Last updated: October 27, 2026

1. Identity and address of the data controller

Converforma, S.A. de C.V. ("Converforma"), with address at Escobedo 840 A, Col. Los Nogales, C.P. 64260, Monterrey, Nuevo León, Mexico, is responsible for the processing of the personal data you provide through the website https://converforma.mx (in its Spanish and English versions), by email, by phone, or in the course of a business relationship, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (the "Law") and other applicable provisions.

For any matter related to your personal data, please contact our Personal Data Department at contacto@converforma.mx or at +52 81 8376 3730, Monday to Friday, 9:00 a.m. to 6:00 p.m. (Central Mexico time).

2. Personal data we collect

We collect personal data directly (when you fill out a form, write to us, or call us), automatically (when you browse the site), and indirectly, from publicly available sources and B2B business information providers (such as Apollo.io). When we obtain your data indirectly, we will make this Notice available to you at our first contact.

Category	Data	How we obtain it
Identification and contact	Name, email address, phone number	Contact and quote forms, guide download, email, phone, business information providers
Professional and company	Company or legal name, job title, location (city, state, or country)	Quote form, business information providers
Business information	Product of interest, industry, estimated volume, message, and any files or specifications you share	Quote form and communications
Browsing data	IP address, browser and device type, operating system, pages visited, date and time, referring site	Cookies and similar technologies (section 7)

We do not collect sensitive personal data or financial or patrimonial data through the website. Please do not include this type of data in messages or files you send us.

If you provide us with data about other people (for example, a coworker as an alternate contact), you confirm that you have their authorization and have informed them of this Notice.

3. Purposes of processing

Primary purposes, necessary to handle your request and the business relationship:

Responding to contact requests, technical information, samples, and quotes.
Assessing the technical feasibility of your packaging project and preparing proposals.
Following up on your request and, where applicable, entering into and performing contracts, orders, deliveries, invoicing, and collections.
Handling complaints, quality claims, and warranties.
Complying with legal, tax, and regulatory obligations and responding to requests from authorities.
Demonstrating compliance with our management systems and certifications (ISO 9001:2015, FSSC 22000, and SMETA) to auditors, limiting access to what is strictly necessary.
Keeping the website secure and preventing fraud and automated submissions (spam).

Secondary purposes, not necessary for the business relationship but which help us serve you better:

Sending you the Thermoforming Guide and other downloadable materials you request.
Sending you newsletters, news about products, materials, and events, and promotional communications.
Contacting you for business development purposes when your professional data was obtained from publicly available sources or business information providers.
Conducting satisfaction surveys.
Producing statistics and analysis on website use to improve its content and performance.

You may refuse the use of your data for secondary purposes as described in section 5. Your refusal will not affect how we handle your request or the business relationship.

4. Processors and transfers

Processors. To operate the site and handle your request, we rely on providers that process personal data on Converforma's behalf, under our instructions and subject to confidentiality obligations. These providers do not use your data for their own purposes. Some of them host information on servers located outside Mexico (mainly in the United States and the European Union).

Provider	Service	Data processed
Elementor (hosting on Google Cloud)	Website hosting	All data submitted through the site
Google LLC	Google Analytics and reCAPTCHA	Browsing data
Brevo	Email delivery, downloadable guide, and newsletter	Name and email address
Apollo.io	B2B prospecting and business information platform	Contact and professional data
Airtable and n8n	Recording and tracking business requests	Contact, company, and business data
Microsoft (Microsoft 365)	Corporate email	Communications and contact data

Transfers. Converforma may transfer your personal data without your consent in the cases provided for in Article 36 of the Law, including:

To competent authorities, when required by law or in the exercise of their powers.
When necessary to establish, exercise, or defend a right in legal proceedings, or to maintain or perform our legal relationship with you.

Any access granted to certification auditors (ISO 9001:2015, FSSC 22000, and SMETA) will be limited to what is strictly necessary and subject to confidentiality obligations.

Converforma does not sell or rent your personal data.

