RHEO · Privacy
Privacy notice
This notice explains how RHEO (“the Studio”), based in Mexico City, processes personal data from website visitors and people who submit an enquiry.
Last updated: 16 September 20261. Data we collect
When you use the form, we may receive your name, email, phone number, project type and message. Basic technical data such as IP address, browser, device, date and security logs may also be generated. We do not request sensitive data.
2. Purposes and legal bases
We use data to answer enquiries, assess projects, prepare proposals, provide requested communications, secure the site and meet legal duties. For EEA/UK visitors, the bases may include consent, pre-contractual steps, legitimate interests and legal obligations.
3. Providers and transfers
Form submissions are processed by Formspree and the site is hosted by Vercel. They may process data in the United States or elsewhere under contractual and security safeguards. We do not sell personal data or share it for cross-context behavioural advertising.
4. Retention and security
We retain enquiries only as long as needed to respond, manage a relationship, meet obligations or defend legal rights. We use reasonable administrative, technical and organisational safeguards, but no system is completely secure.
5. Rights in Mexico
You may request access, correction, cancellation or objection (ARCO rights), withdraw consent, or limit use or disclosure. Use the contact form with “Privacy” in your message; we may verify your identity.
6. European GDPR rights
If you are in the EEA or UK, you may request access, correction, erasure, restriction, portability or objection, and withdraw consent. You may complain to your supervisory authority. Recognised safeguards are used for international transfers where applicable.
7. United States rights
Where an applicable state law requires it—including California’s CCPA/CPRA—you may have rights to know, access, correct or delete data, limit certain uses, opt out of sale or sharing, and receive equal service. We do not sell personal information. Commercial email, if any, will include an opt-out under CAN-SPAM.
8. Cookies and similar technologies
We use Google Analytics to measure use of the site and improve its content. The service may collect pages visited, interactions, browser and device data, approximate location and other technical identifiers, and may use cookies or similar storage. Google may process this data under its own policies. You can control or delete cookies in your browser settings.
9. Children and third-party links
The site is not directed to children and we do not knowingly collect their data. Third-party links and services are governed by their own notices.
10. Changes and contact
We may update this notice for legal or service changes; the date above identifies the current version. To exercise rights or ask questions, use the website contact form and write “Privacy”.