1. Identity and Address of the Data Controller
Diego González Vega, an individual operating commercially under the name Kataby, hereinafter referred to as “Kataby,” is responsible for the processing, use, protection, and safeguarding of personal data collected through the website katabyhub.com, its forms, contact methods, digital channels, and related services.
The address of the data controller is: Avenida Transportistas No. 414, Fracción de los Gómez, Postal Code 37140, León, Guanajuato, Mexico.
For any matter related to privacy or personal data protection, you may contact us by email at: agencia.kataby@gmail.com
2. Scope of This Privacy Notice
This Privacy Notice applies to personal data collected through:
This Privacy Notice applies to prospective clients, current clients, as well as representatives, employees, and business contacts of organizations that communicate with Kataby.
3. Personal Data Collected
Depending on the nature of the interaction, Kataby may collect the following categories of personal data:
Identification and Contact Information
Project and Service Request Information
Business and Administrative Information
When a contractual relationship exists, Kataby may collect:
Technical and Browsing Information
Automatically collected when you use the website:
Kataby does not intentionally request sensitive personal data through its general forms. Users are advised not to provide medical, biometric, genetic, religious, immigration, sexual orientation, or any other sensitive personal information that is not necessary to process their request.
If an individual voluntarily provides sensitive personal data that is necessary for a specific purpose, such information will be processed only to the extent required and in accordance with the applicable consent and data protection laws.
4. Sources of Data Collection
Personal data may be collected through:
Kataby will make reasonable efforts to ensure that any information obtained from third parties or public sources is relevant for legitimate business purposes and will not knowingly use information acquired through unlawful means.
5. Primary Purposes of Data Processing
Personal data will be used primarily to:
These purposes are necessary to receive and respond to requests, as well as to establish, manage, and maintain a business relationship.
6. Secondary Purposes of Data Processing
When permitted by applicable law and where the appropriate consent or opt-in/opt-out mechanism has been provided, Kataby may also use personal data to:
Refusing or withdrawing consent for these secondary purposes will not affect Kataby's ability to respond to a request or provide the contracted services.
To limit the use of your personal data for advertising or marketing purposes, you may send an email to agencia.kataby@gmail.com with the subject line: "Limit the Use of My Personal Data".
Where applicable, you may also manage your preferences through the cookie consent tools available on the website.
7. Use of Automation and Artificial Intelligence
Kataby may use automation tools, customer relationship management (CRM) systems, conversational agents, and artificial intelligence technologies to support activities such as:
These tools may be provided by specialized artificial intelligence, cloud computing, and data processing service providers, including, where applicable, solutions offered by OpenAI, Anthropic, Google, or other equivalent providers.
Kataby will make reasonable efforts to minimize the information shared with such tools and to use configurations appropriate for business environments.
These automated tools are used solely as operational support. Kataby does not intend to make decisions that produce legal effects or similarly significant consequences for individuals based exclusively on automated processing without a reasonable opportunity for human review.
Data subjects may request additional information or human review by contacting the privacy team at the email address provided for privacy-related inquiries.
8. Cookies and Similar Technologies
The website may use cookies, tags, pixels, scripts, local storage, and similar technologies.
These technologies may be classified as:
Enable the measurement of advertising campaigns, conversion attribution, audience creation, remarketing, and the delivery of more relevant advertisements.
Kataby may use analytics and advertising tools provided by Google, Meta, and other equivalent service providers, including, where applicable:
Where applicable, certain contact information, such as an email address or phone number, may be standardized and transformed using cryptographic hashing functions before being transmitted to advertising platforms for measurement, attribution, matching, or audience creation.
The use of non-essential cookies is subject to the user's preferences and the consent mechanisms made available on the website.
Users may accept, reject, or modify cookie categories through the cookie preference manager available on the website or through their browser settings. Disabling certain technologies may affect the functionality of some features.
9. reCAPTCHA and Abuse Prevention
Kataby's forms may use automated spam, fraud, and abuse prevention services, such as reCAPTCHA.
These services may collect technical and behavioral data necessary to determine whether an interaction was performed by a human or by an automated system. The processing of such data is also subject to the applicable terms and privacy policies of the relevant service provider.
