Privacy notice

Last updated: October 17, 2026. This is a courtesy translation; the Spanish version is the one that applies.

1. Who is responsible for your data

Iván de Jesús Díaz Navarro, trading as IvanDiazLab, based in San Cristóbal de las Casas, Chiapas, Mexico, is responsible for the personal data collected by this site (ivandiazlab.com). Contact: [email protected]. The site is served from my own server located in San Cristóbal de las Casas.

2. What data I collect

If you write to me through the contact form: your name, your email address, your message and the address (URL) of the page you send it from. If you email me directly, whatever data you include in your email.

Automatically, when you visit the site: the page you visit, the page you came from, your browser, operating system and device type, screen size, language and an approximate location (country, region and city) derived from your IP address. Your IP address is processed by the server and by the services listed in section 4 to deliver the page and estimate that location.

I do not ask for financial or sensitive data. Please do not include it in your message.

3. What I use it for

Primary purpose: to read and answer your message and, if you ask me to, follow up on what you propose (a quote or a work conversation). Visit data is used only to know, in aggregate figures, how many people visit the site and which pages work.

Secondary purposes: none. I do not add you to mailing lists, I do not use your data for advertising or profiling, and I do not sell it.

4. Who else receives data

Google LLC (Google Apps Script). The contact form is sent to a Google Apps Script that stores your message in my Google account. Google receives your name, email, message, the source URL and, like any web server, your IP address. If you email me directly, your email reaches my Gmail account, which is also Google.
Umami (self-hosted analytics). I run Umami on my own server, not a third party's. It does not use cookies. To count unique visits it builds a session identifier derived from your IP address and browser; it does not store the IP, only the approximate location computed from it. If your browser has Do Not Track turned on, Umami does not record your visit.
Cloudflare, Inc. The site is published through Cloudflare, which delivers the pages and therefore receives your IP address, your browser and the page you request. Cloudflare also adds its Web Analytics beacon to the pages; it uses no cookies and records technical visit data (page, referrer, browser and load times).

These transfers are the ones the site and the form need to work; I do not share your data with anyone else. Links to LinkedIn and GitHub take you to those sites, which have their own notices. The site's fonts are served from its own server.

5. How long I keep it

Contact messages, up to 12 months after our last exchange; then I delete them. If the conversation becomes a project, I keep what that project needs and what tax law requires (5 years, article 30 of Mexico's Federal Tax Code). Umami statistics are kept while the site is in operation, without data that directly identifies you.

6. Your rights (ARCO) and withdrawing consent

You can ask me to access, correct or delete your data, object to its use, or withdraw your consent by writing to [email protected]. Include your name, the email you wrote from, which right you want to exercise and on which data. I will answer within 20 business days. If you believe your request was not handled, you may turn to Mexico's Secretaría Anticorrupción y Buen Gobierno, which took over INAI's data protection functions.

To keep Umami from recording your visit, turn on Do Not Track in your browser or block analytics scripts.

7. How I protect it

The site is served over HTTPS only, from a server with no ports open to the internet. Form messages are read only by Iván de Jesús Díaz Navarro.

8. Changes to this notice

If this notice changes, I will publish the new version on this same page with its update date.