Privacy

Comprehensive Privacy Policy

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties ("LFPDPPP"), published in the Official Gazette of the Federation on March 20, 2025 and in force as of March 21, 2025, and with other applicable regulations in Mexico, navamkt provides this Comprehensive Privacy Policy to inform you about the processing of your personal data.

Last updated: September 26, 2026

Responsible Party: Ángel Santiago Nava

Legal contact: info@navamkt.com

01

1. Identity and Domicile of the Data Controller

Ángel Santiago Nava, operating commercially under the navamkt brand (hereinafter, the "Data Controller"), is responsible for the use and protection of your personal data.

For any legal purposes related to this notice, the Data Controller establishes its domicile in Zapopan, Jalisco, Mexico, and designates the following email address exclusively for privacy matters: info@navamkt.com.

02

2. Personal Data Subject to Processing

To carry out the purposes described in this privacy notice, we will collect the following categories of personal data when you use our forms, scheduling tool, chatbot, or communicate with us:

  • +Identification and contact data: Name, email address, phone number, company you represent, and job title.
  • +Operational data: Date, time, timezone, and detailed notes when requesting business meetings.
  • +Purchase and billing data: When you buy a digital product (such as the Google Reviews Kit), business name, city, order reference, chosen payment method, payment status and, if you request an invoice, the tax data required to issue it (RFC, legal name, tax regime and postal code). The Data Controller never receives or stores card numbers or banking credentials: card payments are captured directly on the payment processor’s platform.
  • +Interaction-generated data: History of messages sent to the chatbot, business interests, and conversation summaries.
  • +Technical and browsing data: IP address, browser information, technical headers, and data necessary for security and abuse prevention.
  • +Audience measurement data: cookie identifiers and site usage metrics — pages viewed, clicks, reading depth, device type and approximate location — generated by Google Analytics through Google Tag Manager, for statistical purposes. If you reach the site through a link we sent you directly, that link carries a code that associates the visit with it, so we can tell whether the information we shared was useful and follow up on the business conversation we are having with you. You may disable this measurement at any time, under the terms of section 10.
03

3. Purposes of Processing

Your personal data will be used for the following primary purposes, which are necessary for the service or business relationship you request:

  • +Primary Purposes: Responding to your information requests, preparing commercial proposals or quotes, scheduling and managing meetings, delivering requested digital resources, processing the purchase and delivery of digital products, issuing tax invoices, handling refund and guarantee requests, preventing fraud, operating the virtual assistant (chatbot), and maintaining website security and integrity.
  • +Secondary Purposes: Additionally, we will use your personal information to send newsletters, promotions, conduct medium-term commercial follow-ups, and analyze usage metrics to improve the website. If you do not want your personal data to be processed for these secondary purposes, you can indicate this by sending an email to info@navamkt.com.
04

4. Data Remissions and Transfers

The Data Controller does not sell or rent your personal data. We inform you that we will not transfer your personal data to third parties for purposes other than those established here without your express consent, except for the exception scenarios provided in the LFPDPPP.

However, for the correct operation of the site and the provision of services, we share information through "Remissions" with technology providers who act as Data Processors under our instructions and security policies:

  • +OpenAI: For natural language processing and generating responses through our chatbot.
  • +Netlify: For web hosting and site infrastructure.
  • +SMTP/Resend Services: For the infrastructure of sending and receiving transactional emails and notifications.
  • +Mercado Pago: For processing payments for digital products. Mercado Pago processes payment data (including card data) under its own privacy notice and security standards; the Data Controller only receives the payment confirmation, its status, and the order contact details.
  • +Mexican Tax Administration Service (SAT) and authorized CFDI certification providers: For issuing tax invoices, a transfer required to comply with a legal obligation that does not require your consent under the LFPDPPP.
  • +Google (Analytics and Tag Manager): For audience measurement and site usage analysis. Measurement cookies are active by default and you may disable them at any time; advertising cookies are only activated if you allow them, under the terms of section 10.
05

5. International Transfers and Data Location

Some of the Data Processors that make the operation of this site possible (notably, OpenAI and Netlify) operate technological infrastructure located outside the United Mexican States, primarily in the United States of America.

Consequently, in order to provide the services, your personal data may be stored or processed on servers located abroad. The Data Controller adopts reasonable measures so that such Data Processors offer adequate levels of protection, and binds them, through the corresponding contractual instruments, to process the information solely in accordance with its instructions, this Privacy Policy, and applicable regulations. By providing your data through this site, you acknowledge and consent to such international processing.

