The public Doing Things website has no account system, contact form, newsletter, advertising pixels or behavioural analytics. It handles only the limited technical information needed to deliver and protect the site.
1. Scope
This policy applies to the public website at doingthings.app. Each product in the Doing Things portfolio is a separate service and publishes its own privacy information for the data and features it uses. A product policy takes precedence for activity inside that product.
The private operator panel at panel.doingthings.app is restricted to authorised personnel and is not a public customer service.
2. Who is responsible
The data controller responsible for this website is:
- Legal entity
- HURTADO GLOBAL MEDIA GROUP S DE RL DE CV
- Mexican RFC
- HGM160624EP4
- Registered address
- Avenida Nuevo León 161, 2nd floor, unit 201, section C, Hipódromo, 06100, Cuauhtémoc, Mexico City, Mexico
- Trading name
- Doing Things
3. Information this website handles
Information you provide
This website does not provide forms, user accounts, checkout or newsletter registration, so it does not ask you to submit personal information directly.
Technical request information
When you visit, the hosting and security infrastructure may process limited network and request information such as IP address, date and time, requested path, browser or user-agent information, response status and security signals. This is normal for delivering a website safely over the internet.
Cookies and local storage
The public website does not set cookies, use browser local storage or load advertising and analytics trackers. See the Cookie Policy for the current details.
4. Why information is handled
Limited technical information is processed only to:
- send the pages and files requested by your browser;
- maintain availability, diagnose faults and measure basic service reliability;
- detect abuse, automated attacks and other security threats;
- comply with a valid legal obligation or protect legal rights.
We do not use website request information for targeted advertising, cross-site tracking, data brokerage or automated decisions about visitors.
5. Service providers and international processing
Cloudflare provides the website hosting, content delivery and security infrastructure. It processes technical request information on our behalf and may do so through infrastructure located outside Mexico. We require service providers to use information only to provide and protect their services and to apply appropriate contractual, organisational and technical safeguards.
We do not sell or rent personal information. We may disclose limited information where required by law, to protect people or services, or as part of a corporate transaction subject to appropriate safeguards.
6. Retention and security
Technical logs are retained only for the shortest period reasonably necessary for delivery, security, diagnostics, legal compliance and the resolution of incidents, after which they are deleted or aggregated. Retention may vary where a security event or legal duty requires preservation.
We use access controls, encrypted transport, restrictive browser security policies and limited operational logging. No internet service can promise absolute security, but we design the public site to minimise the information exposed in the first place.
7. Your privacy rights
Under Mexican law you may request access, rectification, cancellation or opposition in relation to your personal data (ARCO rights), and you may withdraw consent where processing depends on it.
Send your request to privacy@doingthings.app or by post to the registered address above, marked “Privacy / ARCO”. Include your name, a method for receiving our response, proof of identity, a clear description of the information involved and the right you wish to exercise. If someone acts for you, include evidence of their authority.
We will communicate our decision within the period required by applicable law. Where a request is valid, we will implement it within the corresponding legal period. We may ask only for the information necessary to verify identity and prevent unauthorised access.
Product data requests. If your request concerns a specific app, use the privacy or support channel published by that app. This helps route the request to the correct system without unnecessary disclosure.
8. Changes to this policy
Material updates will be published on this page with a revised effective date. If a future change requires consent, we will request it before the relevant processing begins.
This notice is intended to satisfy the transparency requirements that apply to the website. It does not reduce any non-waivable right available under applicable law.