Privacy Policy
This Privacy Policy explains what personal information Directorio Rapido ("we", "us") collects when you use the directory, what we do with it, and the rights you have over your data under Mexican law.
1. Who is responsible for your data
Directorio Rapido is the responsable (data controller) for the processing of personal data described here. Questions or requests about your personal data can be sent to gustavo@pragmaticode.com.
2. What we collect
Account information
When you register we collect your name, username, email address, and password (stored hashed, never in plain text). If you register as a business owner you may also provide a business name, website, phone number, and a short biography.
Business listing content
When you claim and manage a business listing, we store the information you provide about it — name, category, description, address and location, telephone, website, hours, amenities, price range, and similar details. Once published, this information is public and visible to any visitor.
Reviews and ratings
When you post a review we store your star rating, your written comment, and the display name associated with your account. Reviews are public and attributed to your display name. Business owners may post one public response to each review of their business.
Messages
Messages you send to a business through the directory are stored on our servers so they can be re-read, marked as read, and reviewed by our moderation team if a dispute arises. They are private — only you, the business, and authorized moderators can see them.
Reports
When you report a review or a listing we store the reason, your optional comment, and a one-way hashed reference of your IP address (never the raw IP). The hash lets us stop the same visitor from filing duplicate reports about the same item without us ever learning the underlying IP.
Technical data
Like any website, our hosting infrastructure receives standard request data — IP address, user agent, timestamps, requested URLs — for security and operational reasons (rate limiting, debugging, abuse detection). These logs are retained briefly and not used for marketing.
Analytics
We do not currently build behavioural profiles or sell analytics to third parties. We plan to add a third-party analytics service (such as Google Analytics) to understand aggregate, anonymised usage of the directory. When we do, it will be disclosed here and in our Cookie Policy, and the cookies it sets will be listed in the cookie inventory.
3. Why we use your data (purposes)
Primary (necessary for the service):
- Create and manage your account; authenticate you on sign-in.
- Display business listings publicly so visitors can find them.
- Let owners claim and manage their business listings.
- Publish reviews and ratings, and route messages between visitors and businesses.
- Send transactional emails (email verification, new messages, claim approvals, new reviews, and administrative notices).
- Moderate the directory, prevent abuse, and respond to reports.
Secondary (improvement and statistics):
- Understand aggregate, anonymised usage so we can improve the directory (once analytics is enabled).
4. Legal basis
By creating an account and accepting these Terms you give us your express consent (consentimiento) to process your personal data for the primary purposes listed above. You may revoke that consent at any time by closing your account.
5. Who can see your data
- Visitors see what you publish: business listing content, reviews and ratings attributed to your display name, and your public profile.
- Directorio Rapido moderators see accounts, listings, reviews, and reports for safety, fraud prevention, and dispute resolution.
- Service providers we rely on to operate the directory (hosting, email delivery) process data only as instructed and bound by their own confidentiality and data-protection obligations.
- Authorities — we may share data with Mexican authorities when legally required (court order, official request, criminal investigation).
We do NOT sell your personal data to advertisers or data brokers.
6. International transfers
Some service providers we use may be located outside Mexico (for example, email delivery, hosting, and analytics infrastructure). Where this is the case, those providers are bound by contractual safeguards that require them to protect your data to a standard comparable to Mexican law.
7. Retention
- Account information is kept while your account is active.
- Business listings stay published until removed; they may also be archived for moderation history.
- Reviews and messages are kept for the lifetime of the listing or thread.
- Server access logs are retained briefly (typically days to weeks) for operational and security purposes.
- When you close your account, we delete or anonymize your personal data unless we are legally required to keep specific records (e.g. for tax, fraud, or moderation history).
8. Security
We protect your account with hashed passwords, HTTPS transport, CSRF nonces on every form, rate limiting, and standard hardening on the underlying platform. No system is perfectly secure; please choose a strong unique password and notify us immediately if you suspect your account has been compromised.
9. Your ARCO rights
Under Mexican law (LFPDPPP) you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct data that is inaccurate or incomplete.
- Cancellation — ask us to delete your data when it is no longer needed.
- Opposition — object to specific processing of your data.
To exercise any of these rights, write to gustavo@pragmaticode.com with your username and a description of your request. We respond within 20 business days, in line with Mexican law.
10. Cookies
We use a small number of cookies to keep you signed in and to prevent abuse. Full details are in our Cookie Policy.
11. Children
Directorio Rapido is not intended for users under 18. If you are a parent or guardian and believe your child has created an account, contact us and we will close it.
12. Updates
We may revise this Privacy Policy from time to time. Material changes will be reflected in a new effective date at the top of this page and recorded in the Revision history below. Where the change is significant, we will also notify members by email or an on-site notice.
13. Contact
Questions about your data, this Policy, or to exercise your ARCO rights: gustavo@pragmaticode.com.
Revision history
This is the first published version of our Privacy Policy. Future revisions will be listed here with their effective dates and a short summary of what changed.