Privacy notice

1. Who is responsible for your data

Grupo Galarza, operating out of Cancún, Quintana Roo, Mexico, is the data controller for any personal data you provide through this website.

For anything related to this notice you can reach us on WhatsApp at +52 999 172 5555 or at the contact email published on this site.

This English version is provided for convenience. In case of any discrepancy, the Spanish version prevails, since the applicable law is Mexican.

2. What we collect

Only what you type into the contact form:

• Name
• Email address
• Phone number (optional)
• The service branch you are interested in
• The message you write us

3. What we do NOT collect

We do not request or process sensitive personal data: no racial or ethnic origin, health status, genetic information, religious, philosophical or moral beliefs, union membership, political opinions, or sexual preference.

We do not ask for financial or asset information through this website. If a project moves to quoting or contract, that information is handled through the corresponding channels and agreements, outside this site.

4. What we use your data for

Primary purposes, necessary to help you:

• Answering your enquiry and following up on it
• Preparing and sending you a quote if you ask for one
• Contacting you through the means you gave us to clarify project details

5. Secondary purposes and how to opt out

We do not use your data for advertising, newsletters, marketing, profiling or commercial prospecting. If we ever wanted to, we would ask you separately and explicitly.

If you would still rather we did not keep your data once your enquiry is handled, tell us through any of our channels and we will delete it.

6. Your ARCO rights

You have the right to access your personal data, to rectify it if inaccurate, to cancel it when you consider it unnecessary, and to object to its processing. You may also withdraw your consent at any time.

To exercise any of these rights, write to the contact email on this site or message us on WhatsApp at +52 999 172 5555, stating your name, a way to reply to you, which right you want to exercise and over which data. We respond within a maximum of 20 business days.

If you are not satisfied with our response, you may turn to INAI (inai.org.mx).

7. Transfers

We do not sell, rent or share your data with third parties for commercial purposes.

To run the site and the form we use service providers that may process data on our behalf: site hosting, the form's email delivery service, anti-bot protection and abuse rate limiting. These providers act only on our instructions and for the purposes described here; this is not a transfer requiring your consent under article 37 of the LFPDPPP.

We may disclose data if a competent authority legally requires it.

8. How long we keep it

We keep form data for as long as needed to handle your enquiry and, if the project moves forward, throughout the commercial relationship and for whatever period tax and accounting law requires. After that it is deleted.

9. Cookies and tracking

This site sets no advertising, profiling or social network cookies, and we do not share your browsing with ad platforms. That is why you will not see a cookie banner: there is nothing to consent to.

The visit measurement we use is aggregated, uses no cookies and cannot identify you. It is performed by our hosting provider from the technical data of the request — page visited, country, device type — without building an identifier that follows you across sites or across visits.

10. Security

The site is served over HTTPS and the form validates and rate-limits submissions to prevent automated abuse. No system is infallible: if we detect a breach that significantly affects your data, we will tell you.

11. Changes to this notice

We may update this notice when our practices or the law change. The version in force is always the one published on this page, with its update date above. Material changes are announced on this same page.