This notice explains what personal data AnVerse collects through this site, why it is collected, who it is shared with, and how you can control it. It is written to satisfy both Mexican data protection law, under which AnVerse operates, and the expectations of visitors in the United States and the European Union.

Plain summary: the only data I collect is what you type into the contact form or into the booking page, plus standard web analytics. I do not sell it, I do not add you to lists you did not ask for, and one email gets it deleted.

1. Who is responsible for your data

The data controller (responsable under Mexican law) is:

AnVerse is a sole proprietorship. There is no team, no data department and no third party handling your enquiry on my behalf. The same person who reads your message is the one accountable for it.

2. What data is collected

Through the contact form

When you submit the contact form, the following is collected:

Field	Why it is needed
Name	To address you correctly in my reply
Work email	To send the reply
Store URL	To look at the site before answering
Monthly ad spend range	To judge whether I am a realistic fit
Your message	To understand the situation
Consent selections	To record what you agreed to

When you book a call

Scheduling is handled by Cal.com, embedded on the booking page. When you pick a time, the following is collected:

Field	Why it is needed
Name	To put on the calendar invitation
Email	To send the invitation, the reminder and any change
Timezone	Detected by your browser, so the times shown are times you can actually take
Store URL	To look at the site before the call
Monthly ad spend range	To judge whether I am a realistic fit
What is going on	So the call starts with context instead of background

Confirming a booking creates an event in my Google Calendar carrying your name and email, and generates a Google Meet link for the call. Cancelling from the confirmation email removes the event.

No sensitive personal data is requested anywhere on this site. Please do not include health, financial account, biometric, ideological or similar information in a message or booking field. It is not needed and I have no lawful basis to process it.

Data collected automatically

• Attribution data. The page you first landed on, the referring site, and campaign parameters in the URL (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, wbraid, gbraid, msclkid, fbclid). Stored in your browser's session storage and sent when you submit the form or confirm a booking, so I know which channel brought you.
• Technical data. IP address, approximate location derived from it, browser and device type, and timestamps. Processed by Cloudflare to route and protect the site.
• Analytics data. Pages viewed, time on page, and interactions, collected through Google Analytics 4 via Google Tag Manager, subject to the consent rules in section 5.
• Anti-spam signals. Cloudflare Turnstile evaluates whether a form submission is automated. It does not track you across sites.

When a booking is confirmed, the site records that it happened, along with the duration and the campaign that brought you. That record deliberately contains no name and no email address.

3. Why the data is processed

Primary purposes

These are necessary for the relationship you initiated and cannot be opted out of while keeping the service:

• Answering your enquiry and having the conversation that follows
• Scheduling, confirming and holding the call, if you book one
• Assessing whether AnVerse is a suitable fit for your business
• Preparing a proposal, if the conversation reaches that point
• Preventing spam and abuse of the form
• Complying with legal and tax obligations

Secondary purposes

These require your separate, optional consent, and refusing them changes nothing about the reply you receive or the call you booked:

• Occasional emails about paid media, no more than monthly
• Measuring marketing performance and attributing enquiries and bookings to campaigns

You can withdraw consent for secondary purposes at any time by replying to any email or writing to carlos@anverse.media.

4. Legal basis

Under Mexican law (LFPDPPP), processing rests on your consent, given when you submit the form or confirm a booking, and on the legitimate need to respond to a request you initiated. Under GDPR terms, where applicable, the bases are consent (Art. 6(1)(a)) for marketing and analytics, and pre-contractual steps at your request (Art. 6(1)(b)) for answering the enquiry and holding the call.

5. Cookies and tracking

This site uses Google Tag Manager to load Google Analytics 4. Google Consent Mode is implemented, and what it does depends on where you are.

In the European Economic Area, the United Kingdom and Switzerland, advertising and analytics storage are denied by default and stay denied. No cookies are written for those purposes. There is no consent banner because there is nothing to consent to: the storage is simply never used, and your visit is measured only in aggregate, with no identifier attached to it.

Everywhere else, including the United States and Mexico, analytics storage is granted by default. Google Analytics 4 writes a first-party cookie that tells one visit apart from another. It does not identify you by name, and it is not used to build an advertising profile of you.

Functional and security storage, which the site needs in order to work at all, is on everywhere. That includes Cloudflare Turnstile on the contact form and the session storage that holds the attribution data described in section 2.

The booking page loads Cal.com in an embedded frame. Cal.com sets its own storage inside that frame to keep your booking in progress. It is not used for advertising.

You can block or delete cookies through your browser settings at any time. Doing so does not affect your ability to use the form or book a call.

6. Who the data is shared with

Your data is never sold, rented or traded. It is shared only with the service providers that make the site work:

Provider	Role	Location
Cloudflare	Hosting, CDN, spam protection	United States
Resend	Delivers the form submission to my inbox	United States
Zoho Mail	Stores and serves my email	United States / India
Cal.com	Scheduling, booking confirmations and reminders	United States
Google	Analytics and measurement, plus Calendar and Meet for booked calls	United States

Because these providers operate outside Mexico, submitting the form or booking a call involves an international transfer of your data. Each provider is bound by its own data processing terms. Data may also be disclosed where a competent authority legally requires it.

7. How long it is kept

• Enquiries that do not become clients: up to 24 months, then deleted.
• Booking records: held in Cal.com and in my calendar. Cancelled and completed bookings follow the same 24 month rule as enquiries.
• Client records: for the duration of the engagement plus the period required by Mexican tax and commercial law.
• Marketing consent records: until you withdraw consent, plus a record of the withdrawal itself.
• Analytics data: according to the retention period configured in Google Analytics 4.

8. Your rights

ARCO rights (Mexico)

You have the right to Access the data I hold about you, Rectify it if it is inaccurate, Cancel it when it is no longer needed, and Oppose its use for specific purposes. You may also withdraw consent and limit the use or disclosure of your data.

Rights under US state and EU law

Where those frameworks apply to you, you may request access to, correction of, or deletion of your personal information, request a portable copy, and opt out of targeted advertising. AnVerse does not sell personal information and does not share it for cross-context behavioural advertising beyond the measurement described above. You will not be treated differently for exercising any of these rights.

How to exercise them

Write to carlos@anverse.media with the request and enough information to identify you, normally the email address you used on the form or on the booking. I will confirm receipt, respond within 20 business days, and carry out the change within 15 business days of a favourable response, as Mexican law requires. There is no charge.

If you are not satisfied with how a request was handled, you may file a complaint with Mexico's data protection authority, or with the supervisory authority in your own jurisdiction.

9. Security

The site is served over HTTPS. Form submissions travel encrypted and are delivered directly to a single mailbox. API credentials are stored as encrypted secrets, never in the site's source code. No database of enquiries is maintained beyond the email inbox itself, and booking data stays inside Cal.com and my calendar.

No system is perfectly secure. If a breach affecting your data occurs, I will notify you and the relevant authority as required by law.

10. Children

This site is aimed at business owners and marketing decision-makers. It is not directed at anyone under 18, and I do not knowingly collect their data. If you believe a minor has submitted information, write to me and I will delete it.

11. Changes to this notice

If this notice changes materially, the updated version is published here with a new date at the top. Substantial changes affecting how your data is used will be communicated by email where I have a valid address and a reason to contact you.