Last updated: July 14, 2026
Horizons Architecture Systems, S.A.P.I. de C.V. (“Horizons Architecture”, “HA”, “we”, “us”, or “the company”), with its address at Calle Compuerta #151, Col. Jardines del Moral, C.P. 37160, León, Guanajuato, Mexico, is the data controller of the personal data obtained through this website, including horizonsarchitecture.ai, www.horizonsarchitecture.ai, and its pages in Spanish and English.
This notice describes what data we collect, for what purposes, how we use it, with whom it may be shared, and what rights you have. It applies to all visitors and users of the site.
HA is headquartered and domiciled in Mexico. This notice is governed primarily by Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, “LFPDPPP”), published in the Federal Official Gazette (Diario Oficial de la Federación) on March 20, 2025, and by other applicable Mexican law. Where applicable by reason of your location or the scope of the processing, HA will also observe the principles and rights provided for by the European Union’s General Data Protection Regulation (GDPR) with respect to persons located in the European Economic Area, and by the Swiss Federal Act on Data Protection (FADP) with respect to persons located in Switzerland. This reference does not imply that HA has any establishment, branch, subsidiary, legal representative, or domicile outside Mexico.
We collect personal data only when you provide it voluntarily or when the website gathers technical information necessary during your visit.
Data you provide directly:
– Contact form: first name, last name, email address, telephone number, and message. This data is sent to HA by email and is also stored on the website through the Flamingo plugin, for the retention period described in section 6.
Data collected automatically or through site technologies:
– Technical data: when you visit the site, your IP address and the technical information needed to load the site, deliver resources, keep the site secure, and prevent abuse are processed incidentally. We do not build profiles from this information.
– Session cookie: when you use the contact form, the site generates a server session cookie (PHPSESSID) that is deleted when you close your browser.
– Consent cookie: when you manage your cookie preferences, our consent platform (Complianz) records your decision through a first-party cookie that is kept for 365 days.
– Analytics: Google Analytics 4 collects usage data (pages viewed, session duration, approximate geographic location) through the _ga and _ga_8K4194EK3B cookies. These analytics cookies are activated only with your prior consent, managed through our cookie banner. Google processes this data in accordance with its own privacy policy. See our Cookie Policy for details.
– Theme preference: the site stores your light or dark mode preference using local storage (localStorage) in your browser. This is not a cookie and is not transmitted to HA.
– Spam and abuse prevention: the contact form uses Cloudflare Turnstile as an anti-spam mechanism. According to the technical verification performed, Turnstile does not set cookies, but it may process technical data necessary to provide the service, including your IP address.
Data we do not collect through this website:
– Financial or banking information.
– Sensitive personal data (health, religion, political affiliation, biometric data).
– Data for advertising purposes: we do not use advertising or remarketing cookies, we do not use Google Ads, Google Signals, or social media pixels, and we do not share data with advertising networks.
– Data for automated decisions with legal or similarly significant effects. Site data is not used to build individual decision-making profiles.
Primary purposes (necessary to handle your inquiry and operate the site):
– Responding to inquiries submitted through the contact form.
– Maintaining, operating, and improving the functioning of the website.
– Protecting the site and preventing spam, abuse, unauthorized access, and security incidents.
– Recording and honoring your cookie consent preferences.
Secondary purposes (with your consent):
– Generating aggregated internal statistics on the use of the website (analytics).
You may decline the secondary purposes at any time by writing to info@horizonsarchitecture.ai, or by withdrawing your analytics consent from the cookie preferences panel. This will not affect any service we are providing to you.
Where the GDPR applies, the legal bases for processing are the following: your consent, for analytics; the handling of requests, or pre-contractual steps taken at your request, in order to respond to communications you send us; HA’s legitimate interest in operating, maintaining, and protecting the site; and, where relevant, compliance with legal obligations.
We implement technical, administrative, and organizational measures to protect your personal data against unauthorized access, loss, alteration, improper disclosure, or destruction. These measures include encrypted connections (HTTPS), access controls, regular security updates, and review of the tools used on the site.
No technological system can guarantee absolute security. If a relevant security breach affecting your personal data occurs, HA will act in accordance with applicable law and will adopt corrective, preventive, and improvement measures.
