01Data controller
Hydra Automations is the controller of your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).
- Responsible party
- Hydra Automations
- lgzsc23@gmail.com
- Website
- hydrautomations.com
This notice covers two situations:
- Visitors and prospects. Data of people who visit hydrautomations.com or contact us to request a quote or hire us. Here we are the controller.
- End customers of our clients. Data of people who chat with a WhatsApp assistant we set up for a business. Here the business that hires us is the controller and Hydra Automations acts as processor: it handles the data only to provide the service to that business.
02Personal data we process
| Who | Data |
|---|---|
| Visitors and prospects | Name, phone or WhatsApp number, email address, business name and the content of your message. |
| End customers in conversations | Profile name and WhatsApp number, content of messages and files you send, appointment or reservation details (date, time, service) and email if you share it. |
| Website visitors | IP address and basic technical logs generated by the server and delivery network (Cloudflare). |
Sensitive data
We do not ask for sensitive data on our own initiative. However, someone chatting with a business's assistant, for example a clinic, may write health or other sensitive data. It is used only to handle that conversation, such as booking an appointment, and processing it requires your express consent, which the assistant requests before continuing.
Data we do not collect
We do not collect card or payment data, passwords or identity documents through the assistants.
03Why we use your data
Necessary purposes
- Reply to your inquiries and send you quotes.
- Provide the contracted service: operate the assistant, answer messages, book and confirm appointments and follow up.
- Handle support and requests about your data.
- Comply with legal and tax obligations and protect the security of the service.
Purposes that require your consent
For now we do not use your data for purposes other than the above. If we do in the future, for example to send you news or promotions, we will ask for your consent first and you may refuse without affecting the service.
Consent
By writing to us or starting a conversation with an assistant, having had this notice available at hydrautomations.com, we understand you accept it (implied consent). For sensitive data we ask for express consent. You can withdraw it at any time.
05How long we keep data
- Assistant conversations: 90 days from the last message; then deleted or anonymized.
- Contact data and quotes: for as long as the business relationship lasts and as legal and tax obligations require.
- Website logs: as long as Cloudflare keeps them under its policy.
Providers may keep temporary records under their own policies. To request deletion of your data, see Data deletion.
06Security measures
We apply reasonable administrative, technical and physical measures to protect data against loss and unauthorized access or use: encrypted connections (HTTPS/TLS), access restricted by personal credentials and sending providers only the minimum data needed. If a breach significantly affects your rights, we will let you know.
07Your rights and how to exercise them
You can access your data, rectify it, request its cancellation or object to its processing (ARCO rights), and also withdraw your consent or limit the use of your data.
- Write to lgzsc23@gmail.com or through WhatsApp with the subject "ARCO rights".
- Include your name, a way to reply to you, a clear description of your request and, if you know it, the business you chatted with.
- Attach a copy of an official ID (or your representative's, with a power of attorney) so we can verify your identity.
We will reply within the deadlines set by law. If your data is in a conversation with a business's assistant, we will forward your request to the responsible business and help handle it.
09Changes to this notice
We will publish any change on this page with its update date. If a change alters the purposes for which we use your data, we will ask for your consent again.