Privacy and Cookie Policy

1. General Information

Data Controller

Eluvia Marketing (operated by Circulation Studio, S. de R.L. de C.V.) is the data controller responsible for processing your personal data in accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

2. Information We Collect

Information You Provide Directly

We collect information you voluntarily provide when you:

• Complete contact forms: Name, email, phone, company name, project details
• Subscribe to our newsletter: Name and email address
• Request a consultation: Business information, budget, service preferences
• Contact us directly: Any information you choose to share via email, phone, or meetings

Information Collected Automatically

When you visit our website, we automatically collect:

• Browsing data: Pages visited, time on site, links clicked, referral source
• Technical information: IP address, browser type, operating system, device used
• Cookie data: Unique identifiers, site preferences, user sessions
• Interactions: Button clicks, resource downloads, video views

3. Use of Cookies and Similar Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us recognize you on future visits, remember your preferences, and understand how you use our site.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic site functionality (navigation, security, sessions)	Session
Analytics Cookies	Google Analytics 4 - Understand user behavior, improve the site	2 years
Marketing Cookies	Google Ads remarketing - Show relevant ads on other sites	90 days
Preference Cookies	Remember selected language (Spanish/English), site settings	1 year
Functionality Cookies	UserWay accessibility widget - Accessibility preferences	1 year

Third-Party Cookies

We use third-party services that may set their own cookies:

• Google Analytics 4: Traffic and user behavior analysis
• Google Tag Manager: Tracking tag management
• Google Ads: Advertising remarketing and conversions
• UserWay: Accessibility widget to improve experience for users with disabilities
• Font Awesome CDN: Icon delivery (does not collect personal data)

Cookie Controls

You can control and manage cookies in several ways:

• Browser settings: Most browsers allow you to block or delete cookies
• Google Ads settings: Visit adssettings.google.com to control personalized ads
• Google Analytics opt-out: Install the Google Analytics opt-out browser add-on

4. How We Use Your Information

We use the information collected for the following purposes:

Service Delivery

• Respond to your inquiries and information requests
• Provide personalized service quotes
• Manage marketing projects and client relationships
• Send communications related to contracted services

Website Improvement

• Analyze how visitors use our site
• Identify technical issues and areas for improvement
• Optimize user experience and navigation
• Conduct A/B testing to improve conversions

Marketing and Communications

• Send newsletters with educational content and updates (with consent only)
• Show relevant ads through Google Ads remarketing
• Share case studies, blog articles, and free resources
• Invite you to events, workshops, and webinars

Legal Compliance and Security

• Comply with legal and regulatory obligations
• Protect against fraud, abuse, and illegal activities
• Resolve disputes and enforce our terms of service
• Respond to legal requests from authorities

5. Sharing Your Information

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may share your information in the following circumstances:

Service Providers

We share information with trusted providers who help us operate our business:

• Google LLC: Analytics, Tag Manager, Ads (remarketing)
• Cloudflare: Hosting and CDN (site protection and speed)
• UserWay: Accessibility widget
• Email marketing providers: Newsletter management (with consent)

All these providers are contractually obligated to protect your information and may only use it to provide services to us.

Legal Requirements

We may disclose your information if necessary to:

• Comply with a court order, subpoena, or legal process
• Protect the rights, property, or safety of Eluvia Marketing
• Investigate fraud or violations of our terms
• Cooperate with authorities in legal investigations

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the new owner as part of the transaction. We will notify you of any change in ownership or control of your information.

6. Data Security

We implement technical and organizational measures to protect your personal information:

Technical Measures

• SSL/TLS encryption: All communication between your browser and our site is encrypted
• Cloudflare CDN: Protection against DDoS, bot attacks, and security threats
• Restricted access: Only authorized personnel have access to personal data
• Continuous monitoring: Intrusion detection systems and security audits

Organizational Measures

• Internal data protection policies
• Regular staff training in privacy and security
• Confidentiality agreements with employees and contractors
• Security incident response procedures

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:

Data Type	Retention Period
Contact inquiries	3 years from last communication
Client data	6 years after project completion (tax requirement)
Newsletter subscribers	Until you unsubscribe
Google Analytics data	26 months (standard GA4 configuration)
Remarketing cookies	90 days

After these periods, we securely delete or anonymize your personal information unless we are legally required to retain it longer.

8. Your Rights (ARCO Rights)

Under Mexico's LFPDPPP, you have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of it.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Cancellation

You can request deletion of your personal data when you believe it is not being processed in accordance with the principles and duties established by law.

Right to Object

You can object to the processing of your personal data for specific purposes, such as direct marketing or remarketing.

How to Exercise Your Rights

To exercise any of these ARCO rights, send an email to [email protected] with the subject "ARCO Request" and include:

• Your full name and email address
• Clear description of the right you wish to exercise
• Documents that verify your identity (government ID, passport)
• Any additional information that helps us locate your data

Response time: We will respond to your request within 20 business days. If the request is granted, changes will be effective within 15 business days.

Other Rights

• Revoke consent: You can revoke your consent for data processing at any time
• Limit use: You can request that we limit the use of your data to specific purposes
• Data portability: You can request a copy of your data in a structured, commonly used format
• Opt out of marketing: You can unsubscribe from newsletters anytime using the link in each email

9. International Data Transfers

Some of our service providers (Google LLC, Cloudflare) are located outside Mexico, primarily in the United States. When we transfer personal data internationally:

• We ensure providers comply with adequate data protection standards
• We implement standard contractual clauses to protect your data
• We verify providers comply with internationally recognized privacy frameworks

By using our website, you consent to these international data transfers as described in this policy.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover we have collected data from a minor without verifiable parental consent, we will delete that information immediately.

If you are a parent or guardian and believe your child has provided us with personal information, contact us at [email protected].

11. Links to Third-Party Sites

Our website may contain links to third-party websites (social media, tools, resources). We are not responsible for the privacy practices of these sites. We recommend reading the privacy policies of any sites you visit.

12. Changes to This Policy

We may update this Privacy Policy occasionally to reflect changes in our practices, services, or legal requirements. When we make significant changes:

• We will update the "Last Updated" date at the top
• We will notify you by email if the changes are material (if we have your email)
• We will post a prominent notice on our website

We recommend reviewing this policy periodically to stay informed about how we protect your information.

13. Contact and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, contact us:

Data Protection Authority

If you are not satisfied with our response to your complaint, you have the right to file a complaint with:

National Institute of Transparency, Access to Information and Personal Data Protection (INAI)

• Website: home.inai.org.mx
• Phone: 800 835 4324 (from Mexico)
• Transparency Platform: plataformadetransparencia.org.mx

14. Accessibility of This Policy

We are committed to making this Privacy Policy accessible to everyone. We use the UserWay accessibility widget to ensure people with disabilities can read and understand this policy.

If you have difficulty accessing this information, contact us at [email protected] and we will provide the information in an alternative format.

15. Consent

By using our website, submitting contact forms, or subscribing to our services, you confirm that:

• You have read and understood this Privacy Policy
• You agree to the collection, use, and disclosure of your information as described
• You consent to the use of cookies and tracking technologies (including Google Analytics and remarketing)
• You understand your ARCO rights and how to exercise them

If you do not agree with any part of this policy, please do not use our website or services.