STRTGY privacy notice in English

Effective date: October 10, 2026.

This notice explains personal data processing on the STRTGY website for browsing, business inquiries, resource requests and voluntary newsletter subscriptions when enabled.

Controller and contact

Brieffy S.A. de C.V., operating as STRTGY, located at Av. Constitución 2000, Fracc. Parque Royal, Colima, Colima, CP 28017, Mexico, is the controller of your personal data. For privacy questions and rights requests, contact privacidad@strtgy.ai.

Personal data we process

Our contact form requests your name, email, company or website, service of interest and project goal. You may optionally provide your role and involvement in the decision, industry, company size, project market or region, preferred starting timeframe, estimated business project budget and phone number. We also process correspondence concerning your request.

For downloadable resources, we collect your name, email, phone number, company and job title; industry and needs or goals are optional. We also record the requested resource and language. For the newsletter, when available, we request your email and, optionally, your name, together with a record of your subscription choice.

Website hosting and security may process technical connection and usage information, such as IP address, browser and device characteristics, date and time, and information needed to prevent automated submissions. The website technologies section explains this processing.

We do not request sensitive personal data, payment details or personal financial information in these forms. Please do not include these in free-text fields or send confidential information or unnecessary information about other people. The budget field concerns the business project budget, not your personal assets or financial circumstances.

Necessary purposes

We use contact information to answer your inquiry, understand and assess the project, prepare a discussion or proposal, and follow up on the request you initiated. Our team carries out the commercial assessment. We use resource-request information to deliver the requested presentation, assess your professional interest and the relevance of our services to your company or project, and handle the business inquiry associated with the resource. This may include targeted contact by email or phone to understand your needs and follow up on that inquiry. Our team performs this review; the request does not authorize general promotional communications or a newsletter subscription. We also process data to operate and protect the website, handle privacy requests and comply with applicable legal obligations.

Optional purposes

Only if you make a separate choice will we use your name and email to send STRTGY newsletters, content, news and promotional communications about our services. Contacting us or downloading a resource does not automatically subscribe you. Declining or withdrawing this choice does not prevent you from receiving a resource or a response to your inquiry.

You can leave the subscription option unchecked, use the unsubscribe link in newsletter emails or request removal at privacidad@strtgy.ai. Unsubscribing does not prevent us from answering an inquiry you initiated or sending necessary communications concerning an ongoing relationship.

Service providers and data disclosures

We use Squarespace to host the website, receive forms and manage contacts through its native features. Form responses may also be sent to the business email account used to handle them. Squarespace and providers operating these services on our behalf may process and store data outside Mexico, including in the United States, under the applicable service contracts and terms.

A provider processing data solely on our behalf and under instructions acts as a processor; this does not automatically constitute a transfer to an independent third party determining its own purposes. We remain responsible for the processing decisions that belong to us. Forms use Google reCAPTCHA to detect automated submissions and abuse.

We do not plan to sell your data or disclose it to third parties for their own advertising. We may disclose data where required by applicable law or a competent authority, within legally permitted circumstances. If we propose a transfer requiring your consent, we will identify its recipient and purpose and request that consent before proceeding.

Website technologies

The website uses Squarespace infrastructure and technologies needed to operate and protect forms. Google reCAPTCHA analyzes technical interaction signals to prevent fraud, spam and abuse and may set a security cookie. You can manage or delete cookies using your browser settings; restricting necessary cookies may affect some features.

We use Squarespace’s native analytics and activity log features to understand visits, pages viewed, traffic sources and technical access information and improve the website. Non-essential analytics cookies remain restricted until you accept them in the cookie banner. You can accept or reject those cookies or configure your choice through the banner’s Accept, Decline and Manage options. Restricting cookies does not prevent hosting and activity logs from processing technical website-request data. To request limits on this processing, contact privacidad@strtgy.ai. You can also delete or block cookies in your browser.

Retention and security

We retain data while needed for the purpose for which it was collected and, where applicable, for periods required by legal obligations or to address liabilities. Data is then deleted or de-identified, following restricted retention where legally required. Unsubscribing stops newsletter use; we may retain the minimum record needed to honor your choice and document the request.

We apply administrative, technical and physical safeguards appropriate to the data and risks to prevent unauthorized access, loss, alteration or use. No system provides absolute security. We will inform you as required by law if a breach significantly affects your property or non-material rights.

Your rights and how to exercise them

You may request access to your data and information about its processing; correction of inaccurate or incomplete information; cancellation where applicable; or opposition to processing in the circumstances provided by Mexican law. To exercise these ARCO rights, email privacidad@strtgy.ai with the subject “Privacy request”.

Include your name and a way to receive our response; the right you wish to exercise or what you are requesting; a description of the relevant data, unless requesting access; and information that helps locate it, such as the email used and approximate submission date. For correction, explain the changes and provide supporting information. You must establish your identity and, if applicable, your representative’s identity and authority. We will indicate an appropriate verification method; do not send passwords or information unrelated to your request.

We will communicate our determination within a maximum of 20 business days after receiving your request. If granted, we will implement it within the following 15 business days. Each period may be extended once for an equal period where justified by the circumstances, with notice of the reason. Access will be provided electronically after identity verification. Exercising your rights is free, except for legally permitted costs, which will be disclosed where applicable.

Withdrawal and restrictions

You may also request withdrawal of consent or limits on use or disclosure by emailing privacidad@strtgy.ai. Identify the processing you wish to stop or restrict and provide enough information to identify the record. We will explain the outcome and any legal obligations preventing us from fulfilling the request fully or immediately. Withdrawal is not retroactive and may prevent us from continuing a process that depends on the data. To stop newsletter emails, simply unsubscribe or email the same address; you do not need to request cancellation of all your data.

For withdrawal and restriction requests, we apply the same procedure and response periods described for ARCO rights, with identity verification proportionate to the request. You can obtain further information about the procedure at privacidad@strtgy.ai.

Competent authority

If you believe your rights have not been addressed in accordance with the law, you may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno through the procedures applicable to personal data held by private parties. This notice is governed by Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and other applicable provisions.

Changes to this notice

We will publish changes in the website’s “Privacy notice” section, linked from the footer and forms, and display the update date. Where a change requires new consent, we will obtain it before the relevant processing.