Privacy notice

1. Identity and location of the data controller

Transformación Digital Kmex, S.A.P.I. de C.V. (referred to as “KaiOne”), with operations in Guadalajara, Jalisco, Mexico, is responsible for processing your personal data.

For any matter related to this notice, you can write to privacidad@kaione.mx.

This is an informational English translation of the Spanish privacy notice. In the event of a discrepancy, the Spanish text prevails.

2. Personal data we collect

We process the data you provide through contact or subscription forms, or by email: name, email address, company, telephone number when you provide it through a channel that requests it, topic of interest and message content. Each form identifies its required fields. For the newsletter, we collect your email address and, where the form allows it, your chosen language.

Our own data collection system records the request, its date, language, notice version and applicable acceptance, together with subscription or unsubscribe status and the delivery events needed to manage communications. Depending on the channel, the record may include the page from which the form was submitted. Earlier records may retain the referral source or campaign parameters provided when the request was submitted.

To protect data collection in this version, the application uses the connection’s IP address to calculate a request-rate identifier. The application’s counters store that identifier rather than the IP address in readable form. This control is not used for advertising or tracking across sites.

We do not request sensitive personal data or financial or asset information through these forms. Share a general description of your needs and avoid including such information in your message.

3. Purposes of processing

The primary purposes, necessary to assist you, are to respond to your contact or information request; schedule and follow up on a discovery session; and prepare and send you a service proposal. Technical records are used to process the request, protect forms against abuse and manage the corresponding communications and preferences.

The secondary purpose is to send you communications about our services or content. You may object without affecting the handling of your request. A subscription to Notes from KaiOne is requested separately through an explicit action; submitting the contact form does not subscribe you to the newsletter.

If you do not want to receive these communications, you can use the unsubscribe link available in the communication, reply stating your preference or write to privacidad@kaione.mx. Records received through earlier forms retain their contact and unsubscribe channels; this notice does not imply that new authorization has been obtained for those records.

4. Cookies and tracking technologies

This version of the site does not incorporate tracking, advertising or third-party analytics cookies. It does not load session-recording tools, heat maps, advertising visitor-identification tools or advertising tags.

Fonts are obtained from your device or served from our own domain; they are not loaded from external font providers. The site’s own resources are served from our domain.

Some earlier pages that remain available store campaign parameters from the entry link or the referring site, when present, in browser session storage. These data are deleted when you close the tab and are included in the request only if you choose to submit the form, to understand how you found us; they are not used to track you across sites. Pages in the new editorial version do not implement this attribution. Referral data already submitted may be retained as part of the request.

5. Service providers and data transfers

We do not sell or transfer your data to third parties for their own purposes. We use providers to operate the site, receive requests and manage communications on KaiOne’s behalf.

Cloudflare provides the site infrastructure. When our own data collection system is used, form data and consent, subscription, unsubscribe and operational records are stored in Cloudflare D1. When transactional email notifications or confirmations are enabled, Cloudflare Email Sending processes the recipient’s address, the message and the events needed for delivery.

HubSpot is the platform used to record contacts, follow up on requests and manage communication preferences. HubSpot Forms and records received through that channel may coexist with our own data collection system. Depending on the enabled form, data is received through Forms or recorded in D1, with the necessary contact data or preferences synchronized with HubSpot; not all records follow a single process.

Access within KaiOne is limited to personnel who handle requests and administer these processes. Data will be disclosed to a competent authority when required under applicable law.

6. Data retention

We retain your data for the time needed to address your request and, where applicable, for the duration of the business relationship and any applicable statutory retention period. Once that period ends, the data is securely deleted.

7. Security measures

We apply administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction or unauthorized use, access or processing: encryption in transit, role-based access control and access logs for corporate mailboxes.

Our own data collection system incorporates request-origin controls, request limits and records of the corresponding acceptance. Subscription records distinguish requests, confirmations where applicable, withdrawals and delivery restrictions.

8. ARCO rights

You have the right to access your personal data, rectify it when it is inaccurate, request its cancellation when you consider it is no longer needed for any of the stated purposes, and object to its processing for specific purposes. These are known as ARCO rights in Mexico.

To exercise these rights, send your request to privacidad@kaione.mx, including your name and contact details, documentation establishing your identity, a clear description of the data concerned and the right you wish to exercise.

We will respond within a maximum of 20 business days from receipt of the request. If the request is accepted, it will be implemented within the following 15 business days.

9. Withdrawal of consent

You may withdraw your consent to the processing of your personal data at any time, using the same channel specified in the previous section. Withdrawal will not have retroactive effect.

10. Changes to this privacy notice

Any changes to this notice will be published on this page, with the last-updated date visible in the heading. We recommend reviewing it periodically.

11. Supervisory authority

If you consider that your right to personal data protection has been violated, you may contact the competent personal data protection authority in Mexico.