At Enacment, we are committed to protecting the privacy and security of personal information you provide to us. This Privacy Notice describes how we collect, use, disclose, and protect your personal information when you use our services, visit our website, or engage with us in any capacity.

This policy applies to all personal data processed by Enacment in connection with our digital development services, consulting engagements, and business operations. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable, and Mexican data protection legislation (LFPDPPP).

By accessing our services or providing us with your personal information, you acknowledge that you have read and understood this Privacy Notice.

We collect information you provide directly to us, including:

• Contact Information: Name, email address, phone number, company name, and job title when you contact us, request a quote, or sign up for our services.

• Professional Information: Your business requirements, project specifications, and any other details you share with us during consultations or service engagements.

• Account Information: Login credentials and preferences if you create an account with us.

• Communication Records: Records of your correspondence with us, including emails, chat logs, and support tickets.

• Payment Information: Billing details and transaction records when you engage our services (processed securely through third-party payment processors).

We also automatically collect certain information when you visit our website:

• Technical Data: IP address, browser type and version, operating system, device information, and time zone settings.

• Usage Data: Information about how you navigate and interact with our website, including pages visited, time spent, and referral sources.

• Cookie Data: Information collected through cookies and similar tracking technologies (see our Cookie Policy for details).

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our digital development services, including application development, process automation, AI solutions, and consulting engagements.

• Communication: To respond to your inquiries, send project updates, deliver service-related notifications, and provide customer support.

• Business Operations: To process transactions, manage contracts, and maintain accurate business records.

• Personalization: To tailor our services and communications to your specific needs and preferences.

• Analytics and Improvement: To analyze usage patterns, measure service effectiveness, and continuously improve our offerings.

• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

• Security: To detect, prevent, and address technical issues, fraud, and security threats.

• Marketing: With your consent, to send you information about our services, industry insights, and promotional offers. You can opt out at any time.

We implement comprehensive technical, administrative, and physical security measures to protect your personal information:

• Encryption: All data transmissions are protected using industry-standard SSL/TLS encryption. Sensitive data at rest is encrypted using AES-256 encryption.

• Access Controls: Strict access controls ensure that only authorized personnel can access personal information, and only for legitimate business purposes.

• Infrastructure Security: Our systems are hosted on secure cloud platforms (AWS, GCP, Azure) with robust security certifications, including ISO 27001 and SOC 2.

• Regular Audits: We conduct regular security assessments and penetration testing to identify and address potential vulnerabilities.

• Employee Training: All team members receive regular training on data protection and security best practices.

• Incident Response: We maintain a comprehensive incident response plan to quickly address any potential data breaches.

While we strive to protect your information, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You can request a copy of the personal information we hold about you.

• Right of Rectification: You can request that we correct any inaccurate or incomplete personal information.

• Right of Cancellation: You can request that we delete your personal information, subject to certain legal exceptions.

• Right of Opposition: You can object to the processing of your personal information for certain purposes, including marketing.

• Right to Data Portability: You can request to receive your personal information in a structured, commonly used format.

• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at privacy@enacment.com. We will respond to your request within 20 business days as required by law. We may ask you to verify your identity before processing your request.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytical data. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Understand how you interact with our website
• Improve our services based on usage patterns
• Provide relevant content and features

You can manage your cookie preferences through your browser settings. For detailed information about the cookies we use and how to control them, please see our comprehensive Cookie Policy.

We may share your personal information with trusted third parties in the following circumstances:

• Service Providers: We work with carefully selected service providers who assist us with hosting, analytics, payment processing, and other business operations. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

• Business Partners: When necessary for the delivery of our services, we may share information with technology partners and subcontractors, subject to appropriate confidentiality agreements.

• Legal Requirements: We may disclose information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

We do not sell your personal information to third parties for marketing purposes.