Legal
Comprehensive Privacy Notice
This notice describes how SANTAFEfirm processes personal data collected through this website, in accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares).
Version 2026-08-v1 · Last updated: 2026-08-06 · Please note: This English translation is provided for convenience. In the event of any discrepancy or legal interpretation, the original Spanish version shall prevail.
1. Data Controller
Juan Manuel Robles Abrant, Tax ID (RFC) ROGJ881029D15, with domicile at Juan Aldama 56, Col. Buenavista, Alcaldía Cuauhtémoc, CDMX, C.P. 06350, México, operating under the brand name SANTAFE, is the controller responsible for processing your personal data. Contact for privacy matters: juan@roblesabrant.com.
2. Personal Data We Collect
Through the forms on this website, we collect: full name, company, job title, corporate email address, website (optional), and a description of the challenge you wish to address. For ARCO rights requests, we collect your name, email address, and request details. We also record technical visit data (landing page, referrer, and campaign parameters), IP addresses for abuse prevention, and, when you record your cookie preferences, an anonymous browser identifier. We do not collect sensitive personal data or financial information through this site.
3. Processing Purposes
Primary purposes: responding to your inquiry, evaluating project fit, conducting communications related to that request, preventing spam or abuse, recording your cookie consent, and fulfilling legal obligations. Secondary purposes, which you may refuse without affecting your inquiry: sending editorial insights or firm updates. To opt out of secondary purposes, simply reply to our contact email or submit a request using the form on this page.
4. Legal Basis and Consent
Data processing is based on your consent provided upon submitting a form and the prospective or existing legal relationship resulting from your inquiry, in compliance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations. You may revoke your consent at any time via the privacy request form.
5. Data Processors and Transfers
We do not sell or commercialize personal data. We use service providers that act as data processors under strict confidentiality commitments: website hosting and runtime infrastructure, database and authentication services, transactional email delivery, messaging (WhatsApp), editorial publishing platform (Substack), and, solely with your consent, usage analytics tools. Some of these providers may process data outside Mexico while maintaining equivalent data protection standards. Beyond these cases, we do not carry out transfers requiring your consent, except as provided under Article 37 of the Mexican data protection law.
6. Data Retention
We retain contact inquiries for as long as there is a legitimate commercial follow-up interest and, in the event of a contractual relationship, for applicable statutory and tax retention periods. Cookie consent records and internal access logs are kept as compliance evidence for a maximum of 24 months. Once these periods expire, data is deleted or anonymized.
7. Security Measures
We apply reasonable administrative, technical, and physical safeguards: in-transit encryption, role-based access control, database-level security policies, internal access logging, and anti-spam mechanisms on all web forms.
8. ARCO Rights (Access, Rectification, Cancellation, and Opposition)
You may request access, rectification, cancellation, or opposition regarding your personal data, as well as revoke your consent or limit its use, by using the form on this page or writing to juan@roblesabrant.com. We will respond within a maximum of 20 business days and, if admissible, execute the request within the following 15 business days. You may also appeal to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) if you believe your rights have been infringed.
9. Cookies and Tracking Technologies
We use essential cookies and local storage strictly necessary to operate the website, submit forms, and maintain authenticated sessions in private areas: the site cannot function without them. Analytics cookies, which generate aggregated usage statistics, are only enabled if you authorize them in our cookie notice; form contents are never shared with these tools. We do not use advertising or profiling cookies. We store a log of your decision (timestamp, policy version, and accepted categories) for compliance verification.
10. Updates to This Notice
Any modifications will be published on this page with a revised version number and update date. Continued use of the website following publication implies acknowledgment of the updated notice.
ARCO Rights
Exercise your rights.
Submit your request through this form. Please provide the email address you used when interacting with us so we can locate your records.