ozeida processes your personal data to handle and follow up on your contact request and, only if you agree, to send you news. We do not sell your data, do not use it for targeted advertising and do not collect sensitive data. This notice explains what we process, why, which providers are involved, how long we keep it and how to exercise your rights under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, published March 20, 2025, last amended November 14, 2025).
Who is responsible for your data?
Bruno Villarreal, an individual doing business as ozeida, located in Saltillo, Coahuila, Mexico, is the data controller.
For anything related to this notice or your data, write to contacto@ozeida.com. Bruno Villarreal is the person who handles personal data requests.
What personal data do we process?
If you use the contact form, we store:
- Your name, your company's name, your email address and your phone number, if you give it (it is optional).
- The topic you pick, your message, the language of the page and the page you write from.
- The version of this notice you accepted, the date and time you accepted it, and whether you opted in to news.
If you email us at contacto@ozeida.com, we process your email address, your name and whatever you include in the message.
We do not ask for sensitive data (for example, health, ethnic origin, beliefs, political opinions or sexual preference) or financial data. If you include any on your own in a message, we do not use it for any purpose and delete it together with your request.
If you only browse the site, we do not ask you for any data. What happens technically is described under "What data is generated automatically?".
What do we use your data for?
Primary purposes (necessary to handle your request):
- Responding to your request for information or contact.
- Scheduling and holding calls or meetings.
- Preparing proposals and, where applicable, contracts.
- Following up on your request commercially and as a service.
Secondary purpose: news (optional; not necessary to handle your request):
- Sending you news about ozeida services and products, including ozeida Quality Control.
We only use your data for news if you check the optional box on the form, which starts unchecked, or ask us in writing. If you leave it unchecked, your request is handled the same way. You can unsubscribe at any time by emailing contacto@ozeida.com with the subject "Unsubscribe from news"; unsubscribing does not affect any request in progress.
If we ever wanted to use your data for a purpose other than these, we would ask for your consent again (Art. 11 LFPDPPP).
What data is generated automatically?
Bot check on the form. The form page loads Cloudflare Turnstile, a Cloudflare, Inc. service that tells people from automated programs. According to Cloudflare, Turnstile analyzes signals such as your IP address, your connection's TLS fingerprint, your browser's user agent and the site the form is on, and its purpose is not to identify, profile or target individuals. When our server receives the submission, it also sends your IP address to Cloudflare to validate that check. We do not store your IP address in our database.
Usage statistics. The site uses Cloudflare Web Analytics to count visits and measure page performance. Cloudflare states that this service does not use state in your browser, such as cookies or local storage, and does not fingerprint individuals based on their IP address or user agent. Statistics are grouped by dimensions such as country, page, referring site, device type, browser and operating system. You can keep it from loading by blocking the static.cloudflareinsights.com script with your browser's settings or extensions; the site looks the same.
Connection data. As with any website, when you visit, your browser sends technical connection data (such as your IP address and user agent) to Cloudflare, which hosts the site and protects it as part of running its network.
Do we use cookies?
ozeida.com does not set its own cookies or any advertising or tracking cookies. The site does not use your browser's storage for preferences. The form page loads the Cloudflare Turnstile check from challenges.cloudflare.com; any cookies Cloudflare may use in its services are described in its cookie policy. The only exception is the presentation at /presentacion/: if you draw annotations on the slides, they are saved in your browser's local storage, never leave your device, and you can delete them from the presentation itself or from your browser.
If we ever add cookies or other tracking technology, we will update this notice before enabling it and explain what it collects and how to disable it.
Which providers process your data?
The site, the form and email run on services from Cloudflare, Inc., a United States company. Cloudflare processes the data on behalf of ozeida and under its instructions, as a processor (persona encargada, Art. 2 sec. XII LFPDPPP). Sending it data so it can provide that service is not a transfer (Art. 2 sec. XX LFPDPPP). Its servers may be outside Mexico, including in the United States. The services we use are:
- Site hosting and form intake (Cloudflare Workers).
- The database where your request is stored (Cloudflare D1).
- Internal email notification: each request is copied by email to ozeida's mailbox.
- The contacto@ozeida.com mailbox: receiving, storing and sending email (Cloudflare Email Routing, Workers, Durable Objects and R2), with access protected by sign-in (Cloudflare Access).
- Bot check (Cloudflare Turnstile), described above.
- Usage statistics (Cloudflare Web Analytics), described above.
- AI assistant in the mailbox (Cloudflare Workers AI): it is only involved if the person handling your request uses it in the mailbox, for example to prepare a draft reply or summarize your message; in that case it processes the content of your message. Cloudflare states that it does not use that content to train AI models.
