Legal
Privacy Policy
Cardon Digital is a growth-systems practice based in Baja California, Mexico, working with clients in Mexico and the United States. This policy explains what information this website handles, what we deliberately do not collect, and the rights you have. It is written to be read, not skimmed past.
What this site does not do
- No data resale of any kind, and no sharing of your details for marketing.
- No accounts, and no form on this site feeds a marketing database.
- No third-party script loads before you have said yes to it, and if you say no, none loads at all.
Measurement, and the question we ask first
When measurement is switched on, this site can load two Google products: Google Analytics 4, which tells us which pages people read, and Google Ads conversion measurement, which tells us which ads brought them here. Neither one loads until you accept. Before you answer, the pages you receive carry no Google script at all, not even one that would decide for itself not to run. While measurement is switched off entirely, you are asked nothing and nothing is loaded.
- The pages you open on this site, and how you arrived at them.
- Your approximate location from your IP address, and your device and browser type.
- Three actions we count as conversions: sending or opening a contact message, opening WhatsApp, and opening the booking link.
- Google sets its own cookies to do this. We never sell what is collected.
Your answer is kept in one first-party cookie named cardon-consent, which holds nothing but the word granted or denied for six months and is what stops us asking again on every page. To change your answer, clear this site's cookies in your browser: cardon-consent goes with them, nothing from Google loads on your next visit, and we ask you again.
What is stored on your device
Three things, all of them ours and all of them small. Your light-or-dark display preference, kept in your browser's local storage. A cardon-locale cookie holding es or en for a year, written only if you switch language. And, once measurement is switched on and you have answered, the cardon-consent cookie described above. If you accept measurement, Google also sets its own cookies through the tag. You can clear any of them at any time through your browser settings.
What we receive if you contact us
The contact links on this site open your own email client. If you write to us we receive your email address and whatever you choose to tell us. We use it to reply and, if we end up working together, to deliver the work. We keep correspondence as ordinary business records, we do not add you to mailing lists you did not ask for, and we never sell or share your details for marketing.
Hosting and server logs
This site is served by a hosting provider that, like all hosts, processes standard technical logs (IP address, browser type, pages requested) for security and reliability. We do not use these logs to profile visitors.
Client data
In client engagements we routinely work inside business systems that contain personal data (for example customer or applicant records). That data is processed under the client's instructions and our written agreement with them: access is limited to the people doing the work, it is used only to deliver the engagement, and it is never extracted for any other purpose. Questions about a specific company's data should go to that company; we support our clients in answering them.
Your rights
Under Mexico's Federal Law on Protection of Personal Data (LFPDPPP) you have the rights of access, rectification, cancellation, and objection (ARCO). If you are in the European Economic Area or the United Kingdom, the GDPR gives you similar rights of access, correction, deletion, restriction, portability, and objection; where we process correspondence, we do so on the basis of legitimate interest in responding to you, and where we measure, we do so on the basis of the consent you give. California residents: we do not sell or share personal information as those terms are defined in the CCPA. To exercise any right, email us and we will respond within the legal timeframe.
Contact
If we change what this site collects, this policy is updated first and the change is visible here, with a new effective date.