Privacy

Comprehensive Privacy Policy

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties ("LFPDPPP"), published in the Official Gazette of the Federation on March 20, 2025 and in force as of March 21, 2025, and with other applicable regulations in Mexico, navamkt provides this Comprehensive Privacy Policy to inform you about the processing of your personal data.

Last updated: August 24, 2026

Responsible Party: Ángel Santiago Nava

Legal contact: info@navamkt.com

01

1. Identity and Domicile of the Data Controller

Ángel Santiago Nava, operating commercially under the navamkt brand (hereinafter, the "Data Controller"), is responsible for the use and protection of your personal data.

For any legal purposes related to this notice, the Data Controller establishes its domicile in Zapopan, Jalisco, Mexico, and designates the following email address exclusively for privacy matters: info@navamkt.com.

02

2. Personal Data Subject to Processing

To carry out the purposes described in this privacy notice, we will collect the following categories of personal data when you use our forms, scheduling tool, chatbot, or communicate with us:

  • +Identification and contact data: Name, email address, phone number, company you represent, and job title.
  • +Operational data: Date, time, timezone, and detailed notes when requesting business meetings.
  • +Interaction-generated data: History of messages sent to the chatbot, business interests, and conversation summaries.
  • +Technical and browsing data: IP address, browser information, technical headers, and data necessary for security and abuse prevention. When you open one of our tracking links we record country, approximate city, device type, and referring site; your IP address is never stored in the clear — it is turned into a hashed identifier that only allows us to count distinct visitors per day.
  • +Audience measurement data: Cookie identifiers and site usage metrics generated by Google Analytics, processed only if you allow measurement cookies in the consent banner.
03

3. Purposes of Processing

Your personal data will be used for the following primary purposes, which are necessary for the service or business relationship you request:

  • +Primary Purposes: Responding to your information requests, preparing commercial proposals or quotes, scheduling and managing meetings, delivering requested digital resources, operating the virtual assistant (chatbot), and maintaining website security and integrity.
  • +Secondary Purposes: Additionally, we will use your personal information to send newsletters, promotions, conduct medium-term commercial follow-ups, and analyze usage metrics to improve the website. If you do not want your personal data to be processed for these secondary purposes, you can indicate this by sending an email to info@navamkt.com.
04

4. Data Remissions and Transfers

The Data Controller does not sell or rent your personal data. We inform you that we will not transfer your personal data to third parties for purposes other than those established here without your express consent, except for the exception scenarios provided in the LFPDPPP.

However, for the correct operation of the site and the provision of services, we share information through "Remissions" with technology providers who act as Data Processors under our instructions and security policies:

  • +OpenAI: For natural language processing and generating responses through our chatbot.
  • +Vercel: For web hosting, infrastructure, and site performance analytics.
  • +SMTP/Resend Services: For the infrastructure of sending and receiving transactional emails and notifications.
  • +Supabase: For hosting the database behind our tracking links and the click log described in section 2.
  • +Google (Analytics and Tag Manager): For audience measurement and site usage analysis. These tags load with consent denied by default and only process data if you allow them.
05

5. International Transfers and Data Location

Some of the Data Processors that make the operation of this site possible (notably, OpenAI and Vercel) operate technological infrastructure located outside the United Mexican States, primarily in the United States of America.

Consequently, in order to provide the services, your personal data may be stored or processed on servers located abroad. The Data Controller adopts reasonable measures so that such Data Processors offer adequate levels of protection, and binds them, through the corresponding contractual instruments, to process the information solely in accordance with its instructions, this Privacy Policy, and applicable regulations. By providing your data through this site, you acknowledge and consent to such international processing.

06

6. Processing of Data Provided by Our Clients

In the provision of specific services, such as B2B Outbound campaigns or Customer Experience measurements (CX, CSAT, NPS surveys), navamkt may process prospect or customer databases provided by the contracting client.