Cloudflare's own use of Turnstile signals. Cloudflare states that, besides using Turnstile signals on ozeida's behalf to detect bots, it uses them as a controller, on its own account, to improve its bot detection. That use is governed by Cloudflare's Turnstile privacy notice: https://www.cloudflare.com/turnstile-privacy-policy/.
Beyond the above, we do not transfer your personal data to third parties, unless a law or a competent authority requires it.
How long do we keep your data?
Your request is kept in the form's database and in ozeida's mailbox. We keep it only as long as needed for the purposes in this notice:
- If you contacted us and no business relationship followed: for the time needed to handle your request and meet applicable legal obligations; then we delete it.
- If you became an ozeida client: for the duration of the contract and the periods required by applicable legal and tax obligations.
- If you unsubscribed from news: we keep your email address and the date you unsubscribed so we don't write to you again.
After we delete data, it may remain temporarily in our providers' automatic backups, which they delete according to their own retention cycles.
When you request cancellation of your data, the law provides for a blocking period before deletion, during which the data is kept only to answer for liabilities arising from the processing (Art. 24 LFPDPPP).
How do we protect your data?
We apply administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction or unauthorized use, access or processing (Art. 18 LFPDPPP). Among them: the site and the form only work over an encrypted connection (HTTPS); the form only accepts submissions from ozeida.com; we do not store your IP address; the mailbox sits behind a sign-in access control, and only the person handling requests can access the database and the mailbox.
No security measure is infallible. If a breach significantly affected your property or moral rights, we would inform you immediately (Art. 19 LFPDPPP).
Do we make automated decisions about you?
No. A person reads and handles every request. No system decides on your request on its own, and the mailbox does not generate automatic replies with AI: the AI assistant is only used when the person handling the request asks for it, and a person reviews and sends every reply.
What are your rights and how do you exercise them?
You have the right to access your data, rectify it if it is inaccurate, incomplete or out of date, cancel (delete) it and object to its processing (ARCO rights under Mexican law). You can also withdraw the consent you gave us, without retroactive effect, and limit the use or disclosure of your data, for example by unsubscribing from news.
To exercise them, email contacto@ozeida.com with: your name and a way to reply to you; a document proving your identity (or your representative's identity and authority, if someone acts for you); a description of the data concerned (not needed for access requests); the right you want to exercise or what you are asking for; and anything that helps us locate your data. For rectification, state what to correct and attach supporting documentation.
We communicate our answer within 20 business days of receiving your request. If it is granted, we act on it within the following 15 business days. Each period may be extended once, for an equal period, when the circumstances justify it. For access requests, we send your data as an electronic document to the email address you give us. The procedure is free; only reproduction, copying or shipping costs may be charged. (Arts. 28–34 LFPDPPP; the law defines "days" as business days, Art. 2 sec. VIII.)
The full procedure, including the grounds on which a request may be denied and what to do if you disagree with our answer, is at How to exercise your ARCO rights.
Who can you turn to if you disagree?
The authority in Mexico for personal data held by private parties is the Secretaría Anticorrupción y Buen Gobierno (Anti-Corruption and Good Government Ministry; Art. 2 sec. XV and Arts. 38–39 LFPDPPP).
If you disagree with our answer, you may file a data protection request with that Ministry within 15 business days of the date we communicated it. If we did not answer, you may file it once our deadline to answer has passed (Art. 40 LFPDPPP).
For visitors in the United States
ozeida operates this site and its form from Mexico. If you submit the form, ozeida processes your data in Mexico, and Cloudflare, Inc. processes it on ozeida's behalf, including on servers that may be in the United States. This notice is written under Mexican law and does not describe rights you may have under US federal or state law. The rights in this notice apply wherever you are, and we handle requests in English and Spanish.
How do we notify changes?
We may update this notice when our practices, our providers or the law change. Changes are published on this page with a new last-updated date and a new version. The form stores the version you accepted. If a change affects the purposes or the providers that process your data, we also tell you at the email address you gave us.
FAQ
What happens to my data when I submit the form? It is stored in ozeida's database, copied to the contacto@ozeida.com mailbox and used to respond to and follow up on your request. It is not sold. You can ask us to delete it at any time by writing to contacto@ozeida.com.
Do I have to give my phone number? No. The phone field is optional; we only use it if you prefer to be contacted that way.
Do I have to opt in to news to send the form? No. The news box is optional and starts unchecked. Your request is handled the same way.
Does my data leave Mexico? It may be processed on Cloudflare servers outside Mexico, including in the United States, on ozeida's behalf. Cloudflare also uses Turnstile signals to improve its bot detection, as explained above.
Do you use AI on my message? Only if the person handling your request uses the mailbox's AI assistant, for example to prepare a draft or summarize your message. Cloudflare states that it does not use that content to train models. A person reviews and sends every reply.
