Privacy Notice

PsicoSmart México, S.C., HumanSmart Consulting, S.C., and HumanSmart Group LLC (hereinafter referred to as “the Companies”), committed to safeguarding the privacy and security of personal data, inform clients, users, and the general public that this Privacy Notice complies with applicable regulations in the countries where we operate. This Privacy Notice applies globally and governs the processing of personal data in all jurisdictions in which we operate, including Mexico, Colombia, the United States, the Dominican Republic, Guatemala, and other countries.

By using our services, you accept the terms of this Privacy Notice.

I. Data Controllers

Relationship Among the Companies:

PsicoSmart México, S.C., HumanSmart Consulting, S.C., and HumanSmart Group LLC (collectively referred to as “the Companies”) are closely related entities sharing the same legal representative and operating under unified privacy policies aligned with international best practices. These companies collaborate to provide comprehensive Software-as-a-Service (SaaS) solutions focused on human resources management.

II. Personal Data Collected

The processing of your personal data will be conducted in accordance with the terms set forth in this Notice. By continuing, you are deemed to have granted your consent for such processing.

The retention period for your personal data will correspond to the applicable legal or contractual statute of limitations. Once the original purpose for which the data was collected has been fulfilled, the data will be blocked and subsequently deleted to prevent unauthorized use.

• Identification Data: Name, nationality, address, email address, phone number, passwords.
• Financial Data: Billing information, payment methods, and proof of payment.
• Business Data: Company industry and size, number of employees, and benefits offered.
• Employee and Applicant Data: Résumés containing personal, contact, employment, educational, and professional background information.
• System Usage Data: Platform interactions, activity logs, and user behavior.
• Payment Data: Information required to complete transactions via platforms such as PayPal or Stripe.

Personal data may be collected through:

• Automated devices, such as surveillance cameras at our facilities.
• Social media, messaging services, and online forms.
• Any other physical, electronic, or magnetic means.

Important: The direct processing of personal data belonging to clients’ employees or candidates is the sole responsibility of the client. The Companies are exclusively committed to:

• Storing, safeguarding, and securing this data within our system databases.
• Implementing security measures to prevent unauthorized access or misuse.

III. Purpose of Data Processing

a) Primary Purposes:

• To identify, locate, and contact the client or data subject.
• To provide and improve the contracted services, including operation of the HRMS platform.
• To offer technical support and respond to feedback, complaints, or suggestions.
• To conduct satisfaction surveys and statistical analyses.
• To comply with legal and regulatory obligations in the countries where we operate.
• To notify users of changes to this Privacy Notice.

b) Secondary Purposes:

• Sending product updates, promotions, and marketing campaigns.

If you do not wish for your personal data to be used for secondary purposes, you may express your preference by emailing [email protected].

IV. Legal Framework

• Mexico: Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) / Federal Consumer Protection Law
• Colombia: Law 1581 of 2012
• United States: Data Breach Notification Act
• Guatemala: Decree 57-2008
• Dominican Republic: Law No. 172-13 / Constitution of the Dominican Republic

V. Data Subject Rights

• Access: To know what personal data the Companies possess and how it is used.
• Rectification: To request the correction of inaccurate or incomplete data.
• Cancellation: To request the deletion of data that is no longer necessary for the purposes established.
• Objection: To object to the processing of their personal data for specific purposes.

To exercise these rights, please send an email to [email protected], including the completed request form, which can be downloaded here: Download ARCO Request Form (colocar el FORMATO ARCO).

Note: If you are a system user affiliated with a client of the Companies, you must contact the responsible organization (employer or contracting party) directly to exercise these rights.

VI. Privacy Principles

• Transparency: Data subjects are clearly informed about how their information is collected and used.
• Data Minimization: Only data strictly necessary for the stated purposes is collected.
• Security: Technical and organizational measures are implemented to safeguard personal data against unauthorized access.
• Accountability: The Companies comply with all applicable privacy regulations in each jurisdiction in which they operate.

VII. Data Transfers

• Subsidiary or affiliated companies of the Companies operating under the same privacy policies.
• Regulatory authorities, where required by law.

If the data subject does not wish for their information to be transferred to third parties for purposes other than those described in this Privacy Notice, they may express their refusal by emailing [email protected].

VIII. Data Security

• Encryption of sensitive data to prevent unauthorized access.
• Restricted access control to stored information.
• Continuous monitoring and security audits to ensure compliance with applicable regulations.

While we maintain robust security measures, users should be aware that no data transmission over the internet is entirely secure. We recommend exercising additional caution when sharing personal information online.

IX. International Data Processing

This Privacy Notice is designed to comply with personal data protection regulations in any country where the Companies’ services are offered. However, the legal framework included in this document specifically references Mexico, Colombia, the United States, Guatemala, and the Dominican Republic.

If a client resides in a different country and wishes for their data to be processed in accordance with their local data protection laws, they may contact us at [email protected] to request an evaluation.

The request must include the following information:

• Country of residence.
• Any specific regulation or law the client wishes to apply (if known).
• A brief description of the request related to the processing of their personal data.

The Companies commit to evaluating and responding to each request based on international best practices and in accordance with applicable laws, to the extent possible within our legal, technical, and administrative capabilities.

Note: Requests will be reviewed and processed within the legal, technical, and administrative capacities of PsicoSmart México, HumanSmart Consulting, and HumanSmart Group LLC.

X. Updates to This Notice

This Privacy Notice may be modified or updated in response to changes in legal requirements, operational needs, or adjustments to our privacy practices. Users will be informed of any updates through publication in our login section.

XI. Mechanisms to Refuse Data Processing

If you do not wish for your personal data to be processed for the purposes outlined in this Privacy Notice, you may communicate your decision by emailing [email protected] with a clear and explicit request to withdraw or withhold authorization for data processing.

If you wish to limit the use or disclosure of your personal data, please specify the purposes for which you do not want your data to be used. The Companies will evaluate your request and, to the extent possible, will proceed in accordance with the applicable regulations.

XII. Contact

Email: [email protected]