Privacy Policy

    How Stahl Swanson Consulting collects, uses and protects your personal data.

    Last updated: May 2026

    Data Controller

    The entity responsible for processing your personal data is Stahl Swanson Consulting, S.C.

    For any inquiry regarding this Privacy Notice, the processing of your personal data, the exercise of ARCO rights, or the revocation of consent, you may contact us at info@stahlswanson.com.

    Personal Data We Collect

    We collect the following personal data when you interact with us through our website:

    • Full name
    • Email address
    • Company name and job title
    • Message content submitted via our contact form
    • Technical data: IP address, browser type, language preference, pages visited, timestamps

    Purposes of Data Processing

    Your personal data is processed for the following purposes, which are expressly divided into primary purposes, necessary for the legal relationship arising from your interaction with us, and secondary purposes, which are not necessary for such relationship:

    • Primary purposes: verifying your identity and contact information; receiving, documenting and responding to inquiries submitted through the website; evaluating a potential professional or commercial relationship; providing requested information regarding our services; following up on communications; and, where applicable, complying with legal, contractual, security and recordkeeping obligations arising from the relationship with you.
    • Secondary purposes: sending newsletters, legal updates, invitations to events, or communications about our services; analyzing navigation patterns to improve website content and user experience; and generating analytics and statistics. These secondary purposes are not necessary for the existence, maintenance or performance of the legal relationship with you.

    International Data Transfers

    Your personal data may be transferred, within Mexico or abroad, to service providers that support the operation of our website, communications, hosting, analytics, cybersecurity, document management or other technological infrastructure, as well as to professional advisors or authorities when legally required or permitted. Transfers that are necessary to maintain or perform the legal relationship with you, or that fall within legal exceptions under the applicable law, may be carried out without additional consent where applicable. Any transfer that requires your consent under applicable law will be subject to obtaining it through the corresponding mechanism. In all cases, the third-party recipients of your personal data shall assume the same obligations of protection, confidentiality and security set forth in this Privacy Notice and in the applicable legal framework, through contractual or equivalent binding measures appropriate to the nature of the transfer.

    Cookies

    We use necessary cookies and similar technologies to enable the basic operation of the website. Non-essential cookies, including analytics or similar tools, are activated only after you provide informed consent through our cookie banner or preference center. The categories of cookies used, their purposes, retention periods, and the identity of third-party providers associated with non-essential cookies are described in, or made dynamically available through, the banner and configuration tool in effect on the website. For more information, please see our Cookie Policy.

    Your Rights (ARCO / GDPR)

    You have the right to Access the personal data we hold about you and the details of its processing, to Rectify it if it is inaccurate or incomplete, to Cancel it when you consider it is not being processed in accordance with applicable principles, duties or obligations, and to Oppose the processing for specific legitimate reasons ("ARCO rights"). To exercise any ARCO right, you must submit a request to info@stahlswanson.com including, at a minimum: your name and a means to communicate the response; documents evidencing your identity or, where applicable, the legal representation of your representative; a clear and precise description of the personal data with respect to which you seek to exercise a right; the right you wish to exercise; and any element or document facilitating the location of the data. If the request concerns rectification, you should also indicate the modifications requested and provide supporting documentation. We will communicate our determination within the legal period applicable under Mexican law and, if appropriate, will implement the relevant action within the corresponding statutory timeframe.

    If the information provided in your request is insufficient or erroneous for processing it, we may request additional information within the applicable legal period, and you will have the corresponding legal term to respond. The response to your ARCO request will be sent through the same means by which you submitted it, unless you request a different channel and it is feasible to use it. Where applicable, access to personal data will be provided through copies, electronic documents, or any other legally permitted format.

    Revocation of Consent

    At any time, you may revoke the consent that you have granted us for the processing of your personal data, to the extent such processing is based on consent and the revocation is legally and technically feasible. To do so, you must submit a request to info@stahlswanson.com identifying the consent you wish to revoke, proving your identity or representation, and providing sufficient information to locate the relevant processing activity. We will analyze your request and respond within the time periods established by applicable Mexican law. The revocation of consent will not have retroactive effects and will not affect processing carried out before the date on which the revocation becomes effective, nor any processing that may continue under a legal authorization or obligation independent from consent.

    Security Measures

    We implement administrative, technical and physical security measures to protect your personal data against unauthorized access, loss, alteration or destruction. These measures include encrypted communications (TLS/SSL), access controls and periodic security reviews.

    Data Retention

    We retain your personal data for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Contact form submissions are retained for up to 24 months. After this period, data is securely deleted or anonymized.

    Minors

    Our website and services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

    Changes to This Policy

    We may update this Integral Privacy Notice periodically to reflect changes in our practices or in applicable legislation. The updated version will be published on this page with the corresponding date. This document may be made available in English and Spanish for convenience and international accessibility; however, for all purposes related to Mexican legislation, interpretation and regulatory compliance, the Spanish version shall prevail in the event of any discrepancy.

    This document may be updated periodically