This notice explains how jorgesalgadomiranda.com (operated by Jorge Salgado Miranda, Mexico City, Mexico) collects, uses, retains and protects the personal data of visitors and leads.

1. Data controller

Jorge Salgado Miranda, individual professional based in Mexico City. Contact: [email protected]. Registered corporate vehicle for billed engagements is Capdesis; for Capdesis-specific processing see that company's own notice.

2. Data I collect

• Contact form submissions: name, email, company (optional), topic of interest and message body. Delivered via Resend through the same-origin /api/contact.php proxy to my inbox.
• Booking data if you schedule a call via Cal.com: name, email, time slot, optional notes. Processed by Cal.com under their own terms.
• Analytics: page-view and product-usage data via three tools. Umami (self-hosted, no cookies, no personal identifiers) and Cloudflare Web Analytics (zero-cookie, edge-native) report aggregate traffic. PostHog (hosted in the United States at us.i.posthog.com) captures pageviews, page-leaves and interaction events to understand which sections are useful; it sets cookies and browser storage identifiers and is configured to build a person profile only when a visitor is identified. Because PostHog can set cookies, the site shows a consent banner and PostHog, Umami and Cloudflare analytics only run after you accept it. If you choose essentials only, none of these analytics load.
• Edge and security logs via Cloudflare for basic DDoS and bot protection. IP addresses may be briefly retained for abuse mitigation; they are not used for marketing or profiling.

3. Why I use it

• To reply to consulting inquiries (lawful basis: legitimate interest, or your explicit request).
• To schedule and prepare calls (basis: contract performance).
• To understand which content is read and improve the site (basis: legitimate interest; only aggregate data).

4. Retention

Contact form emails stay in my ProtonMail inbox indefinitely unless you request deletion, so that I can reopen a thread if you reach out again years later. Analytics data is retained by Umami, Cloudflare and PostHog per their default policies. Umami and Cloudflare data is aggregate and does not identify individuals; PostHog data is also anonymous unless a visitor is explicitly identified, in which case PostHog builds a person profile and stores it in the United States (us.i.posthog.com) under its own retention policy.

5. Sharing

I do not sell data. I share it only with the tools listed above, acting as processors. No marketing mailing list, no ad networks, no data brokers.

6. Your rights

Mexican (LFPDPPP) and EU (GDPR) frameworks both apply because my site accepts international traffic. You can request access, correction, portability, deletion, or object to processing by emailing me. I reply within 7 calendar days and always within 30.

7. Security

TLS 1.2+, HSTS preload, CSP, Cloudflare bot fight mode, rotating FTP credentials on the host, and no server-side application on this domain (all content is static HTML served from Hostinger).

8. Cookies and local storage

To remember your analytics choice, the site stores a single first-party item named jsm-cookie-consent in your browser's local storage. It records whether you accepted, the timestamp and a version number. After 365 days the site treats the record as expired and shows the consent banner again so you can renew your choice; the stored item itself is not auto-deleted from your browser, but you can clear it at any time through your browser's site-data controls. It is strictly necessary for the consent mechanism and is not used for tracking. Umami and Cloudflare analytics remain cookieless. If you accept analytics, PostHog sets its own cookies and storage identifiers to measure usage; declining or choosing essentials only prevents PostHog from loading. Cal.com may set cookies on its own domain when you book a call; that is subject to Cal.com's policy.

9. Changes to this notice

If material changes occur, the "Last updated" line above reflects them. Minor wording changes are not separately notified.

Este aviso explica cómo jorgesalgadomiranda.com (operado por Jorge Salgado Miranda, Ciudad de México) recolecta, usa, conserva y protege los datos personales de visitantes y leads.