Last updated · April 18, 2026

Comprehensive privacy notice

In accordance with articles 15 and 16 of Mexico's Federal Data Protection Law for Private Parties (LFPDPPP) and its Regulations.

Tantia Consulting ("the Controller"), with domicile in Ciudad de México, México, makes this comprehensive privacy notice available to you as the owner and controller responsible for the processing of your personal data.

1. Identity and domicile of the Controller

Tantia Consulting, a business unit operated by Tantia Technologies, with domicile for hearing and receiving notifications in Ciudad de México, México. Email for data protection matters: contacto@tantia.consulting.

2. Personal data we collect

For the purposes described in this notice, the Controller may collect the following personal data:

Identification data: full name, job title, company.
Contact data: email, phone, work address.
Professional data: industry sector, interest in specific ISO standard.
Navigation data: IP address, browser type, pages visited (anonymized in statistics).

We do not collect sensitive personal data (racial origin, health, beliefs, sexual preference, etc.).

3. Primary purposes (necessary)

We will use your personal data for the following necessary purposes, without which we could not provide the requested service:

Responding to requests for information, quotes, or diagnoses.
Delivering digital materials (guides, mini-courses, assessment results).
Providing contracted consulting and training services.
Invoicing and tax compliance under Mexican law.
Preventing fraud and operating the site safely.

4. Secondary purposes (optional)

Additionally, we may use your personal data for the following purposes, which are not necessary but allow us to offer a better experience:

Sending an editorial newsletter with ISO and AI content.
Invitations to our own webinars and events.
Internal studies to improve the website (aggregated metrics).

You can opt out of secondary purposes at any time by emailing contacto@tantia.consulting with "UNSUBSCRIBE" in the subject line.

5. Data transfers

We do not transfer your personal data to third parties for commercial purposes. We only share them with the following processors needed to operate the service, all subject to contractual confidentiality clauses:

Resend, Inc. (USA) — transactional email delivery.
Cloudflare, Inc. (USA) — security, CDN, and anti-bot verification.
Stripe Payments Europe, Ltd. — payment processing (only if you buy a course).
Upstash, Inc. (USA) — form rate-limiting.
Vercel Inc. (USA) — site hosting and aggregated analytics.

These transfers are supported by article 37 section V of the LFPDPPP (necessary for the maintenance or fulfillment of the legal relationship).

6. ARCO rights and withdrawal of consent

You have the right to know what personal data we hold about you, what we use it for, and the conditions of use (Access). You can request correction of inaccurate or incomplete information (Rectification), deletion from our records (Cancellation), or object to a specific use (Opposition).

How to exercise your ARCO rights

Send an email to contacto@tantia.consulting with the subject "ARCO RIGHTS" indicating: (a) full name and means to receive a reply, (b) copy of official ID, (c) clear description of the right you wish to exercise, (d) affected data. We respond within a maximum of 20 business days under article 32 of the LFPDPPP.

7. Cookies and similar technologies

The site uses strictly necessary technical cookies and, with your explicit consent, aggregated analytics cookies. For full detail see our cookie policy. You can configure your browser to block cookies, though some features may not work properly.

8. Changes to the privacy notice

We reserve the right to modify this notice to reflect regulatory, operational, or technological changes. Changes are published on this page and announced for 30 days in the site banner. The last update date appears at the top.

9. Recourse before INAI

If you believe your right to personal data protection has been violated, you can file a complaint before the National Institute of Transparency, Access to Information and Personal Data Protection (INAI), home.inai.org.mx.

10. Contact of the Controller

For any matter related to the processing of your personal data, write to contacto@tantia.consulting.