Privacy Notice

Version: v1.0 · Effective date: 2026-10-08

NATIVE — Photo & Film is responsible for processing your personal data in accordance with this Privacy Notice.

1. Data controller

Controller: NATIVE — Photo & Film.

Contact for privacy matters and ARCO rights: privacidad@nativephoto.mx.

2. Personal data we collect

We collect the following data, which you provide directly or which is generated when you use the site:

  • Identification and contact data: name, email address and, if you provide it, WhatsApp or phone number.
  • Event data: event type, date, city, moment, coverage, hours and extras chosen.
  • Booking and payment data: amounts, payment status and transaction references. Your card details are processed by Conekta; NATIVE does not receive or store them.
  • Evidence of acceptance of the Terms and Conditions: version accepted, date and time, browser used and IP address.
  • Data about where your visit came from: campaign parameters (utm_*), advertising-campaign click identifiers (gclid, fbclid), the page through which you entered the site and, where applicable, the external site you came from.

3. Sensitive data

We do not request sensitive personal data.

4. Purposes

We use your data for the following purposes, which are necessary for the service you request:

  • Preparing and sending your quote.
  • Contacting you about your event.
  • Managing your booking and payments.
  • Providing and delivering the service hired.
  • Keeping evidence of acceptance of the Terms and Conditions.

4.1 Origin of your requests

We use the data about where your visit came from to identify the origin of commercial requests and to measure the performance of our campaigns and channels.

This data does not determine or change the price or the conditions of your quote.

5. Marketing and use of images

We do not use your data to send you advertising.

Using the photographs or videos of your event for portfolio, advertising or marketing purposes requires your specific and separate consent, which is optional.

6. Providers that process data on our behalf

To operate the service we use the following technology providers, which process data on NATIVE's behalf:

  • Supabase: database and data storage.
  • Vercel: website hosting.
  • Conekta: card payment processing.
  • Resend: sending the emails about your quote and booking.

7. Processing of data outside Mexico

Some of our technology providers may process, store or transfer personal data outside Mexico when this is necessary for operating the platform, communications, payment processing, security and providing the service.

NATIVE does not sell your personal data.

8. Cookies

We use technical cookies needed for the site to work: one to remember your language and a temporary one that lets you return to your booking right after confirming it.

We also use a first-party attribution cookie that keeps where your first visit came from (the origin data described in section 2) for up to 30 days, to associate a later request or quote with that origin. This cookie, by itself, is not used for advertising based on your behaviour or for profiling.

We do not use third-party analytics or advertising cookies.

9. ARCO rights and withdrawal of consent

You may exercise your rights of access, rectification, cancellation and opposition (ARCO), and withdraw your consent, by writing to privacidad@nativephoto.mx.

9.1 Procedure and deadlines

To exercise your ARCO rights or withdraw your consent, send your request to privacidad@nativephoto.mx. We will handle your request within the deadlines set by the applicable personal data protection law. Your request must include:

  • Your name and a way to send you the response.
  • Documents proving your identity or, if someone acts on your behalf, documents proving that representation.
  • A clear description of the personal data and the right you wish to exercise.
  • Any information that helps locate your data.
  • If you request a rectification, the corrections you are asking for and, where applicable, supporting documents.

10. Data retention

We keep your personal data only for as long as necessary to provide the service, deliver the material hired, meet contractual, tax and legal obligations, and handle possible claims or disputes.

Once those purposes are fulfilled and mandatory retention periods have expired, the data is deleted, anonymized or blocked, as appropriate.

11. Changes to this Notice

Any change to this Privacy Notice will be published on this page, stating its version.

Read the Terms and Conditions

12. Language

This Notice is published in Spanish and English. In case of any discrepancy between the two versions, the Spanish version prevails.