Privacy Policy

🛡️ Privacy Policy

This Privacy Policy explains how Mexican Web Design Agency (https://mexicanwebdesign.agency) collects, uses, and protects your personal data when you interact with our website and services. We are committed to clarity, professionalism, and respecting your privacy rights.

1. Who We Are

Our website address is: https://mexicanwebdesign.agency. We are a full-service digital agency providing development, design, and marketing services to international businesses.

2. Information We Collect

A. Data Collected via Forms and Chat

When you engage with our forms, chat, or leave comments, we collect the data you provide directly:

  • Contact Forms (CF7): We collect the data shown in the form fields (e.g., name, email, phone, company details) to respond to your inquiry and initiate a strategy session.
  • CRM and Chat (HubSpot): Data submitted via our forms and our live chat widget is stored in our HubSpot CRM system for communication tracking, lead management, and relationship building.
  • Email Marketing (MailPoet): If you opt-in via a subscription form, your email address and name are stored with MailPoet for the purpose of sending you newsletters and marketing updates.

B. Automated Data Collection

  • Comments: When visitors leave comments, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to help spam detection. An anonymized string (hash) from your email may be provided to the Gravatar service for profile picture display.
  • Media: If you upload images, avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract this data.

3. Cookies and Tracking Technologies

We use cookies to improve your experience, track site performance, and analyze user behavior.

  • Functional Cookies: Cookies are set to save your details (name, email, website) if you leave a comment, lasting for one year.
  • Login Cookies: For users with accounts, cookies are used to save your login information and screen display choices.
  • Third-Party Tracking: We use the following services, which set cookies and collect usage data:
    • Google Analytics (GA4): Used to measure traffic, user flow, and general site performance. We analyze this data to improve our services and site design.
    • Microsoft Clarity: Used to analyze user interaction data (e.g., heatmaps, session recordings) to identify usability improvements and optimize site performance.
    • HubSpot: Sets cookies for live chat functionality and lead tracking.

4. How and Where We Share Your Data

We do not sell your personal data. Data is shared only with necessary, trusted third-party services required for business operations and performance monitoring.

  • Automated Spam Detection: Visitor comments may be checked through an automated spam detection service (e.g., Akismet).
  • Password Reset: If you request a password reset, your IP address will be included in the reset email.
  • Data Processing Locations: We operate with an international focus and your data may be processed in various locations:
    • Production Servers: Google Cloud (primarily for stability and scalability).
    • Development Servers: Webdock (Denmark, for reliable development environments).
    • Service Hubs: Data is processed and stored by HubSpot, Google Analytics, and Microsoft Clarity, which may host data in the U.S. or other international data centers. We strive to abide by reasonable international terms regarding data processing.

5. Data Retention and Your Rights

A. Data Retention

  • Comments: Comments and their metadata are retained indefinitely to recognize and approve follow-up comments automatically.
  • Registered Users: We store the personal information provided in their user profile. Users can see, edit, or delete their personal information at any time (except username). Administrators can also see and edit this information.

B. Your Rights Over Your Data

If you have an account or have left comments, you have the right to:

Request Erasure: Ask that we erase any personal data we hold about you, except any data we are legally obliged to keep for administrative, legal, or security purposes.

Request Access: Receive an exported file of the personal data we hold about you.