06

6. Processing of Data Provided by Our Clients

In the provision of specific services, such as B2B Outbound campaigns or Customer Experience measurements (CX, CSAT, NPS surveys), navamkt may process prospect or customer databases provided by the contracting client.

In these cases, navamkt processes such information solely in accordance with the contracting client's instructions and for the specific contracted purpose. The contracting client represents and warrants that such databases were collected lawfully, that it has the necessary consent for their use in prospecting or evaluation campaigns, and that it has made the corresponding privacy notice available to the data subjects.

navamkt applies to this information the same security measures and retention periods described in this Notice, uses it exclusively for the contracted purpose, and deletes it from its systems at the end of the project, unless there is a legal obligation to the contrary. If you are a data subject included in a database provided by one of our clients and wish to exercise your rights, you may write to info@navamkt.com and we will guide you through the applicable procedure.

07

7. Personal Data Retention Period

The Data Controller will retain your personal data only for as long as necessary to fulfill the purposes described in this Notice, as well as for the periods required by applicable legal, tax, accounting, and commercial provisions.

Once the business relationship has ended or the purpose that gave rise to the processing has been exhausted, your data will be blocked during the statute-of-limitations periods for any obligations that may arise and will subsequently be canceled and securely deleted from our systems and those of our Data Processors, unless a legal obligation requires their retention for a longer period.

08

8. Security Measures

The Data Controller has implemented and maintains reasonable administrative, technical, and physical security measures aimed at protecting your personal data against damage, loss, alteration, destruction, and unauthorized use, access, or processing.

Notwithstanding the foregoing, you acknowledge that no method of electronic transmission or storage of information is completely infallible. In the event of a security breach that significantly affects your economic or moral rights, the Data Controller will inform you in a timely manner so that you can take the appropriate measures to defend your rights.

09

9. Exercise of ARCO Rights and Consent Revocation

You have the right to know what personal data we have about you, what we use it for, and the conditions of its use (Access). Likewise, it is your right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); that we remove it from our records or databases (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO Rights.

To exercise any of the ARCO Rights, or to revoke your consent, you must submit the respective request by sending an email to info@navamkt.com with the following information:

  • +Full name of the data subject and email address to communicate the response.
  • +Document proving your identity (copy of official ID).
  • +Clear and precise description of the personal data regarding which you seek to exercise any of the ARCO rights.
  • +The Data Controller will communicate the adopted determination within a maximum period of 20 (twenty) business days. If applicable, it will become effective within the following 15 (fifteen) business days.
10

10. Use of Cookies and Tracking Technologies

We inform you that on our website we use cookies, web beacons, or other technologies, through which it is possible to monitor your behavior as an internet user, as well as to provide you with a better service and experience when browsing our page.

We distinguish three kinds. Strictly necessary cookies keep the site working — security, language and theme preference, abuse prevention — and do not require your consent. Measurement cookies, operated by Google Analytics through Google Tag Manager, are active by default to produce site usage statistics, improve its content and, when you arrive through a link we sent you, tell that the visit came from it, as described in section 2; they are not used to identify you by name or to show you advertising, and their data is kept for the period configured in Google Analytics, which does not exceed fourteen months. Advertising cookies remain disabled until you expressly allow them in the notice shown on your first visit. If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, neither measurement nor advertising cookies are activated until you allow them.

You can disable measurement and advertising cookies, or change your decision, at any time by choosing "Essential only" from the "Cookies" link in the footer of any page on this site, or disable these technologies through your web browser's privacy options. Please note that by blocking necessary cookies, certain site features (such as the chatbot or scheduling tool) may not operate optimally.

11

11. Personal Data of Minors

This website and navamkt's services are directed at adults with the legal capacity to contract, in a strictly commercial and professional context.

The Data Controller does not intentionally collect or process the personal data of minors. Should it be detected that information of a minor has been collected without the intervention and consent of the holder of parental authority or guardianship, such information will be deleted from our records.

12

12. Modifications to the Notice and Right to Complain

This Privacy Notice may undergo modifications, changes, or updates derived from new legal requirements, our own operational needs, or changes in our business model.

Any modification will be published on this same page, indicating the date of the last update.

If you believe that your right to personal data protection has been injured by any conduct or omission on our part, or you presume any violation of the provisions set forth in the LFPDPPP, you may file a grievance or complaint with the competent data protection authority. Following the entry into force of the LFPDPPP on March 21, 2025 and the dissolution of the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), these powers correspond to the Secretariat for Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).