In these cases, navamkt processes such information solely in accordance with the contracting client's instructions and for the specific contracted purpose. The contracting client represents and warrants that such databases were collected lawfully, that it has the necessary consent for their use in prospecting or evaluation campaigns, and that it has made the corresponding privacy notice available to the data subjects.

navamkt applies to this information the same security measures and retention periods described in this Notice, uses it exclusively for the contracted purpose, and deletes it from its systems at the end of the project, unless there is a legal obligation to the contrary. If you are a data subject included in a database provided by one of our clients and wish to exercise your rights, you may write to info@navamkt.com and we will guide you through the applicable procedure.

07

7. Personal Data Retention Period

The Data Controller will retain your personal data only for as long as necessary to fulfill the purposes described in this Notice, as well as for the periods required by applicable legal, tax, accounting, and commercial provisions.

Once the business relationship has ended or the purpose that gave rise to the processing has been exhausted, your data will be blocked during the statute-of-limitations periods for any obligations that may arise and will subsequently be canceled and securely deleted from our systems and those of our Data Processors, unless a legal obligation requires their retention for a longer period.

08

8. Security Measures

The Data Controller has implemented and maintains reasonable administrative, technical, and physical security measures aimed at protecting your personal data against damage, loss, alteration, destruction, and unauthorized use, access, or processing.

Notwithstanding the foregoing, you acknowledge that no method of electronic transmission or storage of information is completely infallible. In the event of a security breach that significantly affects your economic or moral rights, the Data Controller will inform you in a timely manner so that you can take the appropriate measures to defend your rights.

09

9. Exercise of ARCO Rights and Consent Revocation

You have the right to know what personal data we have about you, what we use it for, and the conditions of its use (Access). Likewise, it is your right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); that we remove it from our records or databases (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO Rights.

To exercise any of the ARCO Rights, or to revoke your consent, you must submit the respective request by sending an email to info@navamkt.com with the following information:

  • +Full name of the data subject and email address to communicate the response.
  • +Document proving your identity (copy of official ID).
  • +Clear and precise description of the personal data regarding which you seek to exercise any of the ARCO rights.
  • +The Data Controller will communicate the adopted determination within a maximum period of 20 (twenty) business days. If applicable, it will become effective within the following 15 (fifteen) business days.
10

10. Use of Cookies and Tracking Technologies

We inform you that on our website we use cookies, web beacons, or other technologies, through which it is possible to monitor your behavior as an internet user, as well as to provide you with a better service and experience when browsing our page.

We distinguish two kinds. Strictly necessary cookies keep the site working — security, language and theme preference, abuse prevention — and do not require your consent. Measurement and advertising cookies, operated by Google Analytics and Google Tag Manager, load with consent denied by default: they do not process your data until you expressly allow them in the banner shown on your first visit.

You can change your decision at any time from the "Cookies" link in the footer of any page on this site, or disable these technologies through your web browser's privacy options. Please note that by blocking necessary cookies, certain site features (such as the chatbot or scheduling tool) may not operate optimally.

11

11. Personal Data of Minors

This website and navamkt's services are directed at adults with the legal capacity to contract, in a strictly commercial and professional context.

The Data Controller does not intentionally collect or process the personal data of minors. Should it be detected that information of a minor has been collected without the intervention and consent of the holder of parental authority or guardianship, such information will be deleted from our records.

12

12. Modifications to the Notice and Right to Complain

This Privacy Notice may undergo modifications, changes, or updates derived from new legal requirements, our own operational needs, or changes in our business model.

Any modification will be published on this same page, indicating the date of the last update.

If you believe that your right to personal data protection has been injured by any conduct or omission on our part, or you presume any violation of the provisions set forth in the LFPDPPP, you may file a grievance or complaint with the competent data protection authority. Following the entry into force of the LFPDPPP on March 21, 2025 and the dissolution of the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), these powers correspond to the Secretariat for Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).