Legal
Privacy notice
Last updated: [date]. This notice is governed by Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations.
1. Who is responsible for your data
[Legal entity or full name], with its registered address at [full registered address], hereinafter “PixanAI”, is the data controller for the personal data you provide through this site or our contact channels.
2. What we collect
- From people who contact us: name, email address, phone or WhatsApp number, business name, and the message you send.
- From browsing: anonymous technical usage data such as pages visited and device type.
We do not collect sensitive personal data through this site. The contact form neither requests nor stores patient health information.
3. What we use it for
- Answering your enquiry and preparing a quote.
- Following up on the conversation you started.
- Delivering the service you contracted and supporting it.
- Meeting tax and contractual obligations.
We do not use your data for third-party advertising and we do not sell it to anyone, under any circumstances.
4. Who we share it with
Only with the technology providers needed to operate — hosting, email, messaging and payment processing — and only to the extent their service requires. The current list of those providers is available on written request. We may also disclose data where a competent authority lawfully requires it.
5. How we protect it
- Encryption in transit (HTTPS) and at rest.
- Access limited to staff who need it, with individual credentials.
- Regular backups and access logging.
- Secure deletion once the retention period ends.
Your patients’ or customers’ data. When you contract one of our systems — Kiin, for example — the data you enter remains yours: we act as processor, only on your instructions and only to deliver the service. That relationship is documented in the corresponding contract.
On other jurisdictions. We operate from Mexico under the LFPDPPP. We do not hold, and do not claim, HIPAA or GDPR certification. If your organisation is subject to either regime, raise it before contracting and we will state in writing what we do and do not cover.
6. How long we keep it
Contact details from enquiries that do not become clients are kept for [period, for example 12 months] and then deleted. Client data is kept for the duration of the relationship and afterwards for the period tax law requires.
7. Your rights
You may access your data, correct it if inaccurate, request its deletion, or object to its processing. You may also withdraw consent or limit the use of your data. To exercise any of these rights, write to us through the contact form or on WhatsApp, stating your name, a contact method and what you are requesting, and note “Data rights” in the message. We reply within a maximum of 20 business days.
8. Cookies
[Describe exactly which cookies the site uses. If only strictly necessary cookies are used, with no analytics or advertising, say so in those words. If traffic analytics are added later, a notice and a consent mechanism must be added before switching them on.]
9. Changes to this notice
Any change will be published on this page with its update date. If the change is material, we will notify you through the contact details we hold.
10. Supervisory authority
If you believe your right to personal data protection has been infringed, you may approach the competent data protection authority in Mexico.