1. Identity and address of the controller
[Legal name of the controller] (hereinafter, "Youleader"), with address at [full registered address, city, state, postal code, country], is responsible for processing the personal data collected through this site, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the Privacy Notice Guidelines published by INAI.
You can reach us about this notice at [privacy contact email].
2. Personal data we collect
We do not collect sensitive personal data on this site (racial or ethnic origin, health status, genetic information, religious or philosophical beliefs, union membership, political opinions, or sexual orientation). The data we do collect is:
| Where | What we collect |
|---|---|
| Demo request form | Name, corporate email, company, your role, and the number of leaders you're looking to develop. A hidden anti-spam field that people never see or fill in. |
| Free leadership diagnostic | Your answers about your organization and, only if you choose to invite them for observation activities, the email of up to 5 colleagues. See the note in section 5 on how this information is processed. |
| Technical browsing data | Minimal access data logged by our hosting provider (IP address, browser type) for security purposes. We don't use analytics or advertising tools on this site. |
3. Purposes of processing
We use this data only to:
- Contact you about your demo request and follow up commercially.
- Generate and deliver your leadership diagnostic, and — if you invited colleagues — coordinate the observation activities you authorized.
- Maintain and secure the site technically.
- Comply with legal obligations.
We don't use your data to send you third-party advertising or process it for purposes other than those described here. The demo form itself already says so: "We use your data only to contact you about Youleader. No commitment."
4. Legal basis and consent
Processing is based on your consent, given when you submit the demo form or use the diagnostic. Your consent is free, informed, specific, and unambiguous, and you can withdraw it at any time following the procedure in section 6.
5. Data transfers
We may transfer or grant access to your data to the following third parties, exclusively for the purposes stated above:
- The Youleader platform (platform.youleader.com): if you use the diagnostic, your answers are processed there. Its own privacy notice governs the details of that processing.
- Commercial-lead management tool (CRM), to follow up on your demo request.
- Hosting provider (Cloudflare), under a data-processing agreement.
- Competent authorities, when required by a judicial or administrative order.
We do not sell or transfer your data to third parties for commercial purposes. Some providers may be located outside Mexico; when that's the case, we require them to meet an equivalent level of protection through contractual clauses.
6. ARCO rights and withdrawal of consent
As the data subject, you have the right to:
| Right | What it means |
|---|---|
| Access | Know what data of yours we hold, what we use it for, and the conditions of processing. |
| Rectification | Request correction of inaccurate or incomplete data. |
| Cancellation | Request deletion of your data when you believe it's not being used in accordance with the law or this notice. |
| Objection | Object to the use of your data for specific purposes. |
You can also withdraw your consent at any time and limit the use or disclosure of your data:
- Send an email to [privacy contact email] with the subject "ARCO rights" or "Withdrawal of consent."
- Include: your full name, a means to communicate the response to you, a copy of official identification, and a clear description of the data and the right you wish to exercise.
- If acting through a representative, provide proof of representation with a simple power of attorney signed before two witnesses.
We will respond within a maximum of 20 business days from receiving the request, and act on it within the following 15 business days if it applies. Exercising these rights is free; we may only charge justified shipping or reproduction costs.
If you believe your right to personal data protection has been violated, you can contact Mexico's National Institute for Transparency, Access to Information, and Personal Data Protection (INAI): home.inai.org.mx.
7. Cookies and tracking technologies
This site doesn't set its own cookies or use analytics or advertising-profiling tools. It stores a single preference in your browser's local storage (localStorage): the light or dark theme you chose. That data never leaves your browser or reaches our servers.
Our hosting provider (Cloudflare) may use its own technical cookies for security purposes (for example, to distinguish automated traffic). We don't control these directly; you can learn about their scope in Cloudflare's privacy policy.
The free diagnostic and the platform may use local storage for functional purposes (keeping your session active, remembering your progress); that's described in the platform's privacy notice.
8. Security measures
We implement reasonable administrative, technical, and physical measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing. Among others: encryption in transit (HTTPS/TLS) across the whole site, hosting with a provider that has certified security controls, and restricted access to the data submitted through the demo form.
9. Retention periods
We keep demo-form data for as long as the commercial process lasts and for up to [N] months afterward, to follow up or resume the conversation. After that period, it is deleted or irreversibly anonymized, except for data we must retain due to legal obligation or to defend our rights. If you used the diagnostic, retention of your answers is governed by the platform's retention policy. If you withdraw your consent, we block your data and proceed to delete it following the procedure in section 6.
10. Minors
This site is aimed at adults, in their professional capacity. We do not intentionally collect data from minors. If we identify that a minor's data has been collected, we will delete it.
11. Changes to this notice
This notice may be updated to reflect legal changes, internal practices, or new site services. We will publish the current version here, with its update date. If the changes affect purposes other than those that motivated your consent, we will request new consent before applying them.
12. Contact for the privacy officer
| Officer | [Name of the privacy officer / Department] |
|---|---|
| [privacy contact email] | |
| Address | [Address for notices] |
| Phone | [Contact phone number] |
| Hours | Monday to Friday, 9:00 a.m. to 6:00 p.m., Mexico City time. |