1. Data controller
Abraham Ceseña Diaz, an individual operating under the trade name Coolcat Creative Studio (RFC: CEDA99082694A), is responsible for personal data collected through this website. Privacy email: coolcatstudio@outlook.com. Phone/WhatsApp: +52 664 708 9550. Address for privacy and legal notices: Calle Carrillo Puerto 1514, Zona Centro, C.P. 22000, Tijuana, Baja California, Mexico.
2. Personal data we process
When you use the project form we may collect your name, email address, brand or company, service of interest, and the information you include in your message. When you visit the website, our hosting provider may create ordinary server logs such as IP address, date and time, requested URL, and basic browser information for security and operation.
We do not request sensitive, financial or patrimonial personal data through this website. Please do not include such information in the message field.
3. Purposes
We use personal data to respond to project/contact requests; understand service needs; prepare and follow up on proposals or commercial conversations; maintain security, prevent abuse and troubleshoot; and comply with legal or contractual obligations when applicable.
We do not use project-form data for marketing or advertising campaigns without obtaining additional consent when required.
4. Consent
By submitting the form after being presented with the Short Privacy Notice and this Full Privacy Notice, you authorize the processing necessary to handle your request. You may revoke consent at any time, without retroactive effect, by writing to our privacy email.
5. Service providers and third parties
The project form is processed by Coolcat's own website endpoint and delivered through authenticated SMTP using our hosting/email infrastructure. The submission is sent to Coolcat's designated Outlook mailbox without taking the user away from the page. Hostinger and Microsoft may process technical information as necessary to provide hosting and email delivery services.
The 360° tour is served through COOLCAT 360 on our own website infrastructure. It does not require a third-party tour platform to load. We may record an aggregate tour view count on the server. Instagram, Facebook and WhatsApp links take you to third-party services only when you choose to open them.
6. Transfers
We do not sell personal data. Providers processing information on Coolcat's behalf act as service providers/processors to the extent necessary to deliver requested functionality. If a future transfer requires consent, we will provide the required notice and obtain consent under applicable law.
7. Retention and security
We keep information only for as long as reasonably necessary to handle the inquiry and, if a commercial relationship is established, for the period required to comply with contractual, tax, administrative or legal-defense obligations. We use reasonable administrative and technical safeguards to reduce risks of loss, unauthorized access, alteration or disclosure.
8. ARCO rights and revocation
You may request access, rectification, cancellation or opposition (ARCO rights), limit use or disclosure, or revoke consent. Email coolcatstudio@outlook.com with the subject “ARCO / Privacy”. Include your name, a method for receiving our response, a clear description of the data and right you wish to exercise, and information necessary to verify identity.
Requests will be handled within the time limits established by Mexico's Federal Law on Protection of Personal Data Held by Private Parties.
9. Cookies and similar technologies
Google Analytics 4 is available as optional analytics and loads only after you grant Analytics consent through our cookie preferences. If you reject analytics, the Google Analytics tag is not loaded. Meta Pixel and other advertising trackers are not installed. We use local browser storage to remember cookie preferences. The self-hosted COOLCAT 360 viewer can load independently of optional analytics consent. See our Cookie Policy.
10. Changes
We may update this notice to reflect legal, technical or operational changes. The current version will always be available at this URL with its last-updated date.
11. Authority
If you believe your personal-data rights have been infringed, you may contact the competent Mexican data-protection authority, currently the Secretaría Anticorrupción y Buen Gobierno, without prejudice to other remedies available to you.