Privacy Policy

We collect various types of information to provide and improve our services:

Personal Information You Provide:

• Name, email address, phone number, and company information when you create an account
• Payment information when you subscribe to our services
• Profile information including preferences and interests
• Communications you send us (emails, contact forms, support requests)
• Content you create or upload to our platform

Information Automatically Collected:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, interactions)
• Cookies and similar tracking technologies (see our Cookie Policy)
• Location data (with your permission)

Information from Third Parties:

• Social media profiles (if you connect your accounts)
• Payment processors and service providers
• Analytics and marketing partners

We use your personal data for the following purposes:

• Service Delivery: To provide, maintain, and improve our consulting services and platform
• Account Management: To create and manage your account, process payments, and handle subscriptions
• Communication: To send you updates, newsletters, marketing materials, and respond to your inquiries
• Personalization: To customize your experience and provide relevant content and recommendations
• Analytics: To understand how users interact with our services and improve functionality
• Security: To protect against fraud, unauthorized access, and security threats
• Legal Compliance: To comply with legal obligations and resolve disputes
• Research: To conduct research and develop new features and services

We process your data based on:

• Your consent (which you can withdraw at any time)
• Performance of our contract with you
• Compliance with legal obligations
• Our legitimate business interests

We implement comprehensive security measures to protect your personal data:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols
• Access Controls: Strict access controls ensure only authorized personnel can access personal data
• Data Minimization: We only collect and retain data necessary for our services
• Regular Audits: We conduct regular security audits and vulnerability assessments
• Secure Storage: Data is stored on secure servers with firewalls and intrusion detection systems
• Employee Training: Our team receives regular training on data protection and privacy
• Incident Response: We have procedures in place to respond to data breaches promptly

Despite our best efforts, no system is 100% secure. We cannot guarantee absolute security but will notify you of any breach that may affect your rights.

Under Mexican law (LFPDPPP) and GDPR, you have the following rights regarding your personal data:

• Access (Acceso): Request a copy of the personal data we hold about you
• Rectification (Rectificación): Correct inaccurate or incomplete personal data
• Cancellation (Cancelación): Request deletion of your personal data
• Opposition (Oposición): Object to certain processing of your personal data
• Portability: Receive your data in a structured, commonly used format
• Withdraw Consent: Withdraw your consent for data processing at any time
• Lodge a Complaint: File a complaint with data protection authorities

To exercise your ARCO rights, please contact us at privacy@merkava.com. We will respond to your request within 20 business days as required by Mexican law, or within 30 days as required by GDPR.

For users in Mexico, you may also contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) at home.inai.org.mx

We may share your personal data in the following circumstances:

• Service Providers: With third-party vendors who help us provide our services (hosting, payment processing, analytics)
• Business Partners: With partners when you participate in joint programs or initiatives
• Legal Requirements: When required by law, court order, or government authorities
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• With Your Consent: When you explicitly authorize us to share your data

International Transfers:

Your data may be transferred to and processed in countries outside of Mexico and the European Union. We ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection
• Binding corporate rules and certification mechanisms

We do not sell your personal data to third parties.

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for the website to function properly
• Performance Cookies: Help us understand how you use our services
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements

You can manage cookie preferences through your browser settings or our cookie consent banner. For more details, please see our Cookie Policy.

With your consent, we may send you:

• Service updates and announcements
• Newsletters and educational content
• Marketing materials about our services
• Surveys and feedback requests

You can opt-out of marketing communications at any time by:

• Clicking the unsubscribe link in our emails
• Adjusting your account preferences
• Contacting us at privacy@merkava.com

Note that you cannot opt-out of essential service communications related to your account or transactions.

Applicable Laws:

This Privacy Policy complies with:

• Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)
• European General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable international data protection regulations

Data Retention:

We retain your personal data only for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (tax, accounting, legal records)
• Resolve disputes and enforce our agreements
• Fulfill the purposes outlined in this policy

When data is no longer needed, we securely delete or anonymize it. Account data is typically retained for 3 years after account closure unless legal requirements mandate longer retention.

Children's Privacy:

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.