Privacy Policy

Last updated: February 21, 2026

1. Definition of Roles and Scope

  • Data Controller: Both parties acknowledge that the Client's database may contain personal data, for which the Client is the sole controller.
  • Data Processor: Insight Decima S.A. de C.V. (hereinafter, "Decima") acts as a data processor when the Client so indicates through the use of the Decima Ecosystem services.
  • Decima Ecosystem: This policy covers all modules, including but not limited to: Ecommerce, CRM, ERP, WMS, POS, IAM, Analytics, and AI services.

2. Personal Data Processing

Decima is contractually committed to:

  • Processing personal data solely and exclusively under the Client's instructions and for the purpose of performing the Services under the agreement.
  • Ensuring that all personnel authorized to process personal data are formally committed to confidentiality.
  • Notifying the Client immediately upon discovery and confirmation of any incident regarding unauthorized access or disclosure of data.

3. Security and Safeguard Measures

To ensure the integrity and availability of information within our infrastructure, we implement:

  • Communication Encryption: All access is protected with Grade A SSL (HTTPS) communication encryption.
  • Backup Service: An automatic daily backup of the Client's database is performed and kept for a period of 7 days, ensuring the last 7 days are always available.
  • High Availability Infrastructure: Servers maintain 99.9% optimal uptime and feature regularly tested disaster recovery plans.

4. Confidentiality

  • Definition: All information related to business, developments, "know-how," customers, and suppliers is considered Confidential Information.
  • Duration: This confidentiality obligation remains in effect during the term of the agreement and after its termination.
  • Compelled Disclosure: Information will only be disclosed if required by law, following prior notice to the Client to the extent permitted by legislation.

5. Client Rights and Data Deletion

  • Audits: Decima will provide the Client with the necessary information to demonstrate compliance with data protection legislation and will contribute to audits if required by the Client.
  • Termination: Upon termination of the agreement, Decima will permanently delete all copies of the database in its possession or return them in their entirety at the Client's choice.

6. Support and Privacy Contact

For any requests related to data protection, the Client may directly contact: soporte@decima.la.