We do not sell or rent your personal data. We may disclose your data, or allow limited access to it, only in the following cases:
– To service providers that help us operate, protect, or measure the website (for example, hosting, content delivery networks, analytics, and anti-spam mechanisms), which must process the data in accordance with our instructions, applicable agreements, and limited purposes.
– Where required by law, regulation, a court order, or a valid request from a competent authority.
– Where necessary to protect the rights, security, or integrity of HA, the site, or its users, within the limits permitted by law.
Google Analytics 4 processes certain usage data on our behalf. Its loading is managed directly by our consent platform (Complianz), which keeps the analytics tag blocked until you give your consent. Google’s privacy policy is available at policies.google.com/privacy.
The contact form uses Cloudflare Turnstile as an anti-spam mechanism. In addition, some site resources (for example, code libraries) are served from content delivery networks (CDNs) which, in delivering them, receive your IP address without setting cookies.
Horizons Architecture is headquartered in Mexico. Some of our service providers may process data outside Mexico, mainly in the United States: in particular, analytics data is processed by Google, and the form’s anti-spam mechanism (Cloudflare Turnstile) and content delivery networks may receive your IP address when delivering site resources.
Where your data is transferred or processed outside your country of residence, we take reasonable and appropriate measures, including contractual safeguards where applicable, to protect it in accordance with this notice and applicable law.
We keep your personal data only for as long as necessary for the purposes described in this notice, or as required by applicable law.
– Inquiries submitted through the contact form (stored via Flamingo) are kept for 12 months and then deleted, unless an ongoing relationship requires a longer period.
– Analytics data (event data and user data) is kept in Google Analytics for 14 months, after which Google deletes it automatically.
– The Complianz consent cookie is kept for 365 days to remember your decision.
Under the LFPDPPP, you have the right to:
– Access the personal data we hold about you and to know the conditions and general characteristics of its processing.
– Rectify your data when it is inaccurate, incomplete, or out of date.
– Cancel your data, that is, request its deletion from our files, records, and systems when it is no longer necessary for the purposes described.
– Object to the processing of your data for specific purposes.
These are known in Mexican law as ARCO rights (from the Spanish acceso, rectificación, cancelación y oposición: access, rectification, cancellation, and objection); they correspond broadly to the rights of access, rectification, erasure, and objection recognized under other data protection frameworks. Additionally, you may revoke the consent you have given us and request that the use or disclosure of your personal data be limited. Revocation or limitation will not have retroactive effect and will not affect data that must be kept to comply with a legal obligation, to defend legal rights, or for purposes that so require.
To exercise these rights, send a request to info@horizonsarchitecture.ai stating: your full name and a means of communicating our response to you; documents proving your identity or, where applicable, your legal representation; a clear and precise description of the personal data in respect of which you seek to exercise any of these rights; the right you wish to exercise; and any information that helps us locate your data.
We will communicate our determination within a maximum of twenty business days from the date your request is received. If the request is granted, we will give effect to it within the fifteen business days following the communication of our response. Both periods may be extended once, for an equal period, where the circumstances justify it, with prior notice to you. Exercising ARCO rights is free of charge; only justified costs of reproduction or delivery may be charged.
If your request is denied, in whole or in part, we will inform you of the reason and of the avenue available to challenge that decision under applicable law.
If you believe your right to the protection of your personal data has been violated, you may file a complaint with the Secretaría Anticorrupción y Buen Gobierno, Mexico’s competent data protection authority.
Where the GDPR applies, persons located in the European Economic Area may additionally exercise the rights recognized by that regulation, including data portability, restriction of processing, objection to processing, and the right to lodge a complaint with the competent supervisory authority. Where the Swiss Federal Act on Data Protection applies, persons located in Switzerland may exercise the rights provided for in that law, through the same contact channel indicated in this notice.
We use cookies and similar technologies on our website. For complete information about which cookies we use, their purpose, and how to manage your preferences, see our Cookie Policy.
We may update this notice to reflect changes in our practices or in applicable law. The updated version will be published on this page with a new “Last updated” date. We recommend that you review this page periodically.
Where a change is material and applicable law so requires, we will take reasonable steps to inform you of it prominently.
For questions about this notice or your personal data, or to exercise ARCO rights, revoke consent, or limit the use or disclosure of your data, HA’s official channel is email:
– Email (official channel): info@horizonsarchitecture.ai
– Address: Calle Compuerta #151, Col. Jardines del Moral, C.P. 37160, León, Guanajuato, Mexico