Privacy Notice

Nexo Creative Agency (hereinafter “Nexo,” “we,” or “the Data Controller”), located in the state of Tamaulipas, Mexico, is responsible for the use and protection of your personal data.

For any questions regarding the protection of your personal data, you can contact us directly using the contact information provided in Section 10 of this document.

Nexo Creative Agency collects personal data both directly and indirectly through the various points of contact between you and our company: our website, the contact form, email, phone calls, and in-person or virtual meetings.

The personal data we collect is used for the following purposes, which are classified as primary (necessary for the business relationship) and secondary (requiring your additional consent):

Primary purposes — necessary for providing our services:

• Respond to and follow up on contact requests, quotes, and service proposals.
• Execute contracts for marketing, design, and consulting services entered into between the parties.
• Manage the business relationship during project development: communication, delivery of progress updates, and reports.
• Issue tax receipts, invoices, and manage payment processes.
• Comply with legal, tax, or regulatory requirements applicable to our business activities.
• Resolve complaints, provide clarifications, or address support requests related to our services.

Secondary purposes — optional and subject to your consent:

• To send you marketing communications, industry news, service updates, and valuable content created by Nexo.
• Invite you to events, webinars, or activities organized by Nexo Creative Agency.
• Conduct satisfaction surveys and market research to improve our services.
• Include success stories or testimonials—with specific prior authorization—in our communication materials.

If you do not wish for your data to be used for secondary purposes, you may notify us at any time by writing to info@nexocreativeagency.com with the subject line “Objection to secondary purposes.” Your refusal will in no way affect the provision of the contracted services.

Nexo Creative Agency may transfer your personal data only in the following cases, without requiring your consent when the transfer is necessary to comply with legal obligations or to fulfill the contract:

In all cases, we will ensure that any third parties who receive your personal data maintain security measures equivalent to our own and use them solely for the stated purposes.

Nexo Creative Agency does not sell, rent, or share personal data with third parties for purposes unrelated to our established business relationship with you.

Our website uses cookies and similar technologies to improve your browsing experience, analyze website usage, and, where applicable, personalize the content or ads you may see. Below is a description of the types of cookies we use:

You can configure your browser to block or delete cookies at any time. Please note that disabling certain cookies may affect the site’s functionality. You can change your cookie settings at:

• Chrome: Settings → Privacy and Security → Cookies and Other Site Data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage website data
• Edge: Settings → Cookies and Site Permissions

In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties, you have the right to exercise the following rights regarding your personal data at any time:
Access

To find out what personal data we have about you, how we obtain it, what we use it for, and to whom we have disclosed it.

Correction

Request that your information be corrected if it is inaccurate, incomplete, or out of date.

Cancellation

Request that we delete your data from our databases, unless we are legally required to retain it.

Opposition

Object to the use of your data for specific purposes, in particular for the secondary purposes described in this notice.

Procedure for exercising your ARCO rights:

• Send an email to info@nexocreativeagency.com with the subject line “Exercise of ARCO Rights.”
• Please include your full name and any information that will allow us to identify you as the account holder.
• Please clearly describe the right you wish to exercise and the information to which your request relates.
• Please attach a copy of your current government-issued ID.
• If you are acting through a legal representative, please include the documents proving such representation.

We will respond to your request within 20 business days of receiving it. If your request is approved, the decision will take effect within an additional 15 business days. Both deadlines may be extended for valid reasons, and you will be notified in a timely manner.

You have the right to withdraw your consent to the processing of your personal data at any time and without having to provide a reason.

To withdraw your consent, send a request to info@nexocreativeagency.com with the subject line “Withdrawal of Consent”, including your full name and the information or purposes for which you wish to withdraw your consent.

Important considerations: Withdrawal of consent does not have retroactive effect, so any processing carried out prior to the request remains valid. Furthermore, if the withdrawal concerns data whose processing is necessary to fulfill contractual or legal obligations, it may affect the provision of our services; we will inform you of this in our response.

In the specific case of commercial communications (newsletters, marketing emails), you can withdraw your consent at any time by clicking the “Unsubscribe” link at the bottom of every message we send you.

In addition to the ARCO rights described above, you may request that we restrict the use or disclosure of your personal data in situations where you believe that the processing does not comply with the terms of this notice.

To this end, we have the following mechanisms in place:

• Internal opt-out list: You can request to be added to our opt-out list to stop receiving marketing communications by emailing info@nexocreativeagency.com.
• Public User Registry (REUS): You can register with PROFECO’s Public Consumer Registry to restrict the use of your personal data for advertising purposes by companies in general.
• Complaint to the INAI: If you believe your right to personal data protection has been violated, you may file a complaint or report with the National Institute for Transparency, Access to Information, and Personal Data Protection (INAI) via www.inai.org.mx.

Safety precautions: Nexo Creative Agency implements administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, unauthorized use, access, or disclosure. These measures include:

• Encrypted data transmission via the HTTPS/SSL protocol on our website.
• Access to personal data is restricted to authorized personnel who have a legitimate business need to know.
• Confidentiality agreements with all staff and vendors who have access to personal data.
• Periodic review of information security policies and procedures.
• Secure deletion of personal data when it is no longer necessary for the purposes for which it was collected.

Nexo Creative Agency reserves the right to update or modify this Privacy Notice at any time in order to comply with new legal requirements, changes to our services, or updates to our data processing practices.

Any changes to this notice will be communicated through one of the following methods:

• Publication of the new version on our website www.nexocreativeagency.com, including the effective date.
• Direct notification via email to data subjects with whom we have an active relationship, when the changes are substantial.

We recommend that you review this notice periodically. Your continued use of our services or website after changes are posted constitutes your acceptance of the current version.

This notice was last published on March 19, 2025, and corresponds to Version 1.0. Previous versions will cease to be valid as of the publication date of a new version.

If you have any questions, requests, or wish to exercise your rights regarding this Privacy Notice, you can contact our Privacy and Data Protection Department using the following methods:

We will strive to respond to all inquiries and requests as quickly as possible. For the formal exercise of ARCO rights, the maximum response time is as indicated in Section 06 of this document.

If you have any questions about whether Nexo Creative Agency is processing your personal data, you have the right to request confirmation of such processing at any time, free of charge.