How long does an ARCO request take? Up to 20 business days for an answer and 15 more business days to act on it if granted. The procedure is free.
Questions about this notice or your data? Write to us.
How to exercise your ARCO rights
You can ask ozeida for access to your personal data, its rectification, its cancellation or objection to its processing, and you can withdraw consent or limit its use. Send the request by email to contacto@ozeida.com, with no special format, and prove your identity. ozeida answers within 20 business days and, if granted, acts on it within the following 15 business days. The procedure is free.
What can you request?
- Access: learn which personal data of yours we hold and under what conditions we process it.
- Rectification: have inaccurate, incomplete or out-of-date data corrected.
- Cancellation: have your data deleted from our records and systems: the form's database and the contacto@ozeida.com mailbox. The law provides for a blocking period before deletion, during which the data is kept only to answer for liabilities arising from the processing (Art. 24 LFPDPPP).
- Objection: have us stop processing your data when there is a legitimate reason and your situation requires it (Art. 26 LFPDPPP).
- Withdrawal of consent: take back the consent you gave us at any time, without affecting processing done before.
- Limitation of use or disclosure: ask us not to use your data for a specific purpose, for example to unsubscribe from ozeida news.
Where do you send your request?
To contacto@ozeida.com. No specific format is needed; your message just has to include the items below. Bruno Villarreal is the person who handles these requests.
What must your request include?
- Your name and an email, phone or address where we can reply.
- A document proving your identity (for example, a government ID). If you act on someone else's behalf, also the document proving that representation and your identity as representative.
- A clear description of the data concerned (not needed for access requests).
- The right you want to exercise or what you are asking for.
- Anything that helps us locate your data, for example the approximate date you contacted us or the email you used.
For rectification, state what to correct and attach supporting documentation (Arts. 28 and 30 LFPDPPP).
Identity documents you send are used only to verify your request. We keep them with that request's file, with access restricted to the person handling it, for the time needed to handle your request and meet applicable legal obligations, and do not use them for any other purpose.
How long does ozeida take to answer?
We communicate our answer within 20 business days of the date we received your request. If it is granted, we act on it within the 15 business days following the date we communicated the answer. Each period may be extended once, for an equal period, when the circumstances justify it; if that happens, we tell you (Art. 31 LFPDPPP).
The law defines "days" as business days (Art. 2 sec. VIII). ozeida counts Monday through Friday, excluding mandatory rest days under Mexico's Federal Labor Law.
For access requests, we send your data as an electronic document to the email address you give us, once your identity is verified (Arts. 31 and 32 LFPDPPP).
If we cancel your data and had previously shared it with a third party that is still processing it, we ask that party to cancel it too (Art. 24 LFPDPPP). After deletion from our systems, your data may remain temporarily in our providers' automatic backups, which they delete according to their own retention cycles; we tell you so in our answer.
Does it cost anything?
No. Exercising these rights is free. We may only charge reproduction, copying or shipping costs, for example if you ask for a physical copy; if you provide the medium to reproduce the data, delivery is free. If you submit the same request again within 12 months, that cost will not exceed three times the current Unidad de Medida y Actualización (Mexico's official reference unit), unless the privacy notice has changed substantially (Art. 34 LFPDPPP).
When can ozeida deny a request?
Only when (Art. 33 LFPDPPP):
- your identity or representation is not properly proven;
- the requested data is not in our possession;
- granting it would harm a third party's rights;
- a legal impediment or a competent authority's resolution restricts it; or
- the rectification, cancellation or objection was already carried out.
Denial may be partial: we grant whatever part does proceed. In every case we explain the reason in writing, within the same deadlines and through the same channel we received the request.
What if you disagree with our answer?
You may file a data protection request with the Secretaría Anticorrupción y Buen Gobierno (Anti-Corruption and Good Government Ministry), Mexico's authority for personal data held by private parties (Art. 2 sec. XV LFPDPPP).
If we answered, file it within 15 business days of the date we communicated our answer, attaching your request and our answer. If we did not answer, you may file it once our deadline to answer has passed, attaching the document that proves the date you sent us your request (Arts. 40 and 41 LFPDPPP).
FAQ
Can I have my contact message deleted even after you replied? Yes. That is a cancellation request, handled within the deadlines on this page, with the blocking period the law requires and the note about backups.
Do I need to email a copy of my ID? Yes. The law requires identity to be verified before personal data is disclosed or changed. The copy is used only for that and kept with restricted access.
Can I exercise these rights from the United States or in English? Yes. The rights apply to anyone whose data ozeida processes, wherever they are, and we handle requests in English and Spanish.
How do I stop getting news without canceling a request in progress? Email contacto@ozeida.com with the subject "Unsubscribe from news". We stop sending you news without affecting the request in progress.