Privacy Policy
Last updated: April 2026
Data Controller
Hey Next, operated by Ivan AG, with address in Puebla, Puebla, Mexico, is responsible for the collection, use, and protection of your personal data. For questions regarding this privacy notice, contact us at ivan.ag@hey.com.
Information We Collect
When you use our contact form, we collect the information you provide: your name, email address, company name, company size, budget range, preferred language, and message. We also collect anonymized web analytics data (pages visited, referring URLs, device type, geographic region) through Vercel Analytics. We do not use cookies for tracking purposes.
Purpose of Data Collection
We collect your personal data for the following primary purposes, which are necessary to provide our services: (1) Responding to your inquiry and establishing contact; (2) Scheduling consultations and discovery calls; (3) Preparing and delivering project proposals; (4) Communicating about our services during an active engagement. Secondary purposes, which are not necessary but allow us to improve our services: (5) Improving our website experience through anonymized analytics; (6) Sending occasional updates about our services (you may opt out at any time). If you do not wish your data to be used for secondary purposes, please indicate so by emailing ivan.ag@hey.com.
Data Storage & Retention
Your data is processed through secure, encrypted connections. Contact form submissions are delivered via email and retained in our email systems for up to 24 months for business continuity purposes. Anonymized analytics data is retained by Vercel for up to 12 months. We do not maintain a separate database of personal data collected through the contact form.
Third-Party Services & Data Transfers
We transfer your personal data to the following third parties: (1) Resend (email delivery service, servers located in the United States) — solely for delivering email notifications of your inquiry to our team; (2) Vercel (website hosting and analytics, servers in the United States) — for website hosting and anonymized usage analytics. These transfers are necessary for the provision of our services. These third parties are contractually bound to protect your data in accordance with applicable privacy standards. We do not use advertising trackers or sell data to any third party.
Your Rights (ARCO Rights)
Under Mexican law (LFPDPPP), you have the right to Access, Rectify, Cancel, or Oppose (ARCO) the processing of your personal data. To exercise any of these rights, send a request to ivan.ag@hey.com including: (1) your full name and contact information; (2) a clear description of the data you wish to access, rectify, cancel, or oppose; (3) any documentation supporting your request. We will respond within 20 business days of receiving your complete request, as required by law. If your request is granted, changes will take effect within 15 business days.
Consent Revocation
You may revoke your consent for the processing of your personal data at any time by sending an email to ivan.ag@hey.com with the subject line 'Consent Revocation.' We will process your request within 20 business days.
Contact
If you have questions about this privacy policy or how we handle your data, contact us at ivan.ag@hey.com.