Data controller and contact
Código Arcano, operating under the brand Código Arcano, is responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.
Location: Mexico City, Mexico. For privacy matters, contact hola@codigoarcano.com.
Information we receive
- Contact: name, company, email, phone or WhatsApp, service of interest, budget range, and messages you choose to send.
- Assessment: description of your operations, industry, team size, generated result, and assessment identifier. If you later request a session, we link that result to your request.
- Operation and security: IP address, session identifier, and technical request data; for the contact form, also your browser and the page from which you submit your request.
- Optional measurement: landing page, visit referrer, campaign parameters, and advertising identifiers, plus browsing data processed by the tools you allow in your preferences.
We do not request sensitive personal data. Avoid entering health information, identity documents, passwords, banking information, trade secrets, or other people's data in free-text fields. This site is intended for adults seeking professional services.
How we use your data
Essential purposes: responding to your request, generating and retaining the requested assessment, preparing proposals, following up on that conversation, managing the service relationship where applicable, and protecting forms against abuse. The assessment may reuse an earlier result for an equivalent description.
Optional purposes: measuring visits, interactions, and campaign effectiveness, and analyzing site usage to improve it. You can decline these in cookie preferences without losing access to contact or assessment features. Allowing us to respond to your request does not subscribe you to newsletters or authorize unrelated promotional campaigns.
How artificial intelligence is used
When the assessment uses AI, we send your business description, industry, and team size to Anthropic's API to produce a response. Your IP address and session identifier remain in our application and are not included in the assessment content sent to the provider. Any data you enter in the description may be sent to it.
The provider may process data outside Mexico, subject to its service and retention terms. You can read its API data retention information. We may also generate the result using local rules or reuse an earlier one. This assessment is not used to make contracting decisions or evaluate your creditworthiness.
Providers and data disclosure
We use hosting, email, and AI services to operate the site and respond to requests. If you allow optional tools, the measurement providers listed in the cookie policyare also involved. WhatsApp and external booking platforms receive information when you choose to use them and apply their own notices.
We do not sell personal data. Processing by providers acting on our behalf differs from transfers to third parties using data for their own purposes. For transfers requiring authorization, we will request the appropriate consent. We may also disclose information when required by law or a valid request from an authority.
Retention and security
We retain the information needed to respond to requests, follow up on projects, and maintain service security and traceability. Retention must be limited to these purposes and applicable legal obligations. Once no longer needed, data should be deleted, following blocking where applicable. You may request its cancellation through the channel below.
We apply access and validation controls to site operations. No system completely eliminates the risk of unauthorized access. If a breach significantly affects your rights, we will notify you as required by applicable law.
Your rights and how to exercise them
You may request access, rectification, cancellation, or objection (ARCO rights), withdraw consent, and limit the use or disclosure of your data. Send an email with the subject “Privacy” to hola@codigoarcano.com and include:
- Your name and a way to receive our response.
- The right or request you wish to exercise and information that allows us to locate your record.
- For rectifications, the requested changes and supporting information.
We will explain how to verify your identity and, where applicable, representation, keeping documentation to what is necessary. We will communicate our determination within 20 business days of receiving the request. If applicable, we will implement it within the following 15 business days. These periods may be extended once for an equal period where legally justified.
Withdrawal has no retroactive effect, and some requests may be limited by legal obligations. We will explain any impediment. Declining optional measurement does not prevent you from receiving assistance; withdrawing permission to handle a request may prevent us from continuing that assistance.
Cookies and updates
See the technologies used and change your choice in the cookie policy. We will publish changes to this notice on this page with an explicit effective date. If new purposes require authorization, we will request it before processing data for those purposes.