Back to home

Privacy Policy

Compliant with Mexican LFPDPPP

Last updated: February 24, 2026

1. Data Controller Identity

OwnCX, operated by Shiba Group Co. (hereinafter "OwnCX", "we", or "the Data Controller"), with domicile in Monterrey, Nuevo Leon, Mexico, is responsible for the processing of your personal data in accordance with the Mexican Federal Law for the Protection of Personal Data Held by Private Parties (Ley Federal de Proteccion de Datos Personales en Posesion de los Particulares, "LFPDPPP") and its Regulations.

For any matter related to this Privacy Policy, you may contact us at: - Email: alfredo@owncx.io - WhatsApp: +52 811 974 1820 - Website: owncx.io

2. Personal Data We Collect

We collect the following personal data through different channels:

Contact form: - Full name - Email address - Company or organization - Message or project description

Newsletter subscription: - Email address

AI Assistant (The Butler): - Chat messages and queries during the interaction - Personal data voluntarily provided by the user during the conversation

Browsing data (collected automatically): - IP address - Browser and device type - Pages visited and time spent - Cookies and similar technology data

We do not collect sensitive personal data as defined by the LFPDPPP (racial or ethnic origin, health status, genetic information, religious beliefs, union membership, political opinions, or sexual preference).

3. Purposes of Data Processing

Your personal data will be used for the following primary purposes (necessary for the legal relationship):

  • Responding to information requests and inquiries
  • Evaluating and qualifying prospects for our consulting services
  • Delivering contracted services across OwnCX's 8 practice areas
  • Managing the commercial and contractual relationship
  • Issuing quotes, invoices, and tax documents
  • Complying with applicable legal obligations

Secondary purposes (not necessary, but allowing us to improve our services):

  • Sending marketing communications, newsletters, and relevant content
  • Conducting statistical and website usage analysis
  • Improving our services and user experience
  • Personalizing interactions with our AI assistant

If you do not wish your personal data to be processed for secondary purposes, you may send your request to alfredo@owncx.io with the subject line "Secondary Purposes".

4. Data Transfers

To fulfill the purposes described, your personal data may be transferred to the following third parties:

RecipientPurposeCountry
HubSpot, Inc.Customer relationship management (CRM) and marketing automationUnited States
Anthropic, PBCProcessing queries through artificial intelligence (The Butler)United States
Cloudflare, Inc.Website security, spam protection (Turnstile), and content delivery networkUnited States
Vercel, Inc.Website hosting and distributionUnited States
Google LLCWebsite usage analytics (Google Analytics)United States

All transfers are made in accordance with articles 36 and 37 of the LFPDPPP, based on the necessity for maintaining or fulfilling a legal relationship, or as provided by a law or treaty to which Mexico is a party.

The third parties mentioned have privacy policies and appropriate security measures for the protection of personal data. Transfers to the United States are covered under the exceptions provided by article 37 of the LFPDPPP.

5. ARCO Rights

Under the LFPDPPP, you have the right to:

  • Access: Know what personal data we hold about you and the conditions of its processing.
  • Rectification: Request correction of your personal data when it is inaccurate or incomplete.
  • Cancellation: Request the deletion of your data from our databases when you consider it is not being used in accordance with the principles, duties, and obligations set forth in the LFPDPPP.
  • Opposition: Object to the processing of your personal data for specific purposes.

To exercise any of these rights, you must send a request to alfredo@owncx.io including:

  1. Full name of the data subject
  2. Clear and precise description of the personal data for which you seek to exercise any ARCO right
  3. Any other element that facilitates the location of the data
  4. Copy of valid official identification (INE/IFE, passport, professional license)
  5. Address or email to receive the response

We will respond to your request within a maximum of 20 business days from the date of receipt. If the request is deemed valid, it will take effect within 15 business days following the response. Deadlines may be extended under the terms of the LFPDPPP.

You may revoke your consent at any time by sending a request to alfredo@owncx.io with the subject line "Consent Revocation".

6. Limitation of Use or Disclosure

If you wish to limit the use or disclosure of your personal information, you may send your request to alfredo@owncx.io. We will register your request in the corresponding exclusion list.

You may also configure cookie preferences in your browser to limit the automatic collection of browsing data.

7. Data Retention Periods

We retain your personal data for the following periods:

  • Contact data and leads: 3 years from the last contact, or while an active commercial relationship exists.
  • Contractual and tax data: 5 years from contract termination, in accordance with Mexican tax obligations.
  • Newsletter data: Until the data subject requests cancellation of the subscription.
  • AI conversations: 90 days from the interaction, unless they are part of an active service file.
  • Browsing data and cookies: 13 months from collection.

Once retention periods have elapsed, your data will be securely deleted or dissociated for statistical purposes.

8. Cookies and Tracking Technologies

Our website uses the following technologies:

Cloudflare Turnstile: Security cookie for user verification and bot protection. It is strictly necessary for the operation of the site.

Google Analytics: Analytics cookies to understand how visitors interact with our website. This data is anonymized and used solely for statistical purposes.

Session cookies: Technical cookies necessary for the correct functioning of the website, such as language selection.

You may disable cookies through your browser settings. However, this may affect website functionality.

9. Security Measures

OwnCX implements administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing, including:

  • Data encryption in transit (HTTPS/TLS)
  • Restricted access to personal data only to authorized personnel
  • Hosting infrastructure with security certifications (Vercel, Cloudflare)
  • Periodic review of security practices

10. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be published on this same web page (owncx.io/en/privacidad) and, in the case of substantial changes, data subjects will be notified by email.

We recommend checking this page periodically to stay informed of any changes.

11. Competent Authority

If you believe your right to personal data protection has been violated, you have the right to file a complaint with the National Institute for Transparency, Access to Information, and Personal Data Protection (INAI). For more information visit www.inai.org.mx.

12. Contact

For any questions, comments, or requests related to this Privacy Policy:

  • Data Controller: OwnCX (Shiba Group Co.)
  • Email: alfredo@owncx.io
  • WhatsApp: +52 811 974 1820
  • Website: owncx.io
  • Location: Monterrey, Nuevo Leon, Mexico
Book a Call