Privacy Notice

Effective date: September 7, 2026

1. Responsible party

Ruzaani is the brand under which Fernando Alberto Ocampo Romay provides marketing systems and automation services and operates the website available at ruzaani.com.

For purposes of applicable data-protection law, Fernando Alberto Ocampo Romay is the person responsible for the processing of personal data described in this Privacy Notice. His domicile is Hidalgo 914, Centro, Coatzacoalcos, Veracruz 96400, Mexico.

Privacy inquiries and requests concerning personal data may be addressed to [email protected].

2. Scope

This Privacy Notice applies to personal data processed through the Ruzaani website, contact and inquiry functions, business prospecting, marketing communications, communications with prospects and clients, and related professional activities.

Where Ruzaani enters into a consulting engagement with a client, the applicable statement of work, engagement agreement, confidentiality agreement, or other written agreement may establish additional rules concerning information processed in connection with that engagement. To the extent such an agreement establishes specific obligations for the engagement, those obligations apply together with this Privacy Notice in relation to the matters they expressly govern, without reducing mandatory data-protection rights. Where Ruzaani processes personal data on a client's behalf, it acts under the client's instructions and applicable processing terms; the client's own notice governs its relationship with the individuals concerned.

3. Personal data processed by Ruzaani

Ordinary use of the website may generate technical and navigation information, including a random browser or session identifier, IP address, approximate location derived from network information, language, browser and device characteristics, requested pages, timestamps, security events, campaign or referral information, and privacy or tracking preferences. Identifiers and related event data are not treated as anonymous merely because they do not include a name.

When a person asks Ruzaani to make contact, Ruzaani processes the person's name, work email address, organization, description of the situation and acknowledgment of the Privacy Notice. Role, preferred contact method and timing may be supplied voluntarily, along with subsequent correspondence. Requesting a response does not constitute consent to receive a newsletter or unrelated marketing communications.

For business prospecting, Ruzaani may obtain professional contact details, role, organization and relevant business context from professional profiles, company websites, referrals and previous professional interactions. These records may be managed in HubSpot. A person's appearance in a professional directory or on LinkedIn is not treated as permission for every type of use or communication.

During an engagement, Ruzaani may process professional contact details, project communications, invoicing and transaction information, and information supplied by the client or its authorized representatives where necessary to perform the agreed work. CRM, tracking and automation projects may involve access to client-controlled systems containing information about their own prospects, customers or staff. The applicable instructions and engagement documents govern that access.

Ruzaani does not intentionally solicit sensitive personal data through its general website. Visitors, prospects and clients should not provide passwords, secrets, unnecessary sensitive personal information, or confidential third-party material they lack authority to disclose. Where processing sensitive, financial or patrimonial personal data requires specific consent under applicable law, Ruzaani will obtain it before that processing.

4. Purposes of processing

Ruzaani uses personal data for purposes directly related to the interaction or engagement: operating and securing the website; receiving and responding to inquiries; arranging discussions; preparing proposals; performing agreed services; managing professional correspondence, client relationships, invoicing and payments; maintaining records needed for legal compliance or the establishment or defense of legal rights; and handling privacy and accessibility requests.

Mailbux supports business email and inquiry correspondence. HubSpot supports CRM records, prospect and client follow-up, and the organization of commercial activity. An inquiry may become part of the relevant business-contact record without enrolling the person in a marketing subscription.

Separate, optional purposes include website analytics, advertising measurement and audience functions, subscription-based insights and updates, and appropriate business-development communications. Refusing these optional purposes does not prevent a person from viewing ordinary website content, making an inquiry or receiving agreed services.

Newsletters and recurring promotional updates require a separate affirmative choice. For researched business outreach, Ruzaani considers the source, professional relevance, applicable privacy and communication rules, and any prior objection before making contact. Consent is obtained where required; this Notice does not create blanket permission to contact everyone whose details are available online. A person may decline further business-development communications by replying to the message or contacting [email protected].

Optional analytics and advertising operate subject to the consent policy described below and in the Cookie Notice. Ruzaani does not use confidential client materials or contact-form narratives as analytics content, research datasets or marketing lists merely because it received them for an inquiry or engagement.

5. Limitation and revocation of consent

A person may at any time withdraw a marketing authorization, disable an optional communication preference, or request that Ruzaani limit a use or disclosure of personal data where applicable. Withdrawal of consent does not have retroactive effect and does not affect processing already lawfully carried out before the withdrawal.

