Privacy Policy
How AP Dexter handles personal data on this website, and the rights you have over it under the GDPR and Mexican data protection law.
1. Who is responsible for your data
AP Dexter (“AP Dexter”, “we”, “us”) is the data controller for personal data processed through this website, apdexter.com. We are based in Mexico City, Mexico.
For any question about this policy or to exercise your rights, contact us at contact@apdexter.com. We answer privacy requests from the same address.
2. Scope
This policy covers the personal data we process as a controller: visits to this website and correspondence you send us. It does not cover data we process on behalf of clients under an engagement — in that case the client is the controller and their own privacy notice and our data processing agreement govern the processing.
3. What we collect, why, and on what legal basis
This website has no accounts, no sign-up, no forms, and no payment processing. We collect the minimum needed to run and measure the site, plus whatever you choose to send us by email.
| Data | Purpose | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Analytics data: pages viewed, referrer, approximate location derived from a truncated IP address, device and browser type, and a randomly generated identifier stored in a cookie. | Understanding how the site is used so we can improve its content and performance. | Consent — Art. 6(1)(a). Nothing is collected until you accept analytics in the cookie banner, and you can withdraw at any time. | Until the analytics cookies expire (see the Cookie Policy) or you withdraw consent, whichever comes first. |
| Correspondence: your name, email address, and anything else you include when you email us. | Answering your enquiry and, where relevant, discussing an engagement. | Steps taken at your request prior to a contract — Art. 6(1)(b) — and our legitimate interest in responding to business enquiries — Art. 6(1)(f). | For the duration of the exchange and up to 24 months afterwards, unless a contract or a legal obligation requires longer. |
| Technical logs kept by our hosting provider: IP address, timestamp, requested URL, and user agent. | Serving the site, diagnosing faults, and protecting it against abuse. | Legitimate interest in the security and availability of the site — Art. 6(1)(f). | Short-lived, per our hosting provider’s standard log retention. |
We do not collect special categories of personal data (GDPR Art. 9) through this website, and we ask that you do not send them to us by email. We do not knowingly collect data from children.
4. Cookies and similar technologies
Strictly necessary cookies are used to run the site and to remember your cookie choice. Analytics cookies are loaded only after you consent. No advertising, remarketing, or cross-site tracking tags run on this site. The full list, with names, providers, and lifetimes, is in the Cookie Policy.
You can change or withdraw your choice at any time using the Cookie Settings link in the footer of every page.
5. Who we share data with
We do not sell personal data and we do not share it for advertising. We use a small number of service providers who process data on our instructions under Art. 28 data processing agreements:
- Google Ireland Limited / Google LLC — Google Tag Manager and Google Analytics 4, used for the analytics described above. Loaded only with your consent.
- Vercel Inc. — hosting and content delivery for this website. Processes technical request logs.
- Google LLC— Google Fonts, used to serve the site’s typefaces. Loading a font sends your IP address and user agent to Google’s servers as part of the request.
We may also disclose personal data where we are legally required to do so, or where it is necessary to establish, exercise, or defend legal claims.
6. International transfers
AP Dexter is established in Mexico, and the providers above are established in or transfer data to the United States. Where personal data of people in the EU/EEA or the United Kingdom is transferred outside those territories, the transfer relies on the safeguards in GDPR Chapter V: the European Commission’s Standard Contractual Clauses, and — for providers that are certified — the EU-US and UK-US Data Privacy Framework. You can request a copy of the relevant safeguards from contact@apdexter.com.
7. Security
The site is served over HTTPS. We apply technical and organisational measures appropriate to the risk under GDPR Art. 32, including access control on the systems that hold correspondence and the principle of collecting as little data as possible in the first place. No system is perfectly secure; if a personal data breach is likely to result in a risk to your rights, we will notify the competent supervisory authority and, where required, you.
8. Your rights under the GDPR
If you are in the EU/EEA or the United Kingdom, you have the right to:
- Access — obtain confirmation of whether we process your data and a copy of it (Art. 15).
- Rectification — have inaccurate or incomplete data corrected (Art. 16).
- Erasure — have your data deleted where the conditions apply (Art. 17).
- Restriction — limit how we use your data while a dispute is resolved (Art. 18).
- Portability — receive data you gave us in a machine-readable format (Art. 20).
- Objection — object to processing based on legitimate interest (Art. 21).
- Withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)). For analytics, use Cookie Settings in the footer.
Send requests to contact@apdexter.com. We respond within one month, which we may extend by two further months for complex requests, telling you why. Exercising these rights is free; we may charge a reasonable fee or refuse only where a request is manifestly unfounded or excessive.
You also have the right to lodge a complaint with the supervisory authority in your country of residence, place of work, or where the alleged infringement occurred — or, in the United Kingdom, with the Information Commissioner’s Office. We would appreciate the chance to address your concern first.
9. Your rights under Mexican law
Under Mexico’s federal law on the protection of personal data held by private parties, you may exercise your ARCO rights — access, rectification, cancellation, and opposition — as well as revoke your consent and limit the use or disclosure of your data. Send your request to contact@apdexter.com, including enough information to identify you and to identify the data concerned. If you are not satisfied with our response, you may seek review before the competent Mexican data protection authority.
10. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you (GDPR Art. 22).
11. Changes to this policy
We may update this policy as the site or the law changes. The date at the top reflects the last substantive revision. Where a change materially affects how we use your data, we will ask for your consent again where consent is the basis for that use.
12. Contact
AP Dexter — Mexico City, Mexico
contact@apdexter.com