Privacy Policy

Last updated: June 10, 2026

Don Diego is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our website and services. We encourage you to read this policy carefully to understand our data practices.

1. Data Controller

The controller of your personal data is Don Diego (or the legal entity operating the relevant project). For any questions regarding the protection of your data, you may contact us through the channels indicated in the Contact section of this website.

2. Data We Collect

We may collect the following types of information:

  • Identification data: first name, last name, email address, phone number, and—when you provide it—identifiers such as your Mexican CURP (Clave Única de Registro de Población) and related official identifiers needed for a transaction or verification.
  • Browsing data: IP address, browser type, pages visited, time spent on the site.
  • Analytics and diagnostics data: page views, clicks, interaction metadata, device and browser information, referrers or campaign parameters, masked session replay recordings, and error diagnostics collected through PostHog. We do not intentionally send form field contents, chat message text, names, email addresses, or phone numbers to PostHog custom analytics events.
  • Voluntarily provided data: information you provide when completing forms, requesting project information, subscribing to newsletters, or communicating with us.
  • Screening, compliance, and risk review (when applicable): to protect Don Diego, buyers, and the community, we may process the results and supporting notes from identity verification, background-style checks, and reviews carried out through lawful “legal” or public-records/AML-style platforms, fraud-prevention services, and similar providers, strictly where permitted and proportionate.
  • Website chat: if you use the optional chat, we may store your messages, a random session id in your browser, a pseudonymous visitor key derived from hashed connection metadata (such as IP address and browser type), and preferences or contact details you type in the chat.

Initial inquiries may be placed in an internal committee (Comité) review before certain commercial or sensitive information (for example, detailed pricing) is shared. That process can rely on the data categories above, including the screening items described, to complete a good-faith security and eligibility review.

We do not collect sensitive data (ethnic origin, political opinions, religious beliefs, health, sexual orientation, etc.) unless strictly necessary and with your explicit consent.

3. Purposes of Processing

We use your personal data to: respond to inquiries about our real estate projects; send commercial information about developments, promotions, and news (where you have consented); manage newsletter subscriptions; improve our services and user experience on the website; measure site performance and diagnose errors; comply with legal obligations; conduct committee-based vetting, fraud prevention, and anti–money-laundering-style checks (including, where you provide it, use of your CURP and outputs from legal or compliance platforms); and, where applicable, manage purchase or reservation processes.

Information from our website chat (including the content of conversations) is recorded and retained, and we may also use it for direct marketing, newsletters, and mailing lists, in line with any consent you have given and applicable law.

4. Legal Basis

Processing is based on: your consent (when you provide data through forms or subscriptions); pre-contractual or contractual measures (when you request information or services); our legitimate interests (site improvement, security, commercial communication); and compliance with applicable legal obligations.

5. Cookies and Similar Technologies

We use cookies and similar technologies to improve site functionality, analyze traffic, diagnose errors, and understand how the site is used. Our analytics provider, PostHog, may use cookies, local storage, session replay, and similar technologies for website analytics, error tracking, and product improvement. Session replay and autocapture are configured to mask sensitive text, form inputs, and element attributes where practical. You may configure your browser to reject cookies, though some features may be affected.

6. Sharing of Data

We do not sell or rent your personal data. We may share information with service providers who help us operate the site (hosting, web analytics, error diagnostics, session replay, email delivery), including PostHog for analytics and diagnostics, and, where needed for a lawful inquiry, with identity-verification, compliance, or legal research platform providers, under appropriate confidentiality and data-processing terms. We may also disclose data when required by law or to protect our legal rights.

7. Your Rights

In accordance with applicable data protection laws (including Mexico’s Federal Law on Protection of Personal Data Held by Private Parties and the GDPR where applicable), you have the right to:

  • Access: know what data we hold about you.
  • Rectification: request correction of inaccurate or incomplete data.
  • Erasure: request deletion when data is no longer needed.
  • Objection: object to processing in certain cases.
  • Restriction: request limitation of processing in certain circumstances.
  • Portability: receive your data in a structured format where applicable.

To exercise these rights, contact us through the channels indicated in the Contact section. You may also lodge a complaint with the competent data protection authority.

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure.

9. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. After those periods, data will be securely deleted or anonymized.

Website chat logs and related inferred fields are generally kept for up to twenty-four (24) months unless a shorter period is required by law or we delete them earlier after a valid request.

10. Minors

Our services are not directed at individuals under 18. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may modify this Privacy Policy at any time. Changes take effect upon publication on this website. We recommend reviewing this page periodically. The last updated date is shown at the beginning of the document.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us through the official channels listed in the Contact section of this website.