Privacy notice

Data controller

AMAZING AND COOL S.A.S DE C.V. is responsible for the personal data obtained through myexpertise.plus.

Address: Ganaderos, Col. Valle del Sur, Alcaldía Iztapalapa, C.P. 09819, Ciudad de México, México.

Privacy contact: dpo@myexpertise.plus.

Legal framework

This notice is issued under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (2025) and its applicable regulations.

Where applicable because of where you are located, we also follow the EU General Data Protection Regulation (GDPR) and its UK equivalent, the California Consumer Privacy Act (CCPA/CPRA) and Brazil’s General Data Protection Law (LGPD).

Data we process

Identification and contact data you send us through the contact form, the portal or by email: name, email address, company and phone (optional) and the content of your message, plus the IP address, date and time of the request to protect the service from abuse.

To confirm that the email address is yours, the contact form sends you a link; your request reaches the department only after you confirm it, and you receive a copy.

Portal sign-in data: your email address. Your password is checked in real time against our mail server and is never stored on this site.

Technical data generated when you visit the site: IP address, date and time, page requested and browser type, logged by the server for security and operation.

We do not collect sensitive personal data.

How we use your data

Necessary purposes: replying to your messages and requests; giving you access to the portal and your email; protecting the site and its users against unauthorized access and abuse; complying with legal obligations.

We do not use your data for advertising, commercial profiling or automated decision-making. There are no secondary purposes.

Legal bases (GDPR and LGPD)

Performance of a contract or steps taken at your request (answering your message, providing the portal); legitimate interest in the security of the service (technical logs and blocking failed sign-in attempts); compliance with legal obligations.

Cookies and similar technologies

This site does not use analytics, advertising or tracking cookies, and it does not load third-party resources.

It only uses one strictly necessary cookie, called e2e_portal, when you sign in to the portal. It keeps your session secure, is limited to that section and is deleted when you sign out, after 30 minutes of inactivity or when you close your browser. Because it is essential for the service you request, it does not require prior consent.

Who we share your data with

We do not sell or share your personal data with third parties for their own purposes or for advertising (including “selling” or “sharing” as defined by the CCPA).

Data is hosted on servers of our infrastructure provider located in the United States of America, which acts as a processor and handles it only on our behalf. If you use the site from another country, your data is transferred there with appropriate safeguards.

We may disclose data to competent authorities when required by law or by an official order.

How long we keep it

Email messages, for as long as needed to handle your request or our relationship with you.

Server technical logs, up to 90 days, unless needed to investigate a security incident.

Contact form requests not confirmed, 24 hours; then they are deleted without being sent. Counters that limit repeated requests, up to 24 hours.

Records of failed portal sign-in attempts, 15 minutes. Portal sessions, 8 hours at most.

Your rights

You may access, rectify or cancel your data, or object to its processing (ARCO rights), and you may withdraw your consent or limit how your data is used.

If the GDPR or LGPD applies to you, you may also request data portability and restriction of processing. If the CCPA applies to you, you may know what data we hold, request its deletion or correction, and you will not be discriminated against for exercising your rights.

To exercise them, write to dpo@myexpertise.plus with your name, the right you wish to exercise, the data it concerns and a way to reply to you. We may ask you to verify your identity. We will respond within the maximum period allowed by the law that applies to your case, including any extensions it permits.

If you believe your rights were not respected, you may contact the data protection authority that applies to you; in Mexico, the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).

Security

We use encryption on every connection (HTTPS and encrypted email), firewalls, automatic blocking of repeated sign-in attempts and regular updates. No system is infallible; if a breach affects your rights, we will inform you as required by law.

Minors

This site is not directed at minors and we do not knowingly collect their data. If we find that a minor has given us personal data, we will delete it.

Changes to this notice

Any change will be published on this page. Last updated: October 11, 2026.