1. Identity and address of the data controller
JH Legacy (referred to as "we" or "the controller"), with address in Mexico City, Mexico, is responsible for the processing of personal data collected through the website jhlegacy.io and associated channels.
For any matter related to this Policy, you may contact us at contacto@jhlegacy.io.
2. Personal data we collect
We collect the following personal data:
- Identification and contact: name, email address, phone number and company, when you voluntarily fill in the contact form.
- Communications: the content of messages you send us via form, WhatsApp, email, LinkedIn or other channels.
- Browsing data: IP address (processed in anonymized form by our analytics tools), device and browser type, pages visited, traffic source, and session duration.
We do not collect sensitive personal data (racial or ethnic origin, health status, genetic information, religious beliefs, sexual preferences, among others).
3. Purposes of processing
Primary purposes (required for the relationship; no separate consent needed):
- Reply to your questions or contact requests.
- Evaluate potential commercial collaboration.
- Provide commercial follow-up related to the interest you expressed.
- Comply with applicable legal or contractual obligations.
Secondary purposes (optional; you may object without affecting the main relationship):
- Statistical and usage analysis to improve content and user experience.
- Sending informational communications about our services.
If you do not want your data to be processed for secondary purposes, you may say so by sending an email to contacto@jhlegacy.io with the subject "Limit Use".
4. Transfers and processors
To operate the site and follow up commercially, we rely on providers that process personal data on our behalf (data processors, in the terms of the LFPDPPP) or receive data as recipients. Some of them are located outside Mexico:
- GoHighLevel (HighLevel Inc.), United States: CRM and outreach platform (embedded form, emails, SMS, automations).
- Lark Suite (Lark Technologies / ByteDance), Singapore / United States: corporate email, internal messaging, and documents.
- Unipile, France (European Union): API for LinkedIn message handling.
- Google LLC, United States: Google Tag Manager and Google Analytics 4 for site usage analytics (anonymized IP).
- cPanel hosting provider, United States: website hosting.
We do not sell or rent your personal data to third parties. The transfers above are made solely for the purposes described in this Policy and under the terms and privacy policies of each provider.
5. ARCO rights
You have the right to Access your personal data, Rectify it when inaccurate, Cancel it when you consider it is no longer necessary, or Object to its processing for specific purposes.
To exercise any of these rights, send an email to contacto@jhlegacy.io with the subject "ARCO Rights" and include:
- Your full name and a means for us to communicate the response.
- A copy of a valid government-issued ID (to verify your identity).
- A clear and precise description of the right you want to exercise and the data it relates to.
- Any element or document that helps locate the data.
We will respond within a maximum of 20 business days from receipt. If you believe your right to data protection has been violated, you may file a complaint with the National Institute of Transparency, Access to Information and Personal Data Protection (INAI): home.inai.org.mx.
6. Withdrawal of consent
You may withdraw at any time the consent you have given for the processing of your data, following the same procedure as for ARCO rights. Withdrawal does not have retroactive effect and, in some cases, we may be required to retain certain data due to legal obligations.
7. Cookies and tracking technologies
The site uses:
- Minimum functional cookies, required for the site to work correctly. No consent required.
- Analytics cookies from Google Analytics 4, loaded through Google Tag Manager. They collect usage data in aggregate form and with anonymized IP.
- Third-party cookies set by the embedded GoHighLevel form and, on desktop, by the GoHighLevel chat widget.
You can block or delete cookies from your browser settings. Blocking analytics cookies does not affect your experience on the site.
8. Security measures
We maintain reasonable administrative, technical and physical safeguards to protect your personal data against unauthorized access, loss, alteration or disclosure, considering the state of technology, processing risks, and data sensitivity.
9. Changes to this Policy
We may update this Privacy Policy when required by legal changes, new services, or operational adjustments. The current version is always available at jhlegacy.io/privacy, with the last-updated date at the top.
10. Contact
For questions, comments, or requests related to this Policy, write to us at contacto@jhlegacy.io.