Privacy Notice

The party responsible for processing your personal data is EK PUBLICIDAD, S. DE R.L. DE C.V., a company incorporated under the laws of Mexico that operates the Alotap brand and platform, with address at Calle Nelson 421 Int. 301, Col. Terranova, Guadalajara, Jalisco, Mexico. To exercise your rights or raise questions about this Notice you may contact us at privacidad@alotap.com, which serves as the channel to handle requests relating to your personal data.

Depending on your relationship with Alotap and the modules you use, we may collect: identification and contact data (name, email address, phone number, identification or contact details); data of the organization you belong to (company, branch, position); account data (credentials, authentication data, roles, permissions and access); the content you voluntarily publish (cards, menus, catalogs, profiles and other information you choose to share); data related to events, invitations, access, waitlists and attendance; loyalty-program data, visits, points and rewards; responses to forms, surveys and quotes; commercial, real-estate and reservation requests; billing, tax and transactional data; technical and browsing data (IP address, browser, device, operating system, language, date and time); data on the use of QR codes, links, pages and interactions; and statistical, analytical, technical and security data. Please note that content you voluntarily publish may be accessible to anyone who holds the corresponding link or QR code.

The processing of sensitive personal data is not part of Alotap's ordinary purposes. We ask you not to provide sensitive data through the Platform unless it is strictly necessary and you hold the corresponding authorizations. Where the law so requires, we will obtain your express consent for such processing and apply enhanced security measures.

We process your personal data for the following primary purposes, which are necessary for our relationship: to create, authenticate and manage accounts; to identify you; to operate and provide the Platform's services; to manage organizations, branches, roles and permissions; to create and publish QR codes and digital experiences; to provide the cards, restaurants, events, loyalty, forms, real-estate, access and waitlist modules; to process requests, registrations, reservations, invitations and access; to manage subscriptions, payments and billing; to provide customer service and support; to contact you regarding your account and services; to send operational, transactional and security communications; to prevent fraud and abuse; to perform backups, audits and ensure service continuity; to generate statistics, metrics and improvements; to handle clarifications and claims; to comply with legal and tax obligations; to respond to requirements from competent authorities; and to protect our rights and the security of the Platform and its users.

Additionally, and provided you do not object, we may process your data for secondary purposes that are not essential to the relationship but allow us to offer you a better experience: to inform you about news and new features; to send you promotional content; to conduct satisfaction surveys; to carry out market research and statistical and commercial analysis; to send you event invitations; to personalize your experience; and to inform you about products and services of our own or of allied third parties. If you do not want your data used for these secondary purposes, you may state your refusal by writing to privacidad@alotap.com; your refusal will not be grounds to deny you the services you contracted.

Alotap is used by organizations (businesses, merchants, professionals and other clients) that configure their own digital experiences. When an organization independently determines which data it collects from its end users and for what purposes, that organization acts as the data controller of such data and Alotap may act as a processor handling it on behalf of and under the instructions of the organization. In those cases, we recommend that you review the privacy notice of the organization you interact with, which governs the processing it carries out.

To provide the services we rely on providers and processors that handle personal data on our behalf and under contract, such as infrastructure, hosting, databases, processing, cloud computing, security, email, messaging, support, analytics, monitoring, billing, payments, authentication and digital wallet services, among others. These providers may be located in Mexico or in other countries and are bound to maintain confidentiality and apply security measures in accordance with applicable regulations.

Your personal data may be transferred, within or outside Mexico, to clients, providers, business partners, financial institutions, payment processors, acquirers and competent authorities, to the extent necessary for the purposes described in this Notice. We will carry out these transfers without your consent in the cases provided for in Article 37 of the LFPDPPP and other applicable provisions, and we will obtain your consent where the law so requires. Recipients assume the same data-protection obligations that apply to the Controller.

When you make payments through the Platform, your payment-method data is processed by specialized payment-processing providers that operate under their own privacy policies and industry security standards. Alotap does not store full card data in its systems; it only handles the tokenized components or references necessary to operate the transaction.

The Platform may integrate with third-party services, such as payment processors, digital wallets (Apple Wallet, Google Wallet), messaging services, social networks, maps and authentication providers. The processing that such third parties carry out of your data is governed by their own terms and privacy notices, over which Alotap has no control. We recommend that you review them before using those integrations.

We use cookies and similar technologies to maintain your session, authenticate you, remember your preferences, provide security and functionality, and generate statistics that allow us to improve the Platform. Essential cookies are necessary for the operation of the service; as for non-essential cookies, you may manage or disable them through the mechanisms available in your browser or in the Platform itself.

We apply reasonable administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction or unauthorized use, access or processing. Nevertheless, no system is completely infallible, so we cannot absolutely guarantee the security of the information; in the event of a security incident that significantly affects your rights, we will act in accordance with applicable regulations.

We retain your personal data for as long as necessary to fulfill the purposes described in this Notice, as well as to meet applicable legal, tax and contractual obligations. Once those purposes have been met and the corresponding legal terms have elapsed, we will block and subsequently delete the data in accordance with current regulations.

You have the right to access your personal data, as well as to request its rectification when it is inaccurate, its cancellation when you consider it is not needed for the stated purposes, and to object to its processing (ARCO rights). To exercise them, send your request to privacidad@alotap.com indicating your name, a means to prove your identity, a clear description of the data and the right you wish to exercise. We will respond to your request within a maximum of 20 business days and, if applicable, will make it effective within the following 15 business days. Exercising these rights is free of charge; you will only need to cover, where applicable, the justified costs of reproduction or shipping.

You may at any time revoke the consent you granted us to process your personal data by sending your request to privacidad@alotap.com. Revocation will not have retroactive effects and will be subject to the limitations established by law, so in certain cases we may continue processing your data to comply with legal or contractual obligations.

You may request that we limit the use or disclosure of your personal data by sending your request to privacidad@alotap.com. We also make available mechanisms so that you can opt out of promotional communications when you no longer wish to receive them.

Alotap's services are not directed to minors, and we do not knowingly collect their personal data. When a client organization directs its experiences to minors, that organization will be responsible for obtaining the applicable consents and for complying with the obligations required by law.

We may modify or update this Privacy Notice at any time to reflect changes in our practices, in the Platform or in applicable regulations. The current version will always be available at https://alotap.com/privacidad. When the changes are substantial, we will inform you through the means available to us and, where applicable, will obtain your consent again.

If you consider that your right to the protection of personal data has been infringed, you may turn to the competent authority. Under current regulations, this power corresponds to the Secretaría Anticorrupción y Buen Gobierno (Mexico's Anti-Corruption and Good Governance Secretariat), pursuant to the LFPDPPP and other applicable provisions.

By providing your personal data to Alotap after having had access to this Privacy Notice, and by continuing to use the Platform, you express your consent to the processing of your data on the terms described herein. When the law requires your express consent for a specific processing activity, we will obtain it separately and specifically.