Privacy Policy

Serxion Interactive places special attention on the privacy and protection of personal data, following the principles of transparency, purpose limitation, and data minimization. This Privacy Policy explains how we handle your personal data.

Last updated: August 2026.

1. General Information

This Privacy Policy ("Policy") explains how Serxion Interactive ("Serxion", "we", or "our") collects, uses, and discloses information, depending on the processing purposes described in this Policy.

The Policy describes the principles of collection, use, or any other processing of information we use on the website operated by Serxion, including https://serxion.com, its subdomains, and any associated application ("Site"), as well as other information about personal data processed during Serxion's activity and the applicable policies and principles to ensure its protection.

By using the Site and/or providing us with your personal data, you agree that the information you provide will be processed in accordance with this Policy.

2. Data Controller

Serxion Interactive, located at Av. Ruiz 1744 Int 6B, 22820 Ensenada, B.C., Mexico, is the data controller in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and other applicable provisions.

For any questions regarding this Policy or the processing of your data, you may contact us as described in Section 12 of this document.

Personal data is any information concerning an identified or identifiable individual. Serxion respects the privacy of data subjects and guarantees the highest possible protection. The purpose of this Policy is to inform you about what data we collect, how we use it, with whom we may share it, what rights you have regarding its use, and how you may review or modify it.

This Policy applies only to processing activities in which Serxion acts as a controller. It does not apply to data processing that Serxion performs as a processor on behalf of its clients, which is governed by confidentiality agreements and each client's documented instructions.

3. Legal Bases for Processing and Purposes

3.1. Legal Bases

Serxion only processes personal data when strictly necessary. The processing purposes and their legal bases are as follows:

• For the performance of a contract or pre-contractual relationship with you or the company you represent.
• For compliance with legal obligations applicable to Serxion.
• With your explicit consent to process your data for one or more specific purposes, as provided by the LFPDPPP.
• When there is a legitimate purpose, provided that such use is fair and lawful and does not affect your rights.

When processing is based on your consent, providing your data is optional. However, lack of consent may prevent us from responding to your request or quote.

As a data controller, Serxion follows these principles:

• Purpose limitation.
• Data relevance and minimization.
• Accuracy and data currency.
• Storage limitation to what is necessary for the purposes.
• Integrity and confidentiality, ensuring an adequate level of security.

3.2. Processing Purposes

Serxion processes your personal data for the following purposes:

• Handling information requests about our SAP, Oracle, Cloud, cybersecurity, and software engineering consulting services, as well as quotes.
• Recruitment process, to identify, evaluate, and select candidates for open positions, with your consent to retain your information in our candidate pool.
• Business and employment relationship, for work planning and organization, protection of the controller's assets, and exercise of rights related to the employment or business relationship.
• Marketing activities, to inform you about our services, events, or publications, when you have given explicit consent.
• Compliance with legal obligations and contractual or pre-contractual obligations.
• Establishment, exercise, or defense of rights in administrative, regulatory, or judicial proceedings.
• Other purposes related to the support and maintenance of our business activities.

3.3. Types of Data We May Collect

• Identification data (name, surnames, company, position, etc.).
• Contact data (email, phone, etc.).
• Information about your candidacy for our job openings (resume, education, work experience, recommendations, and any other information you provide, including during interviews or evaluations).
• Business-related information (billing data, contract details, invoices, and electronic communications).

3.4. Data Subjects

Serxion may collect data from the following subjects: personnel and job candidates, clients, suppliers, business partners, and Site visitors.

4. Information Collected from the Site

When you use our Site, we collect information about you, including:

• Site activity: pages you visit and links you click on.
• Technical information about your device or browser, such as your IP address, cookie information, and in the case of mobile devices, the device type and unique identifiers.
• Personal data you choose to provide through our forms: name, company, email, phone, position, and the message you send us.
• Customer service information, including surveys, email messages, or phone conversations.
• Aggregated or anonymized information that cannot reasonably be used to identify you.

We use cookies in accordance with our Cookie Policy.

5. Recipients of Personal Data

Your personal data may be stored and processed within and outside Mexico. Serxion only shares your data with third parties with your consent, when required by law, or through adequate instruments that guarantee a sufficient level of protection under the LFPDPPP.

We may share your information in the following ways, or as described in this Policy:

• With service providers acting as processors (Site support and maintenance, servers and hosting, email platforms, etc.). These providers are only authorized to process data to provide their services and are contractually obligated to protect its confidentiality and security.
• In response to a legal requirement, from authorities, courts, or other competent bodies.
• To investigate or remedy possible violations of our policies or to protect the rights, property, and safety of Serxion, our users, or third parties.
• In connection with, or during negotiations of, a merger, asset sale, financing, or acquisition of all or part of our business.
• With your consent or at your request.

6. ARCO Rights and Consent Revocation

As a data subject, you have all rights provided by the LFPDPPP, including:

• Access: request information about the personal data we store and process, as well as its origin, recipients, and purposes.
• Rectification: request correction of your data when it is inaccurate or incomplete.
• Cancellation: request deletion of your data when processing does not comply with the law. After deleting your data, we will be unable to recover it.
• Opposition: object to the processing of your data for specific purposes, including marketing purposes, at any time and without justification.
• Consent Revocation: if you have given us consent to process your data, you may revoke it at any time. Revocation will not affect the lawfulness of prior processing.
• Limitation of Use or Disclosure: when cancellation does not apply, you may request limitation of the use or disclosure of your data.

To exercise any of these rights, send your request to info@serxion.com, accompanied by the information necessary to verify your identity. We will respond to your request without delay and, in any case, within the timeframes provided by the LFPDPPP. If you disagree with our response, you may contact the National Institute of Transparency, Access to Information, and Personal Data Protection (INAI).

7. Retention Periods

Personal data is retained only for the time necessary to fulfill the processing purposes:

• During the applicable legal period, when processing is based on compliance with legal obligations (tax, labor, accounting, etc.).
• During the validity of the contractual relationship and subsequent legal periods, when data is received for the performance of contracts or pre-contractual relationships.
• For 3 (three) years, when data is received for marketing purposes, unless you revoke your consent earlier.
• For the period you have authorized, for candidates who consent to retain their information in our candidate pool.

8. Data Security

Serxion uses technical, organizational, and security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. We make reasonable efforts to protect your information and apply information security best practices for critical data.

9. Use of the Site by Minors

Our Site and services are not intended for minors. If you are a parent or guardian and believe we have collected information from a minor, please contact us at info@serxion.com.

10. Competent Authority

The competent authority in Mexico for personal data protection is the National Institute of Transparency, Access to Information, and Personal Data Protection (INAI), available at https://home.inai.org.mx.

11. Changes to this Privacy Policy

We may modify this Policy at any time. If we make changes, we will update the date indicated at the beginning of the Policy and publish the modified version. We recommend consulting this Policy periodically, as continued use of the Site will be considered acceptance of the changes.

12. Contact

If you have questions about the collection or processing of your personal data, or about this Policy, contact us at info@serxion.com indicating "PRIVACY POLICY" in the subject line, or write to:

Serxion Interactive
Av. Ruiz 1744 Int 6B, 22820 Ensenada, B.C., Mexico
Attention: Privacy