Privacy notice

Data controller

Carlos Garza (“HERON STUDIO”), with its address at Calle Soberana 617, Col. Centrika Victoria, Monterrey, N.L., Mexico, is responsible for processing your personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties. For any matter related to this notice, write to leads@heronwebstudio.com.

Data we collect

When you complete the contact form we collect:

• Identification and contact: name, company (optional), email address and WhatsApp number.
• Request details: project type and the message you choose to write.

If you contact us by WhatsApp or email, we receive the data you share in that conversation. While you browse the site, our infrastructure providers process technical data such as your IP address and browser type to serve the site and protect it from abuse.

We do not request sensitive personal data. Please do not include it in your messages.

Purposes

We use your data only to:

• answer your request for information;
• prepare, send and follow up on quotes;
• coordinate and deliver the services you hire;
• protect the site and the form against spam and misuse.

All of these are necessary to handle your request. We do not use your data for advertising, marketing or any secondary purpose, and we do not sell it.

Providers and transfers

To run the site we rely on providers that process data on our behalf and only for the stated function:

• Cloudflare: site hosting, security, bot verification (Turnstile) and email forwarding.
• Resend: delivery of the email with your request to our inbox.

These providers may process data outside Mexico, mainly in the United States, under their own security measures. We do not transfer your data to third parties for their own purposes, unless a competent authority requires it by law.

Cookies and analytics

The site does not use advertising or tracking cookies. We measure visits and clicks in aggregate with Umami, hosted on our own server, which uses no cookies and does not identify individuals. Turnstile verification may use technical browser signals solely to tell people from bots.

Retention

We keep your request data for up to 12 months from our last contact if no engagement follows, and then delete it. If you hire a service, we keep it for the duration of the relationship and for the periods required by applicable legal and tax obligations.

ARCO rights and withdrawal

You may access, rectify or cancel your data, or object to its processing, as well as withdraw your consent or limit its use, by writing to leads@heronwebstudio.com with:

• your name and a way to reply to you;
• a clear description of the right you want to exercise and the data involved;
• a document proving your identity or, where applicable, that of your representative.

We will reply within 20 business days at most and, if applicable, give effect to your request within the following 15 business days.

Changes to this notice

We will publish any change to this notice on this page, with its update date.