Privacy Notice
Last updated: October 14, 2026
1. Controller and contact
Carpiperg S.A. de C.V. is responsible for personal data processed through carpiperg.com and contact or quote requests. Address: Calle Dietistas 5, Col. La Nueva Rosita, Iztapalapa, Mexico City, C.P. 09040, Mexico.
For privacy and access, rectification, cancellation or objection requests (ARCO): proyectos@carpiperg.com. Contact phone: +52 55 2919 8570. This notice is issued under the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and other applicable provisions.
2. Data we may process
Depending on the form and what you choose to share: name, email or phone, additional phone number, project type and location, budget range, estimated timeframe and message. Optional fields may be left blank.
The site and its technology providers may process IP address, browser, device, approximate country, visited pages, browsing events, cookie identifiers, visit source and campaign parameters (UTM and, when present, gclid, fbclid, gbraid, wbraid or msclkid), referrer and landing page. Spam protection processes technical signals and a verification response.
These forms do not request sensitive data, identity documents, passwords, card numbers or banking details. Do not include them in your message. We do not need information about children for a commercial enquiry.
3. Purposes
Necessary purposes: receive and answer your request; prepare and follow up on a quote; understand the requirements and source of your enquiry; coordinate appointments, design or project work when requested; prevent spam and abuse; and meet legal obligations arising from the relationship established.
Optional purposes: measure site use and performance, attribute campaigns and evaluate advertising using non-essential technologies. You may limit these through “Cookie preferences” or by email. Rejecting them does not prevent a quote request. Sending a form does not subscribe you to a newsletter or itself authorise promotional email campaigns.
4. Consent and budget information
We make this notice available before collecting data. Where tacit consent is legally permitted, you may object through the stated channels; where express consent is required, we request a specific, informed action.
By voluntarily sending a request with an optional budget and authorising the processing described beside the submit button, you expressly consent to using that range to prepare and follow up on your quote. You may omit it and request guidance. This does not authorise advertising or processing sensitive data. Merely browsing does not replace express authorisations required by law.
5. Providers and data disclosure
We use hosting and content-delivery providers, site protection and spam-verification providers, and form reception and management providers to handle enquiries. If you choose WhatsApp, that service participates in the communication. Google Maps provides the embedded map; Google Analytics/Ads and Microsoft Clarity participate when measurement is enabled. These services may process information outside Mexico.
Processing by providers on the controller’s behalf is distinct from transfers to third parties determining their own purposes. External services also have their own notices. We do not sell your data. Transfers requiring your consent are subject to the corresponding information and authorisation; legal exceptions, including obligations or valid authority requests, apply where appropriate.
6. Retention and security
We retain data for as long as necessary to handle the enquiry or commercial relationship and meet applicable legal obligations or responsibilities. Once those purposes end, data will be blocked and subsequently deleted as appropriate, unless lawful retention is justified.
We apply reasonable measures against unauthorised access, loss, alteration or use. Internet transmission cannot be guaranteed absolutely secure. Do not send sensitive documents through public forms.
7. ARCO rights
You may request access, rectification, cancellation or objection by emailing proyectos@carpiperg.com or submitting a request at the controller’s address. Include your name and a reply channel; the right requested; a clear description of your request and, where applicable, the data concerned; and information helping locate it. For rectification, identify the change and supporting information.
You must establish your identity or authority to represent the data subject by appropriate means. We will explain a proportionate, secure method; do not attach identity documents to the commercial form. We will communicate a determination within 20 business days of receiving the request and, if granted, implement it within 15 business days after that communication. Each period may be extended once for an equal period when justified under the law. Relevant requirements or legal reasons affecting the request will be explained.
8. Withdrawal and use limits
You may withdraw consent or limit use and disclosure by emailing proyectos@carpiperg.com with your request and a reply channel. Withdrawal is not retroactive and may be limited by legal obligations or an ongoing relationship; we will explain what applies. We handle the request using the identity procedure and periods described for ARCO where applicable.
For non-essential technologies, “Cookie preferences” in the site footer lets you accept, reject and change your choice. You can also configure your browser; blocking all technologies may affect site functions.
9. Cookies and embedded services
We use local storage for preferences and enquiry session information. Google Analytics/Ads and Microsoft Clarity may use cookies or identifiers for measurement, attribution and advertising. In regions configured for prior consent, these tools wait for acceptance; elsewhere they may load under regional settings unless rejected. Rejection is also respected on subsequent visits while the preference is retained.
Spam protection and the map may make their own connections to provide those functions; rejecting analytics does not prevent those connections. Check the relevant notice when opening WhatsApp, social networks or external services. Site preferences cannot erase third-party cookies the browser does not make accessible.
10. Authority and notice changes
If you believe your rights have been infringed, you may contact the Secretaría Anticorrupción y Buen Gobierno, the Mexican federal authority responsible for personal data held by private parties, through its official channels.
We publish changes on this page with their date. Where new purposes or changes require further authorisation, we request it before applying them; updating this notice does not remove your rights or itself amend an earlier authorisation.