This notice explains how your personal data is handled when you visit cesarayala.dev or email me. It follows Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). This is a translation: the Spanish version governs.

1. Who is responsible

Cesar Alejandro Ayala Torres (Cesar Ayala), an individual based in Puebla, Puebla, Mexico, is responsible for processing your personal data.

Contact for any privacy matter: hola@cesarayala.dev

2. What personal data I process

If you email me: your name, your email address, and whatever you choose to include in the message, such as your company, your role or a description of your project.

When you browse the site: technical data your browser sends to the server automatically, such as your IP address, browser and operating system, the page you visit, the page that referred you, and the date and time of the visit.

I don't process sensitive or financial personal data. Please don't send it by email. Never email passwords, your e.firma, digital seal certificates (CSD) or API keys either; if a project needs them, we'll agree on a secure method.

3. Why I use your data

Necessary purposes for the relationship you start (no additional consent needed):

Replying to your message and following up.
Preparing the quote or proposal you ask for.
Managing our business relationship if we work together, including invoicing.
Running the site and keeping it secure: preventing abuse and diagnosing errors.

Secondary purpose: producing aggregate statistics about which content on the site is useful. Those statistics don't identify you. If you don't want your visits counted, you can block the analytics script in your browser or email me.

I don't sell your data, use it for advertising, or send you marketing email.

4. Who else processes it

I use service providers that process data on my behalf, only to provide their service to me:

Cloudflare, Inc.: routing email sent to hola@cesarayala.dev, and web analytics (Cloudflare Web Analytics).
The server provider hosting the site, which processes the technical visit logs.
My email inbox provider, which stores the messages you send me.

Some of these providers may process data outside Mexico. I don't transfer your personal data to third parties for their own purposes, except when a competent authority or the law requires it.

5. Cookies and tracking technologies

This site doesn't use cookies.

Cloudflare Web Analytics measures visits in aggregate (page, referrer, browser and approximate country) without cookies and without tracking you across sites.
The site stores only your light or dark theme preference in your browser's local storage (localStorage), and it never leaves your device. You can clear it in your browser settings.

6. Your rights (ARCO)

You have the right to access your data, rectify it, cancel it, or object to its processing (known in Mexico as ARCO rights). You can also withdraw your consent or ask me to limit the use or disclosure of your data.

Send your request to hola@cesarayala.dev with the subject "ARCO rights" and include:

Your name and a way to reply to you.
A document proving your identity or, if you act for someone else, your representative's identity and authority.
A clear description of the data and the right you want to exercise.
Any document that helps locate your data.

I'll reply the same way within the time limits set by the LFPDPPP. If you believe your data-protection rights were violated, you can go to Mexico's Secretaría Anticorrupción y Buen Gobierno, the competent authority.

7. How long I keep your data

Emails: for as long as our conversation or business relationship lasts, and afterwards only as long as legal and tax obligations require.
Server logs: for a limited period, no longer than 13 months.

8. Security

The site is served only over HTTPS, server access is restricted, and data is protected with reasonable administrative, technical and physical measures against damage, loss, alteration or unauthorized access.

9. Changes to this notice

Any change will be published on this page with its update date. If the site starts collecting new data (for example, through a contact form or a call-booking tool), this notice will be updated before that happens.

10. Your consent

By emailing me or using the site after reading this notice, you consent to the processing of your data as described here. You can withdraw that consent at any time as explained in section 6.

Privacy notice