Legal

Privacy Notice

Aviso de Privacidad

Last updated: March 2026

In compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and its regulations, OZA International (hereinafter “the Gallery”, “we”, or “us”) makes this Privacy Notice available to inform you how we collect, use, and protect your personal data.

1. Identity and Address of the Responsible Party

OZA International
San José del Cabo, Mexico
Email: info@ozainternational.com

2. Personal Data We Collect

We may collect the following personal data when you use our website or contact us:

  • Full name
  • Email address
  • Phone number
  • Country of residence
  • Message content submitted via our contact or enquiry forms
  • Navigation data: pages visited, time on site, and UTM attribution parameters (e.g. utm_source, utm_medium, utm_campaign) derived from the link you used to reach our website

We do not collect sensitive personal data (datos personales sensibles) as defined by the LFPDPPP.

3. Purposes of Data Processing

Your personal data is collected and used for the following primary purposes(finalidades primarias), which are necessary to fulfil the relationship you initiate with us:

  • Responding to enquiries submitted via our contact form
  • Processing and following up on artwork purchase or reservation enquiries
  • Sending you a confirmation of your enquiry submission
  • Managing our client and prospect records in our CRM system

Your data may also be used for the following secondary purposes(finalidades secundarias). You may opt out of these at any time by contacting us:

  • Sending information about upcoming exhibitions, events, or new works
  • Analysing enquiry trends to improve our services

4. Data Transfers to Third Parties

To operate our website and manage enquiries effectively, we share your personal data with the following third-party service providers. These transfers are necessary to fulfil the primary purposes described above and do not require your additional consent:

  • HubSpot, Inc. — our CRM platform, used to store contact records and manage sales enquiries. Data is stored on servers in the United States. HubSpot is certified under applicable international data transfer frameworks.
  • Resend Inc. — our transactional email provider, used to send confirmation emails. Data is processed in the United States.

We do not sell, rent, or otherwise commercialise your personal data to third parties.

5. Your ARCO Rights

Under the LFPDPPP, you have the right to Access, Rectify, Cancel, or Object (derechos ARCO) to the processing of your personal data at any time.

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Cancellation — request deletion of your data from our records
  • Opposition — object to the use of your data for specific purposes

To exercise any of these rights, please send a written request to info@ozainternational.com including:

  • Your full name and email address
  • A description of the right you wish to exercise
  • Any relevant details to help us locate your record

We will respond within 20 business days as required by Mexican law.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this notice, or as required by applicable law. If you request cancellation of your data, we will delete or anonymise it within the period established by law, unless retention is required for legal or contractual obligations.

7. How We Protect Your Data

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure. All data transmitted via our website is encrypted using HTTPS.

8. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be published on this page with an updated revision date. We encourage you to review this notice periodically.

9. Contact

If you have any questions about this Privacy Notice or how we handle your personal data, please contact us at info@ozainternational.com.

This notice is governed by the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), published in the Diario Oficial de la Federación on 5 July 2010, and its regulations.