Legal

Privacy notice

Last updated: September 16, 2026

This privacy notice describes how Aniom collects, uses, discloses and retains personal data obtained through this website, email and WhatsApp, and how you may exercise your privacy rights.

Data controller

Aniom, based in Mexico, is the controller responsible for your personal data.

Privacy inquiries and requests may be submitted to contacto@aniom.com.

Personal data we collect

Depending on how you contact us, we may collect the following:

• Identification and contact details: your name, email address and phone number, where provided.
• Business details: your company or project name, if you provide it.
• Project and correspondence details: project type, requirements, intended users, current processes, preferred start date, budget range and the content of your messages.
• Technical and security data: IP address, device and browser information, form interaction data and verification results used for security and abuse prevention.

Technical data may be collected by our hosting and security providers, including through the technologies described under Cookies and similar technologies.

We do not request sensitive personal data, such as health information, religious beliefs or political opinions. Please do not include such information in your inquiry.

This website is not intended for individuals under 18, and we do not knowingly collect their personal data.

Purposes of processing

We use personal data for the following purposes:

• Assessing and managing project inquiries.
• Responding to requests and preparing requested proposals or quotations.
• Maintaining records of inquiries and related correspondence.
• Protecting the website and communications against spam, fraud and automated abuse.

We do not use inquiry data for mailing lists or marketing. Any additional purpose requiring your consent will be disclosed before that processing begins, and you may decline it.

Service providers and disclosure

We do not sell or rent personal data. We use the following providers to process data in connection with the purposes described above:

• Netlify: website hosting and form submission processing.
• Resend: email delivery of inquiries.
• Google (Gmail): email storage and correspondence.
• Google reCAPTCHA: security, fraud and abuse prevention.

Google processes reCAPTCHA customer data on our behalf under the Google Cloud Data Processing Addendum (opens in a new tab). Communications through WhatsApp are also subject to WhatsApp's privacy policy (opens in a new tab).

Service providers may process personal data in the United States or other countries outside Mexico. Apart from the processing described in this notice, we disclose personal data only when required by law or a competent authority.

Data retention

We retain inquiries and related correspondence for up to 12 months after our last contact, then delete them, subject to applicable legal retention obligations.

If an inquiry leads to a client relationship, relevant records are retained for the duration of the project and any additional period required by Mexican tax and commercial law.

Data security

We use administrative and technical safeguards, including encrypted transmission and restricted access, to protect personal data against loss, misuse and unauthorized access.

Your rights

You have the right to:

• Access the personal data we hold about you and learn how we use it.
• Rectify it if it's inaccurate, incomplete or out of date.
• Cancel it by requesting its deletion, subject to applicable retention obligations.
• Object to how we use it, for a legitimate reason.

These are known in Mexico as ARCO rights. You may also withdraw your consent or request limits on the use or disclosure of your personal data through the procedure below. Withdrawal does not affect prior processing or processing required by law, and may prevent us from responding to your inquiry.

Submitting a request

Send your request to contacto@aniom.com with the subject "Personal data request" and include:

• Your full name and an email address where we can reply.
• Documentation establishing your identity and, where applicable, your representative's identity and authority.
• The right or request you wish to exercise and the personal data concerned, unless you are requesting access.
• If you're asking for a correction, the change you want and, where relevant, a document that supports it.
• Anything else that helps us find your data, such as the date you contacted us.

Identity documents are used only to verify the request and are deleted once it is resolved. We communicate our determination on ARCO requests within 20 business days of receipt and, where approved, implement it within 15 business days of that response. Either period may be extended once for an equal period where justified; we will notify you of the reason.

Requests are free of charge, except for reproduction or delivery costs where physical copies are requested. Responses and electronic copies of personal data are provided to the email address specified in your request.

If you believe your data protection rights have been infringed, you may seek protection from the Secretaría Anticorrupción y Buen Gobierno (opens in a new tab), Mexico's competent data protection authority.

Cookies and similar technologies

We do not use analytics or advertising cookies. Google reCAPTCHA uses a security cookie and processes device, browser and interaction data for fraud and abuse prevention.

To show the site in your language, we use your approximate country, derived from your IP address and not stored. If you choose a language, a preference cookie named “lang” remembers it for one year.

You may manage or delete cookies through your browser settings. Blocking reCAPTCHA may prevent form submission; inquiries may also be sent by email or WhatsApp (opens in a new tab).

Changes to this notice

Updates to this notice will be published on this page with a revised date. Changes affecting the use of personal data already collected will also be communicated by email before taking effect. Where required, we will obtain your consent before applying a new purpose.