10. Sharing, Data Processors, and Transfers
Kataby may allow access to or processing of personal data by service providers acting on behalf of the data controller for the purpose of providing services such as:
Some service providers may be located in, or process information from, countries outside of Mexico, primarily the United States or other jurisdictions.
Kataby will make reasonable efforts to select service providers that maintain appropriate privacy and security standards and will limit access to personal data to only the information necessary to fulfill the contracted purpose.
Kataby may transfer personal data without obtaining additional consent when such transfer is necessary to:
Where a transfer of personal data requires consent, such consent will be obtained through the appropriate mechanisms.
Kataby does not sell or rent personal data to third parties.
The use of advertising service providers for measurement, attribution, or targeted advertising does not authorize such providers to freely use personal data beyond the scope of their applicable terms, instructions, configurations, and legal bases.
11. Security Measures
Kataby implements reasonable administrative, technical, and organizational measures to protect personal data against:
These measures may include access controls, authentication mechanisms, encryption where appropriate, data backups, system updates, security monitoring, permission management, and data minimization practices.
No internet-connected system can guarantee absolute security. In the event of a security breach that may significantly affect the rights of individuals, Kataby will take the containment, assessment, and notification measures required under applicable law.
12. Data Retention
Kataby will retain personal data for as long as reasonably necessary to fulfill the purposes described in this Privacy Notice.
In general:
At the end of the applicable retention period, personal data will be deleted, anonymized, or blocked in accordance with applicable law and reasonable technical capabilities.
13. ARCO Rights and Other Privacy Rights
The data subject may exercise the following rights:
You may also request:
To submit a request, you must send an email to: agencia.kataby@gmail.com
The subject line must state: "Privacy Rights Request"
The request must include:
Kataby may request additional information solely to verify the identity of the requester and prevent the disclosure of personal data to an unauthorized person.
For requests subject to Mexican legislation, Kataby will communicate its decision within a maximum period of 20 days from the receipt of a complete request. Where applicable, the request will be fulfilled within the following 15 days.
For requests from United States residents subject to applicable state privacy laws, Kataby will make reasonable efforts to respond within the timeframes established by such legislation, generally within 45 days.
The exercise of these rights will be free of charge, except for reasonable reproduction or mailing costs permitted by law.
14. Withdrawal of Consent
Individuals may withdraw their consent at any time, provided that such withdrawal does not prevent compliance with legal or contractual obligations or the exercise or defense of rights.
To do so, you must send an email with the subject line: "Withdrawal of Consent"
The withdrawal of consent will not have retroactive effects on processing activities that were lawfully carried out prior to the withdrawal.
15. Privacy Appeals for United States Residents
When a privacy request is denied in whole or in part, the individual may request a reconsideration by sending an email to the same address with the subject line: "Privacy Appeal"
The request must explain the reasons for the disagreement.
Kataby will review the decision and communicate the outcome within the timeframe established by applicable law. Where applicable, the response will include information on how to file a complaint with the appropriate regulatory authority.
16. Minors
Kataby's services are primarily intended for businesses, professionals, and adults.
Kataby does not intentionally collect personal data from minors. If it is determined that a minor has provided information without the appropriate authorization, Kataby may delete such information or request the involvement of a parent or legal guardian.
Individuals under 18 years of age should not submit forms, contract services, or provide personal data without the authorization of their legal representative.
17. Third-Party Links and Services
The website may contain links, buttons, embedded content, or integrations with third-party websites and services.
Kataby does not control the independent privacy practices of such third parties. Users are encouraged to review their respective privacy policies before providing information or using their services.
18. Changes to This Privacy Notice
Kataby may modify this Privacy Notice as a result of:
The updated version of this Privacy Notice will be available on Kataby's website. When a change is substantial, Kataby may communicate it through the website, email, or another reasonable means.
The date of the latest update will appear at the beginning of this document.
19. Competent Authority
If an individual believes that their right to personal data protection has been violated, they may contact the competent Mexican authority responsible for personal data protection or, where applicable, the consumer protection or privacy authority in their place of residence.
Before contacting any authority, it is recommended to reach out to Kataby to allow the review and resolution of the request.
20. Contact
For questions, requests, or comments related to privacy:
