Privacy notice

1. Identity and address of the Controller

Santiago Rivera, an individual with business activity operating under the commercial brand «Directa» (hereinafter, “Directa” or the “Controller”), with address at Júpiter, Col. Contry, C.P. 64860, Monterrey, Nuevo León, México, is responsible for the processing of the personal data it collects through the directa.mx website, its forms, call scheduling, email and other channels related to its managed digital services.

Directa acts as Controller under the Federal Law on the Protection of Personal Data Held by Private Parties (the “LFPDPPP”), its Regulations and the Privacy Notice Guidelines.

2. Personal data we collect

We collect personal data when you fill out a form, request portal access, book a call, write to us or browse the site. Depending on the interaction, the data may include:

• Identification and contact data: name, email and phone.
• Business data: commercial name, sector or industry.
• Project data: needs, budget, timeline and the message you share with us.
• Technical and browsing data: IP address, device or session identifiers, and data collected via cookies and similar technologies.

We do not collect sensitive personal data through the site’s public forms, and the site is not directed to minors. If a person voluntarily includes additional information in their message, it will be used solely to address the request received and will not be retained once it is no longer necessary.

3. Primary purposes (necessary)

We process your personal data for the purposes necessary to give rise to and fulfill the relationship with the data subject, including:

• Responding to requests for information, contact or portal access.
• Assessing your project’s needs and preparing a commercial proposal.
• Providing, managing and following up on the services contracted with Directa.
• Coordinating calls, meetings, deliverables, support and operational communication.
• Issuing quotes, receipts and invoices, and complying with administrative and tax obligations.

4. Secondary purposes (not necessary)

Additionally, and without conditioning the provision of the services, we may use your data to send you commercial follow-ups, news, useful content, improvement recommendations or surveys related to Directa.

If you do not want your data processed for these secondary purposes, you may state your refusal by emailing hola@directa.mx. Your refusal will not be grounds for denying you the services you request.

5. Legal basis and consent

The processing of your personal data is based on your consent, under articles 8 and 9 of the LFPDPPP. By providing your data and accepting this notice, you consent to the processing for the primary purposes described; as for the secondary purposes, you may object at any time as set out above.

6. Remittances to data processors

To operate the site and provide the services, Directa relies on technology providers that process personal data on behalf of and under Directa’s instructions, acting as data processors (remittances, under article 49 of the LFPDPPP Regulations). These processors do not use the data for their own purposes. They currently include:

• Resend — transactional email delivery and internal notifications.
• Notion — internal request tracking (CRM).
• Google Analytics 4 and Plausible — site analytics and aggregate measurement.
• Cal.com — call scheduling and meeting coordination.
• Vercel — site hosting and infrastructure.

Directa does not sell, assign or share your personal data with third parties for their own purposes.

7. Transfers

Directa does not carry out transfers of personal data to third parties that require your consent. Transfers may only occur under the cases set out in article 37 of the LFPDPPP that do not require consent —for example, when required by a competent authority or necessary by legal mandate— or by first obtaining your consent where the law so requires.

8. ARCO rights and withdrawal of consent

As the data subject, you have the right to Access your personal data, Rectify it when inaccurate, Cancel it when you consider it is not required for any of the stated purposes, and Object to its processing (ARCO rights). You may also withdraw, at any time, the consent you have given us.

To exercise these rights, send your request to hola@directa.mx. The request must include: (i) your name and a means to receive a reply; (ii) documents proving your identity or, where applicable, legal representation; (iii) a clear and precise description of the data and the right you wish to exercise; and (iv) any element that helps locate the data.

Directa will respond to your request within a maximum of 20 business days and, if appropriate, will make it effective within the following 15 business days. Exercising these rights is free of charge; only justified shipping or reproduction costs, if any, must be covered.

9. Means to limit use or disclosure

You may limit the use or disclosure of your data through the site’s consent banner or by requesting it by email at hola@directa.mx. At your request, we can add you to our exclusion lists to stop sending you secondary-purpose communications.

10. Cookies and tracking technologies

The site uses cookies, local storage and similar technologies to operate correctly, remember preferences and measure its performance. We use Google Analytics 4 (which uses cookies and runs with a consent mode that remains denied by default until you accept the banner) and Plausible (cookieless analytics).

You can accept or reject non-essential analytics from the consent banner, and manage or delete cookies from your browser settings. Technologies strictly necessary for security, navigation, forms and basic site operation may remain active.

11. Changes to this notice

Directa may modify or update this notice to reflect legal, operational, technological or service changes. The current version will be published on this page, indicating the date of its last update.

12. Data protection authority

If you believe your right to the protection of personal data has been violated, you may turn to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), at inai.org.mx.

13. Contact

For any questions about privacy or the processing of your personal data, write to hola@directa.mx. For commercial or project matters, write to hola@directa.mx.

By providing your personal data and using this site, you acknowledge having read and accepted this privacy notice. Effective as of 2026-06-02.