Your information. Handled with care.

SapIA. is a trade name used to provide independent consulting and professional services.

This Privacy Policy explains how personal information is collected, used, shared and protected when you visit the SapIA. website, communicate with us or work with us. It also explains the privacy rights that may be available to you, depending on where you are located.

01Who is responsible for your information

« SapIA. », « we » and « us » refer to the person responsible for processing personal information under this trade name.

Trade name

SapIA.

Location

Mexico City, Mexico

Privacy contact

privacy@sapia.site

02When this policy applies

This policy applies when you:

• Visit or interact with the SapIA. website
• Contact us through a form, email, WhatsApp or another channel
• Request information, a proposal or a quotation
• Work with us as a client, prospective client, partner, supplier or professional contact
• Subscribe to our communications
• Take part in a project, meeting or event with us

03Information we collect

Information you provide

Name, email address, phone number, company, job title, country, information about your business or project, communication preferences, and anything else you choose to include in messages or forms.

Information related to our services

When you work with us, we process the information needed to manage the relationship and the project: contact details, project requirements and communications, proposals, agreements, billing and administrative information, meeting notes and deliverables.

Information collected automatically

When you use our website, technical information may be collected through cookies and similar technologies, such as device and browser type, IP address, approximate location, pages visited, referral source, and the date and time of visits.

Please don’t send sensitive information. We don’t request sensitive personal data, such as health, biometric or personal financial information, through our website or forms. Please don’t include it in your messages.

We aim to collect only the information we need for each purpose.

04How we use personal information

We use personal information to:

• Respond to inquiries and requests
• Understand your needs and evaluate potential projects
• Prepare proposals, quotations and scopes of work
• Provide and manage our services
• Coordinate meetings, communications and deliverables
• Manage billing and administrative processes
• Improve our services, website and content
• Measure website performance
• Keep our website, systems and communications secure
• Send communications you have chosen to receive
• Establish, exercise or defend legal rights
• Comply with legal, tax and regulatory obligations

Where the law requires consent for a specific use, we will ask for it first.

05Legal bases for processing

Depending on where you are located, we process personal information on one or more of these bases:

• Consent, when you have agreed to a specific use.
• Contract, when processing is needed to respond to your request, prepare a proposal or provide agreed services.
• Legitimate interests, such as responding to inquiries, managing professional relationships, improving our services and keeping our systems secure, where the law allows it.
• Legal obligation, when processing is required to comply with the law.

06Use of AI and digital tools

As a consultancy working with AI, data and technology, we use digital tools, including AI-based tools, to support our work, such as drafting, analysis and project management. We select tools and configurations designed to protect confidential information, and we handle client information according to the confidentiality terms agreed with each client, including non-disclosure agreements when requested.

07How we share personal information

We share personal information only with trusted providers that support our operations or the delivery of our services, and only with the information they need. These may include providers of website hosting, cloud storage, email and communications (including WhatsApp, operated by Meta), analytics, project management, accounting and payments, and professional, legal or technical services.

We may also disclose information when required by law or by a competent authority, to protect legal rights or security, or in connection with a future restructuring or transfer of the business operating under the SapIA. name.

We do not sell personal information.

08International data transfers

We work with clients and providers in different countries, so your information may be processed or stored outside your country. When this happens, we take reasonable steps to work with providers that maintain appropriate privacy and security practices, and we apply the safeguards required by applicable law.

09Cookies and similar technologies

Our website may use cookies and similar technologies for essential functionality, security, preferences and analytics. Where the law requires it, we will ask for your consent before using optional cookies. You can also control cookies through your browser settings.

10Data retention

We keep personal information only as long as needed for the purpose it was collected, considering the duration of our relationship, contractual requirements, legal and tax obligations, and potential disputes. When it is no longer needed, we delete or anonymize it.

11How we protect personal information

We use reasonable administrative, organizational and technical measures to protect personal information against unauthorized access, disclosure, alteration, loss or misuse. No system is completely secure, so absolute security cannot be guaranteed.

12Your privacy rights

Depending on where you are located, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your information
• Object to or restrict certain processing
• Withdraw your consent at any time
• Receive a copy of your information in a portable format
• Opt out of marketing communications
• File a complaint with a data protection authority

To exercise these rights, contact privacy@sapia.site. We may ask for information to verify your identity, and we will respond within the timeframes required by applicable law.

13Additional information by region

• Mexico: You can exercise your rights of access, rectification, cancellation and opposition (ARCO rights) and revoke your consent by contacting us at privacy@sapia.site.
• European Economic Area and United Kingdom: You have the rights described above under the GDPR and UK GDPR, and you may lodge a complaint with your local supervisory authority.
• Brazil: You have the rights provided by the LGPD, and you may contact the Brazilian data protection authority (ANPD).
• United States: Residents of certain states may have additional rights under state privacy laws. We do not discriminate against anyone for exercising their privacy rights.

14Marketing communications

If you choose to receive our insights or updates, you can unsubscribe at any time through the link in each message or by contacting us. This doesn’t affect messages we need to send to respond to your inquiries or manage an active project.

15Third-party services and links

Our website and communications may link to third-party websites, social networks and platforms. Their own privacy policies apply when you use them.

16Children’s privacy

Our website and services are intended for business and professional audiences, not for children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

17Changes to this policy

We may update this policy as our services, technologies or legal requirements change. The updated version will be published on this page with a new « Last updated » date. Where required, we will give additional notice of material changes.

18Contact us