Privacy Policy
Version of 10/14/2026
This Privacy Policy explains how the personal data of visitors to the website yo.onca-vega.com (the Site) is collected, used and protected, in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.
Please read it carefully. If you do not agree with it, please do not provide your data through the Site.
1. Data controller
Marcos Vega (Marcos Jesus Chavez Vega), an individual operating under the Onca Vega® brand (the Controller), is responsible for the processing of the personal data collected through the Site. The Controller's address for service of notices related to your personal data is La Zandunga 177, col. Benito Juárez, Nezahualcóyotl, State of Mexico, Mexico.
Any change to the Controller's legal status will be reflected in an update to this Policy, with its corresponding date.
2. Personal data we collect
The Controller only collects the data needed for the way you use the Site:
- Contact form: your name, email address and message; and, if you choose to provide them, your phone number, your company and the reason for contact.
- Approximate location: city, state and country, inferred on the server from the IP address you send the form from. The Site never asks for your device's location.
- Browsing data, only if you accept analytics cookies: pages visited, time spent, scrolling, links and buttons you click, device and browser type, language and approximate location (city or region), collected by Google Analytics.
- Technical security data: when you open the contact dialog, Google reCAPTCHA analyzes signals from your browser to tell people apart from automated programs.
We do not request sensitive personal data (ethnic origin, health, religious beliefs, sexual orientation, among others) through the Site.
Google Analytics never receives your name, email, phone number, company or the text of your message: when you send the form, it only records the reason for contact you picked from the list.
3. Minors
The Site is not directed at minors. If you are a minor, please do not send data through the contact form without the supervision of your mother, father or guardian. If the Controller finds that it received a minor's data without that supervision, it will delete it.
4. Purposes of processing
Primary purposes, required to handle your request:
- Replying to your message and following up on the conversation you start.
- Sending you an email acknowledging receipt of your message.
- Protecting the form against abuse and automated submissions.
Secondary purpose, which requires your consent and which you can refuse or revoke at any time without affecting the primary ones: producing usage statistics of the Site to improve its content and operation.
We do not use your data for advertising or commercial profiling, and we do not sell your personal data.
5. Service providers and data transfers
To run the Site, the Controller relies on the following providers, which process data only to provide their service:
- Netlify: hosting of the Site and its services; it logs technical data of each visit (such as the IP address) for security and operational purposes.
- Google: reCAPTCHA Enterprise, only when you open the contact dialog; Google Tag Manager and Google Analytics, only if you accept analytics cookies; and the download, from its servers, of a technical component that displays the 3D artifact on the home page.
- Brevo: sending the acknowledgment email to the address you provide.
- Slack: internal tool where the Controller is notified of each message, with the form data.
These providers are mainly located in the United States and the European Union, so your data may be processed outside Mexico under their own privacy policies. Form messages are not stored in any database of the Site. Other than in these cases, the Controller does not transfer your personal data to third parties, except when required by a competent authority.
7. Data retention
Your data is kept only for as long as needed to handle your request and follow up on the conversation you start. It is then deleted, unless there is a legal obligation to keep it.
8. Options to limit the use or disclosure of your data
You can refuse or revoke analytics cookies at any time from “Cookie preferences”. For any other limitation, request it through the means in section 9, stating which use or disclosure you want to limit.
9. ARCO rights and withdrawal of consent
You have the right to access, rectify and cancel your personal data or to object to its processing (ARCO rights), as well as to withdraw any consent you have given.
To exercise them, send your request to the Controller's contact email or through the Site's contact form, including:
- Your full name and, where applicable, that of your representative.
- A document proving your identity or the representation.
- A clear description of the data and the right you wish to exercise.
- A means to send you the response.
To protect it from spam, it's shown after a reCAPTCHA check.
The Controller will respond within the time limits set by law. If you believe your rights were not respected, you may turn to the personal data protection authority (as of the date of this Policy, Mexico's Secretaría Anticorrupción y Buen Gobierno).
10. Changes to this Policy
The Controller may modify this Privacy Policy due to legal changes, changes in its practices or in the Site's services. Any change will be published on this same page, updating the version date shown at the top.
If the change affects cookies or their categories, we will ask for your choice again when you visit the Site.