5. How to limit the use or disclosure of your data

You may refuse secondary purposes or limit the use of your data at any time through any of these means:

When signing up: by leaving the marketing communications box unchecked on our forms.
In every email: through the "Unsubscribe" link at the bottom of our newsletters and promotional communications.
By email: by writing to contacto@converforma.mx with the subject "Limit use of data" and stating the purposes you object to.
Cookies: by adjusting your preferences in the site's "Manage consent" panel or in your browser settings (section 7).

If you are in Mexico, you may also register with the Public Registry to Avoid Advertising (REPEP) of the Federal Consumer Protection Agency (PROFECO).

6. ARCO rights and withdrawal of consent

You have the right to Access your personal data, Rectify it if it is inaccurate or incomplete, Cancel it when you consider it is not required for the purposes of this Notice, and Object to its processing for specific purposes (ARCO rights). You may also withdraw the consent you have given us, except where the law or an ongoing obligation prevents us from ceasing to process your data.

How to submit your request. Send an email to contacto@converforma.mx with the subject "ARCO Request" or "Withdrawal of consent," including:

Your name and a mailing address or email address to receive our response.
A copy of a valid official ID or, if acting through a representative, the document proving their authority and the IDs of both.
A clear and precise description of the data to which your request refers (except for access requests).
The right you wish to exercise or what you are requesting.
Any other information or document that helps locate your data.

For rectification requests, please state the changes and attach supporting documentation.

Timeframes. We will respond within a maximum of 20 calendar days from receipt of your request. If your request is granted, it will be carried out within the 15 calendar days following our response. These periods may be extended once for an equal period when justified, in which case we will notify you.

The response will be sent through the means you indicate. Exercising ARCO rights is free of charge; only justified shipping or reproduction costs may apply.

If you believe your request was not handled in accordance with the Law, you may file a complaint with Mexico's Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).

7. Cookies and tracking technologies

Our site uses cookies and similar technologies, which are small files stored in your browser. We classify them as follows:

Type	Purpose	Requires your consent?
Necessary	Site operation, security, language selection, and form protection (Google reCAPTCHA)	No; they are essential
Preferences	Remembering your settings, such as language	Yes
Statistics	Measuring visits and site use (Google Analytics)	Yes
Marketing	Measuring the results of campaigns and emails	Yes

The first time you visit the site, a banner lets you accept, reject, or configure non-necessary cookies. You can change your choice at any time through the "Manage consent" link at the bottom of the site, or disable cookies in your browser settings; if you do, some features may not be available.

The data obtained through these technologies are: IP address, browser and device type, operating system, pages visited, browsing time, and referring site.

8. Security, retention, and minors

Security. We maintain administrative, technical, and physical security measures to protect your data against damage, loss, alteration, destruction, and unauthorized use, access, or disclosure. Access is restricted to authorized, trained personnel bound by confidentiality. In the event of a security breach that significantly affects your rights, we will inform you without delay so you can take action.

Retention. We keep your data only for as long as necessary for the purposes of this Notice and the periods required by law:

Type of data subject	Period
Prospects who requested information or a quote	12 months from the last contact
Customers and suppliers	During the business relationship and up to 5 years afterward, for tax and commercial obligations
Newsletter or guide subscribers	Until they unsubscribe
Browsing data	Up to 14 months

At the end of these periods, data is blocked and then deleted or anonymized.

Minors. Our site and services are intended for businesses and professionals. We do not knowingly collect data from persons under 18; if we find we have received such data, we will delete it.

9. Changes to this Notice, consent, and authority

Changes. This Notice may be updated due to legal changes or changes in our services or privacy practices. We will publish the current version at https://converforma.mx/en/about-us/privacy-policy/ with its update date. If a change involves new purposes that require your consent or new transfers, we will also notify you by email when we have your address.

Consent. For primary purposes, you give your consent tacitly by not objecting after this Notice is made available to you. When submitting a form, you also confirm that you have read it by checking the corresponding box. For marketing communications, we ask for your separate consent, which you may withdraw at any time (section 5).

Authority. If you believe your right to personal data protection has been violated, you may file a complaint with Mexico's Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).

Language. This Notice is published in Spanish and English. In the event of any discrepancy, the Spanish version prevails.

Privacy Policy