Marketing communications provide a means to discontinue future marketing. Other requests to limit use or disclosure, or to revoke consent where processing depends upon it, may be submitted to [email protected]. The request must identify the person concerned and describe with reasonable clarity the processing or communication that the person wishes to limit or discontinue.

Declining marketing does not prevent necessary communications concerning an inquiry or engagement. Ruzaani may retain a minimal suppression record to respect the refusal. A request to delete a business record is considered separately from any duty to retain information for legal or contractual purposes.

6. Analytics and advertising technologies

Ruzaani uses Google Analytics for website measurement, the LinkedIn Insight Tag for LinkedIn-related measurement and audience functions, and the Meta Pixel for Meta-related measurement and audience functions. These technologies are enabled as part of the website's launch configuration.

Ruzaani's policy requires optional analytics and advertising technologies to remain inactive for a visitor until that visitor has given the corresponding consent. Consent to analytics or advertising is separate from acknowledgment of this Privacy Notice on the contact form. A person may withdraw consent without losing access to ordinary website content or the ability to contact Ruzaani; the Cookie Notice explains available controls and the contact route for withdrawal.

Ruzaani does not intentionally supply email addresses, CRM records, account identifiers, contact-form narratives, client materials or prospect communications to those technologies. Automatic matching, contact-list uploads or other features that would disclose such information are not authorized by this Notice. Technical identifiers, page visits and conversion events may nevertheless allow Google, LinkedIn or Meta to associate activity with other information they hold, subject to their roles and privacy practices.

Google Ads conversion tracking is not included among the website technologies described in this Notice. The use of Google Analytics does not itself mean that a Google Ads conversion tag is deployed.

7. Service providers and international processing

Ruzaani uses Google Cloud for hosting, Cloudflare for network delivery and security, Mailbux for business email, HubSpot for CRM, and OpenRouter as its main AI provider, together with approved routed model providers where AI is used. Google Fonts supplies website fonts. These providers perform different functions and receive the information needed for the relevant service; using a CRM or email provider does not authorize it to receive every client-system record.

Information may be processed outside Mexico in the locations used by these providers and their authorized service providers. Applicable contractual and data-protection requirements govern processing on Ruzaani's behalf. Provider locations and roles can differ by service and configuration; Ruzaani does not represent that all information remains in one country.

Google, LinkedIn and Meta also process technical and interaction information through the analytics and advertising technologies described above. Their processing may include purposes for which they have their own responsibilities. These technologies must follow Ruzaani's optional-tracking consent policy and any applicable transfer requirements. Where a transfer requires consent and no exception applies, the required consent must be obtained before the transfer; merely publishing this Notice is not consent.

Ruzaani does not sell its contact lists or provide confidential client information, CRM records or prospect communications to third parties for their own marketing or commercial research. This restriction does not mean that consented advertising measurement is anonymous or that the relevant providers process no personal data.

Personal data may also be disclosed when required by applicable law, a valid order of a competent authority, or where legally necessary for the recognition, exercise or defense of a right.

Further information is available in the providers' notices: Mailbux, HubSpot, Google, Cloudflare, OpenRouter, LinkedIn and Meta. These notices supplement, rather than replace, Ruzaani's responsibilities.

8. Artificial intelligence processing

Ruzaani may use AI to assist analysis, research, drafting and other professional tasks. The website contact form does not itself send its submissions to an AI model. Any later AI-assisted handling of inquiry or engagement information must have a relevant purpose and comply with confidentiality, data-protection and client instructions.

OpenRouter is Ruzaani's main AI provider. Ruzaani requires routes that exclude use of submitted client or prospect content for model training and satisfy its Zero Data Retention policy. If no acceptable route is available, the information must not be submitted through a less protective route merely to complete the task. These requirements concern provider handling of submitted content; they do not require deletion of an authorized final work product from Ruzaani's own engagement records.

Only information needed for the task may be submitted. AI does not replace accountable human review. The AI Notice explains the restrictions, provider-policy distinctions and review responsibilities.

9. Retention and deletion

Ruzaani's retention policy limits personal data to the period needed for its purpose, subject to legally necessary blocking, preservation, accounting obligations or the establishment, exercise or defense of legal rights.

Where a contact or prospect relationship does not result in an engagement, the ordinary business-contact retention period is no more than twenty-four months after the last substantive communication. If an engagement begins, relevant information becomes part of the engagement record and is retained for the applicable contractual and legal period. This policy applies across relevant email and CRM records; it is not a representation that the website automatically deletes messages from every provider.

