Privacy notice

Who is responsible

Rogelio Emmanuel Ceja Acosta, responsible for this demo site.

For anything about your data, email us at rogelioemmanuelceja@gmail.com. Requests are handled by Rogelio Emmanuel Ceja Acosta.

Data we process

We only ask for what we need to serve you. Depending on what you do:

• When you book: name, phone, email (optional), any note you write, the service, person and time you choose, and your appointment history with us (visits, cancellations and no-shows).
• When you use the contact form: name, email or phone, and your message.
• If you leave a review: your rating, your comment and your first name, which are posted on the site with the service and the person who served you.
• If we talk by WhatsApp or email: your number or address and the content of the conversation.
• For staff who use the business panel: name, role, sign-in email, photo (optional), schedules and the changes they make in the panel.
• Technical data: our providers use your IP address to deliver the site and protect it from abuse. We only keep an irreversible hashed fingerprint of it to limit automated bookings and messages.

We do not ask for sensitive data (health, ethnicity, beliefs, orientation, etc.) or card or bank details. Please do not include them in notes or messages.

How we use it

Purposes needed to provide the service:

• Register, confirm, change or cancel your appointments and assign the person who will serve you.
• Remind you of your appointment and tell you about changes.
• Answer your messages and requests.
• Ask for your opinion once after a completed appointment and post your review if you choose to leave one.
• Run the business internally (schedule, attendance and statistics) and meet legal obligations.
• Protect the site against fraud, bots and unauthorized access.

Secondary purposes: we do not use your data for advertising, promotions or marketing profiles. If we ever want to, we will ask first and separately, and you can say no without affecting your appointments.

Your consent

By checking the privacy notice box on a form you agree to processing for the necessary purposes. WhatsApp reminders need a separate box, which you can leave unchecked.

You can withdraw your consent at any time by emailing rogelioemmanuelceja@gmail.com. Withdrawal does not affect what was already done and may prevent us from booking you online.

WhatsApp and email messages

We only write to you about your appointments: confirmation, reminder, changes and, once, a review request. We never send promotions without your express permission.

If the business uses its company number, it sends them through the official WhatsApp API (Meta) and only to people who checked the WhatsApp box when booking. Your replies there reach the business panel.

To stop receiving messages, reply STOP or BAJA, or email rogelioemmanuelceja@gmail.com. We act on it right away and within 10 business days at the latest. We may send one message to confirm.

WhatsApp is a Meta service: anything you send us there is also processed by Meta under its own terms.

Cookies and storage on your device

We do not use advertising or tracking cookies, or third-party tools that follow you around the web.

Your browser keeps, only on your device, the light or dark theme you chose and, if you booked, your last service and person so it can offer to repeat them. Nothing is sent anywhere and you can clear it in your browser settings.

Our hosting provider may use strictly necessary technical cookies for site security and, in the business panel, a sign-in cookie.

To stop bots, forms use Cloudflare Turnstile, which checks technical signals from your browser without advertising cookies or puzzles.

The map comes from OpenStreetMap and loads when you reach that section; at that point OpenStreetMap receives your IP address.

Who we share it with

We do not sell or rent your data, or share it for advertising. It is only received by providers that serve us and process it on our behalf, under a duty of confidentiality:

• Cloudflare (United States): site hosting, database, team photos and secure access to the panel.
• Resend (United States): confirmation and reminder emails, if the business uses that channel.
• Meta (WhatsApp): messages about your appointments.
• Telegram: internal alerts to the business about new appointments and messages, if the business uses that channel.
• OpenStreetMap: the location map.

Some providers are outside Mexico, so your data may be stored in the United States or other countries; we require them to protect it with measures at least equivalent to this notice. We may also disclose data to an authority when a law or court order requires it.

How long we keep it

Appointments and contact details: 24 months after your last appointment.

Contact form messages: 12 months.

Reviews: while they are published or until you ask us to remove them.

Staff data: while they work with the business and as long as labor and tax laws require.

Panel change log: 180 days.

When the period ends, data is blocked for the time the law requires and then deleted or anonymized for statistics.

How we protect it

The whole site runs over an encrypted connection (HTTPS) with strict browser security policies.

Only the owner and authorized staff can enter the panel, with email verification, and each person only sees what concerns them.

We keep the minimum: IP addresses only as a hashed fingerprint, photos without location data and never card details.

If an incident significantly affects your rights, we will tell you without delay what happened and what you can do.

Your rights and how to use them

You can find out what data we hold and how we use it (access), correct or update it (rectification), ask us to delete it (cancellation) and object to certain uses (opposition). You can also withdraw your consent and limit the use or disclosure of your data.

Email rogelioemmanuelceja@gmail.com with: your name and how to reply to you; a document proving your identity or that of your representative; which right you want to exercise and over what data; and anything that helps us find it, such as the phone number you booked with.

We reply within 20 days at most and, if your request is granted, carry it out within the following 15 days; each period may be extended once for the same length, with good cause. It is free: only shipping or copy costs could apply.

If you feel we did not handle your request properly, you can contact Mexico's Secretaría Anticorrupción y Buen Gobierno, the personal data protection authority.

If you live in the United States

Several states (such as California, Colorado, Connecticut, Texas and Virginia) give privacy rights to their residents. Although a small business may not be covered by all of those laws, we apply these practices to everyone:

• Know what data we hold about you, where it comes from, why we use it and who we share it with, and get a copy in an easy-to-use format.
• Correct inaccurate data and ask us to delete it.
• We do not sell or share your data for targeted advertising or build profiles with legal effects, so your browser's Global Privacy Control (GPC) signal is honored without any further step.
• We will not treat you differently for exercising your rights.
• You can act through an authorized agent. If we deny your request, you can appeal by replying to our answer; we will respond in writing and tell you how to file a complaint with your state attorney general.
• Email rogelioemmanuelceja@gmail.com with the subject "Privacy request". We verify your identity with data we already hold (for example, the phone number you booked with) and reply within 45 days, extendable once when needed.

Children

This site is not directed at children under 13 and we do not knowingly collect their data. If someone under 18 needs an appointment, a parent or guardian should book it. If you believe we received a minor's data without that permission, contact us and we will delete it.

Changes to this notice

If we change this notice, we will post the new version on this page with its date. If a change affects a purpose that needs your consent, we will ask again. We review it at least once a year.