Your data, clearly explained.

Who is responsible

Duvantis is the controller of personal data collected through this Habita website. The contact address appears at the beginning of this notice.

This notice covers the landing page and its form. Processing within the platform, apps and each community requires its own notice, according to the services and responsibilities agreed with management.

What data we process

When you request a demo, we receive your name, email address, management company or community name, role, range of homes and optional message. We record the submission date and the version of the notice accepted.

The form does not request sensitive personal data, banking information or identity documents. Please do not include these or third-party data in your message. If identity verification is needed for a privacy request, we will arrange an appropriate method separately.

Why we use this information

The necessary purposes are to receive and record your request, contact you, arrange the demonstration and follow up on your questions or a requested proposal. We also use limited technical information to protect the form against abusive submissions.

Submitting information is voluntary. Without the required fields, we cannot record the request through the form; you can use the contact telephone instead. We do not use these data to subscribe you to newsletters or advertising campaigns.

Storage and providers

The website and its request database use Cloudflare infrastructure. This provider may process technical connection information, including the IP address, to provide hosting and security services. Its infrastructure may operate outside Mexico.

The request database is accessible to authorized personnel supporting Habita. We do not sell data or provide it to third parties for advertising. Disclosures required by a competent authority will be handled under applicable law.

WhatsApp, Facebook and other external links open when you choose to visit them. Information you share with those services is also processed under their own policies.

How long information is retained

Form requests are deleted by the daily cleanup once they are more than 180 days old. This rule applies to this website’s database; records for a later contract are handled separately.

To limit repeated submissions, the server derives a fingerprint from the IP that changes daily. It does not store the original IP in the request database. Rate-limit records are cleaned daily once they are more than 24 hours old.

Your rights and how to exercise them

You can request access, rectification, cancellation or objection to the processing of your data (ARCO rights). You can also request limits on use or disclosure and revoke consent without retroactive effect.

Start your request through the contact form, writing “Privacy / ARCO” in the message, or through the telephone listed above. Include your name, a reply channel, the email used and your request. For rectification, specify the change and its supporting information. We will verify identity or representation before releasing or changing data.

We will communicate a decision within 20 days of receiving the request and, if granted, implement it within 15 days after the response. We will notify you of any legally justified extension. Exercising your rights is free, except for legally applicable reproduction or delivery costs.

Cancellation or revocation may be subject to legal retention obligations. If a restriction applies, we will explain its reason and scope.

Browser preferences

The website remembers your light or dark theme in local storage and your motion preference for the session. It does not include advertising pixels or third-party analytics tools. See the cookies and storage policy for the keys and how to remove them.

Changes to this notice

Changes will be published on this page with their date and version. If we propose new purposes requiring your consent, we will request it before applying that use.