hold and how we use it (Access); to request its correction if inaccurate or incomplete (Rectification); to ask for its deletion from our records (Cancellation); and to object to its use for specific purposes (Opposition).
To exercise them, send your request to hablemos@rrtechconsulting.com.mx with the subject “ARCO rights request”, including:
- Your full name and a means of sending you the answer.
- A document proving your identity or, where applicable, that of your representative.
- A clear description of the data and the right you wish to exercise.
We will reply within 20 business days of receiving your request and, if appropriate, it will take effect within the following 15 business days.
7. Withdrawal of consent and limitation of use
You may withdraw your consent at any time, or ask us to limit the use or disclosure of your data, by writing to the same address. Withdrawal is not retroactive and does not apply where the law requires the data to be kept.
8. Retention
Data from requests that do not lead to a professional relationship is kept for a maximum of 24 months and then deleted. Client data is kept during the relationship and for the periods required by tax and commercial law.
9. Cookies and similar technologies
This site uses no cookies, tracking pixels, advertising or third-party analytics. Fonts, images and scripts are served from our own domain.
The site uses your browser’s temporary storage (sessionStorage) only to carry your self-assessment summary into the form if you choose to book a session. It stays on your device, is deleted when you close the tab and is never sent to any server.
The server keeps technical access logs (IP address, date, page requested and browser) for security and aggregate statistics, without linking them to an identified person.
10. Security measures
We apply administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction or unauthorised use, access or processing, including HTTPS encryption and restricted access to request records.
11. Changes to this notice
This notice may be updated to reflect legal changes, internal policies or new requirements. Any change will be published at this same address, with the update date shown.
12. Competent authority
If you believe your right to personal data protection has been infringed, you may contact the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance), the competent authority under the current LFPDPPP.