Home · Privacy notice
Legal document
Privacy notice
How we process, protect and retain the personal data you entrust to us, under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties.
1. Identity and address of the data controller
XUBAX Tecnología in situ and XUBAX are the trade names under which Cristofferson Reyes Rodríguez operates, with Mexican taxpayer registration (RFC) RERC830216NB0 and address at Felipe de Jesús Tena 31, Fracc. Camelinas, C.P. 58290, Morelia, Michoacán, Mexico.
For the purposes of this notice, the party responsible for processing your personal data is Cristofferson Reyes Rodríguez (hereinafter "XUBAX"), in compliance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP), its Regulations and the Privacy Notice Guidelines.
2. Personal data we collect
We collect the data you provide directly through the forms on this site, by email, by telephone, over WhatsApp or during an on-site assessment: name, company name, telephone or WhatsApp number, email address, business address and whatever information about your operation you choose to share with us.
Where a commercial relationship exists, we additionally collect the tax details required to issue Mexican digital tax receipts (legal name, RFC, tax regime, postal code and CFDI use code).
We do not collect sensitive personal data, nor financial data beyond what is strictly necessary to invoice and collect payment for the services contracted.
3. Purposes of processing
Primary purposes (necessary for our relationship with you): responding to your contact or assessment request; preparing quotes; delivering, implementing and supporting the services contracted; invoicing and collecting payment; and complying with legal and tax obligations.
Secondary purposes (not necessary; you may object at any time): sending you information about new services, maintenance notices, technical content and satisfaction surveys.
If you do not want your data processed for the secondary purposes, you may say so by writing to [email protected]. Your refusal will never be grounds for denying you the services you request.
4. Communication over WhatsApp and messaging
When you write to us over WhatsApp, or when you authorize us to contact you by that channel, the content of the conversation and your telephone number are processed for the same purposes described above and are retained in our management system in order to follow up on your request. The service is provided through the WhatsApp Business Platform, operated by Meta Platforms, Inc., under its own policies.
You may ask us at any time to stop contacting you by that channel by replying BAJA (unsubscribe) to any of our messages, or by writing to [email protected].
5. Data transfers
We do not sell, assign or trade your personal data. We share it only with providers that supply us with infrastructure, messaging, electronic invoicing and backup services, and only to the extent necessary to operate the services you contracted. These transfers do not require your consent under Article 37 of the LFPDPPP. We may also disclose it when required to do so by a competent authority.
6. ARCO rights and withdrawal of consent
You have the right to know what personal data we hold about you, what we use it for and the terms of that use (Access); to request that your information be corrected when it is out of date, inaccurate or incomplete (Rectification); to ask us to delete it from our records when you consider it is not being used in line with the principles of the law (Cancellation); and to object to the use of your data for specific purposes (Objection). These are known collectively in Mexico as ARCO rights. You may also withdraw at any time any consent you have given us.
To exercise any of these rights, send your request to [email protected], stating your name, a means of sending you our reply, a clear description of what you are requesting and documents proving your identity. We will respond within a maximum of twenty business days.
7. Security measures
We maintain reasonable administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction or unauthorized use, including access control, encryption in transit and periodic backups.
8. Use of cookies
This site uses first-party and third-party cookies to remember your session, measure page usage and improve the service. You can disable them in your browser settings; some features of the site may then stop working correctly.
9. Changes to this notice
This notice may be amended to reflect changes in legislation, in our internal practices or in the services we offer. Any amendment will be published at this same address, xubax.com/aviso-de-privacidad.
10. Contact
Personal data department · [email protected] · +52 443 688 7346 · Felipe de Jesús Tena 31, Fracc. Camelinas, C.P. 58290, Morelia, Michoacán, Mexico
Last updated: July 23, 2026.
This document was originally drafted in Spanish. The English version published on this site is a courtesy translation; in the event of any discrepancy between the two, the Spanish version prevails.