Privacy Policy

1. Who we are

OvalleSoft operates through two legal entities that act as data controllers depending on your location:

Together these entities are referred to as “we”, “us” or “OvalleSoft” throughout this policy.

2. What data we collect

We only collect the data we need to operate our site and respond to you:

• Contact form data — your name, email address, company and the contents of any message you send us.
• Usage & analytics data — pages viewed, approximate location, device and browser type, and referring source.
• Cookies & similar technologies — identifiers stored on your device, subject to your consent. See our Cookie Policy.

3. How we use your data

We process personal data for the following purposes:

• To respond to enquiries and provide the consulting services you request.
• To operate, secure, maintain and improve our website.
• To measure traffic and understand how our content is used (analytics).
• To comply with legal, accounting and regulatory obligations.

4. Legal bases for processing

Where data-protection law requires a legal basis (e.g. the GDPR or Mexico's LFPDPPP), we rely on:

• Consent — for non-essential cookies and optional analytics.
• Performance of a contract — or steps taken at your request prior to a contract.
• Legitimate interests — to secure and improve our site, balanced against your rights.
• Legal obligation — where the law requires us to retain or disclose data.

5. Data sharing

We do not sell your personal data. We share it only with trusted service providers who help us run our business — such as hosting, analytics and email infrastructure — under contracts that require them to protect your data and use it only on our instructions.

We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety and property of OvalleSoft and others.

6. International data transfers

Because we operate in both the United States and Mexico, your personal data may be transferred to and processed in either country, as well as by service providers located elsewhere.

When we transfer data across borders we use appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to ensure your data remains protected.

7. Your privacy rights

Mexico — ARCO rights

If you are in Mexico, you have the rights of Access, Rectification, Cancellation and Opposition (ARCO) over your personal data, as well as the right to revoke your consent and to limit the use or disclosure of your data.

United States

Depending on your state, you may have the right to access, correct or delete your personal data, to opt out of the sale or sharing of personal information, and to be free from discrimination for exercising these rights.

To exercise any of these rights, contact us at partners@ovallesoft.com. We will verify your request and respond within the timeframe required by applicable law.

8. Data retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with our legal and contractual obligations, and to resolve disputes. When data is no longer needed, we delete or anonymise it.

9. Security

We apply reasonable administrative, technical and organisational measures — including encryption in transit and access controls — to protect personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

10. Contact us

For any privacy questions, requests or complaints, please reach out:

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision. Material changes will be highlighted on this page.