Confidentiality & Privacy
Your data is yours. Full stop.
We work with the most sensitive information in your business. This page explains, plainly, how we protect it, what Mexican law requires, and the one exception we ask for.
The commitment, in one line: your operating and financial information is confidential and it’s yours. We don’t sell it, rent it, or share it — we use it only for the work you hired us to do, and we guard it under a duty of confidentiality that runs both ways.
1 · What we protect
To do our work we handle sensitive information about your business: order tickets and sales, inventory and purchasing, costs, payroll, supplier invoices and bank statements. All of it is your confidential commercial information. Our duty to keep it private doesn’t depend on you signing anything extra — it begins with the first data point you share.
- Never sold, rented, or shared with third parties, except what the law requires or what you expressly authorize.
- Restricted access: only the people working directly on your case, and under the same duty of confidentiality.
- Only for your service: your data is used solely for the analysis and services you contracted — never for third-party advertising or unrelated purposes.
2 · Mutual confidentiality (our NDA)
Confidentiality runs both ways. We protect your information; in return, we expect the same discretion about our methods, models, dashboards and materials. Whether or not we sign a separate confidentiality agreement, this mutual commitment applies from the moment we start working together. If you’d prefer a formal NDA before sharing data, gladly — it’s a normal part of how we work.
3 · Privacy Notice (Mexican law)
When your information contains personal data — for example, employee names on order tickets, or contact details — we handle it in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations in force.
Data controller (responsable)
[LEGAL NAME, S.A. DE C.V. / S.C.], with address at [REGISTERED ADDRESS], Cabo San Lucas, Baja California Sur, Mexico.
Privacy and rights contact: [email protected]
Purposes
We use any personal data that arrives inside your information only to: (a) provide the analysis and advisory services you contracted; (b) invoice and administer the relationship; and (c) contact you about the service itself. We do not use it for unrelated purposes, nor transfer it for commercial gain.
Your ARCO rights and revocation
You (or the individual the data belongs to) may at any time Access your data, request its Rectification if inaccurate, request its Cancellation, or Object to its processing — and revoke consent. To exercise any of these rights, write to [email protected] stating what you want and how to reach you; we respond within the timeframes the law sets.
Transfers
We do not transfer your personal data to third parties without your consent, except where the law itself allows it (for example, a request from a competent authority). The technology providers we use to run the service act as processors, under instruction and a duty of confidentiality.
4 · The one exception we ask for: saying we work with you
Client mention · logo
By accepting our standard agreement, you authorize us to state that you are an Aventaria client and to show your name or logo in a client list (on our website, presentations and materials).
This does not reveal your numbers. Naming you as a client is one thing; disclosing your confidential information is another, and that we never do. We never show your sales, costs, results or any operating data without your express, written permission.
And it’s reversible: you may decline or revoke this authorization at any time, in writing to [email protected], and we’ll remove your name and logo from our materials.
5 · How we safeguard the information
- We work on copies (snapshots) of your data, not on your live systems — unless we agree otherwise for a real-time service.
- Access is restricted and credential-protected; only those who need to see your case do.
- We keep your data only for as long as the relationship lasts and as long as law or sound administration require; after that it is deleted or anonymized.
6 · Contact, changes and governing version
For any question about this policy, or to exercise your rights, write to [email protected]. If we update this page, we’ll post the new version here with its date. The Spanish version governs; this English translation is provided as a courtesy only.
Last updated: July 19, 2026