Subscription-based marketing authorization expires after twelve months unless renewed. Ruzaani may retain the minimum record needed to document withdrawal or expiry and prevent unwanted communications. Necessary engagement correspondence is separate from marketing authorization.

The website's server-side form and security sessions expire twenty-four hours after creation. This period differs from the browser's handling of its session cookie. Ordinary operational and security logs follow a thirty-day retention policy; particular records may be preserved longer where necessary for an active investigation, legal obligation or proceeding.

Analytics and advertising records have separate provider and configuration-dependent retention periods. Cookie expiry is not equivalent to deletion of previously collected event data. Ruzaani does not promise a fixed retention interval for all provider records.

When information is no longer needed, it is deleted or irreversibly disassociated as appropriate. Restricted backups and records under a lawful preservation requirement may remain for their applicable cycle or obligation and must not be reused for unrelated marketing. Requests for earlier deletion are considered under the rights procedure below.

10. Security

Ruzaani maintains administrative, organizational, and technical safeguards appropriate to the nature of the information processed and the risks associated with the relevant system. These safeguards include controls relating to encrypted network transport, secure sessions, access restrictions, request validation, protection against unauthorized requests, security headers, abuse controls, credential management, and restricted infrastructure access.

No system connected to the Internet can guarantee absolute security. Ruzaani therefore treats security as an ongoing operational responsibility and adjusts its controls as systems, risks, and processing activities change.

If a security incident affecting personal data creates a notification obligation under applicable law, Ruzaani will provide the legally required notice to the affected persons.

11. Rights of access, rectification, cancellation, and opposition

You may request confirmation of whether Ruzaani holds personal data about you and obtain information about how that data is processed. You may also request the correction of inaccurate or incomplete data, the deletion or cancellation of personal data where applicable, or object to a particular use of your data where the law gives you that right.

Requests may be submitted to [email protected]. Your request should include your name, a means for receiving the response, the right you wish to exercise, the action you request and enough information to help Ruzaani locate the relevant data. For an access request, you do not need to identify every record in advance.

Ruzaani may request reasonable evidence of your identity and, where applicable, the identity and authority of your representative. It will request only information reasonably necessary to prevent disclosure, alteration or deletion of another person’s data.

Ruzaani will respond within the period required by the law applicable to your request. If the request is granted, Ruzaani will complete the requested action within the legally required period. Where an extension is permitted, Ruzaani will explain the reason and the extended deadline.

These procedures do not limit any other right or remedy available under applicable law.

12. Information concerning third parties

Any person who provides Ruzaani with personal, confidential, or proprietary information concerning another person or organization is responsible for having the right or authority necessary to provide that information.

The website is designed for professional inquiries. Visitors should avoid including unnecessary personal information about employees, customers, suppliers, or other persons. Where third-party information is genuinely necessary for a consulting engagement, its processing may also be governed by the terms of the applicable engagement.

13. Minors

Ruzaani's services and business communications are directed to adults acting in a professional or business capacity. The website does not offer assessment accounts or other child-directed services.

If Ruzaani becomes aware that it has received unnecessary personal data concerning a minor, it will take reasonable steps to delete it unless applicable law requires temporary preservation. This is not a representation that the website verifies every visitor's age.

14. Changes to this Privacy Notice

The Privacy Notice published at ruzaani.com/privacy/ is the current version and becomes effective on the date stated at the beginning of the notice. Changes to this Notice are communicated by publishing the revised version at that location together with its new effective date.

Ruzaani does not ordinarily send individual notices of revisions. If a change introduces a new purpose for processing existing personal data and applicable law requires renewed consent for that purpose, Ruzaani will obtain the required consent before applying the new purpose to the affected data.

Historical versions may be retained internally where necessary to establish the terms applicable to processing, consent, or acknowledgment at a particular time.

15. Language

Ruzaani may publish this Privacy Notice in more than one language. Where legally permissible, the English version governs the interpretation of this Privacy Notice in the event of an inconsistency between language versions, without limiting any mandatory rights that apply to the person concerned under applicable law.

16. Contact

Questions concerning this Privacy Notice, requests to exercise privacy rights, requests to limit the use or disclosure of personal data, and requests to revoke consent may be addressed to:

Ruzaani Operated by Fernando Alberto Ocampo Romay Hidalgo 914, Centro Coatzacoalcos, Veracruz 96400 Mexico [email protected]