Website, inquiries and privacy: each datum with a purpose.

Short-form notice

Three defined activities.

Maher Salal González de la Rosa, with an address for notices at Av. Cantera 2900, Col. Dos Valles Acacias, C.P. 76116, Santiago de Querétaro, Querétaro, México, is responsible for the activities described here. This notice takes effect on 2026-10-06.

Static site (CUR-01): on a visit, the delivery and security provider may process an IP address, timestamp, requested URL, HTTP headers and technical metadata to serve content, maintain availability and address errors, abuse or incidents.

Privacy channel (CUR-03): an inquiry or ARCO request may involve a name, response method, message, request and minimum data needed to establish identity or representation and process it. To exercise your rights, write to [email protected].

Received collaboration inquiries (limited CUR-04 scope): if you voluntarily write to [email protected], your name, email, institution or role if included, message content and metadata will be processed to address the inquiry and provide necessary follow-up within that context. Sensitive data and identification documents are not required for this contact.

There are no secondary commercial-outreach purposes for these three activities. Once this notice takes effect, requests to limit the use or disclosure of data and, where applicable, to withdraw consent may be submitted to the privacy email address above or delivered in person or by post to the address above. The rights procedure and changes to this notice are detailed below.

Read the full notice.

Full notice

Scope, purposes and rights.

1. Controller and address

The controller's legal identity and address are stated in the short-form notice above. “Torsion” is the project's public name; it does not replace the controller's legal identity.

2. Activity A · site delivery and security (CUR-01)

Cloudflare may process an IP address, timestamp, requested URL, HTTP headers, and routing, response and security metadata to deliver the site, maintain availability and diagnose errors, abuse and incidents. The website does not request sensitive data through forms or include first-party analytics, profiling or advertising.

Torsion does not keep a local per-request HTTP log or export those data for this activity. No specific technical retention period is claimed for Cloudflare because it has not been evidenced.

3. Activity B · privacy inquiries and ARCO requests (CUR-03)

The privacy channel uses Google Workspace. A communication may contain a name, email or response method, message content and metadata, the requested right and, only where needed, minimum evidence of identity or representation. Sensitive data are not requested. The purposes are to receive, authenticate, process and answer the request and retain minimum compliance evidence, without commercial outreach.

The contact address is [email protected]. The operating owner has personally undertaken remote reviews on Mondays and Thursdays at 09:00, including during absences, and handling of physical-delivery notices. Receipt and follow-up of requests are documented in a restricted private register.

4. Activity C · voluntary collaboration inquiries (CUR-04, inbound only)

[email protected] receives inquiries voluntarily initiated by the sender. We process the name, reply email, institution or role supplied, message content and metadata only to understand the inquiry, answer it and provide necessary follow-up within its context. You can share only what is needed; do not send credentials, identification documents, sensitive data or confidential material in a first inquiry.

Sending an inquiry does not subscribe you to newsletters or enable campaigns or outreach outside that context. You can ask to end follow-up in the same thread; ARCO rights, use limitations and withdrawal where applicable use the privacy channel described below. ARCO requests and technical visitor data will not be reused for this correspondence.

5. Providers and disclosure

Cloudflare provides site delivery and security; Google Workspace provides privacy-channel infrastructure. The local data map classifies the visitor and requester processing needed for those services as processing by service providers on Torsion's behalf, while each provider separately handles service data under its own policies. No transfer of data from these two activities to another third party for that party's own purposes has been identified; any material change would require an update to this notice.

Received email inquiries use Google Workspace as email infrastructure. Message content and metadata are processed to deliver, store and protect the message under the applicable service terms. This description does not extend the CUR-01 and CUR-03 classification to all commercial correspondence. This scope does not include sharing inquiries with collaborators or other third parties for their own purposes; if a proposed referral involves sharing data, the sender will be informed first and consent will be obtained where required.

6. Use limitations, withdrawal and ARCO rights

A data subject may request access, rectification, cancellation or objection, and may restrict use or withdraw consent where applicable. The procedure provides for privacy email, in-person delivery and postal delivery to the controller's address. Only the information needed to identify the data subject or representative and locate the data will be requested; receipt will be recorded for follow-up.

The law provides for communicating an ARCO determination within twenty business days of receipt and, where applicable, making it effective within the following fifteen business days, with one justified extension. Deadlines are tracked from the date each request is received.

7. Retention and deletion

The website does not retain local per-request HTTP logs. ARCO communications and minimum evidence will be retained only for the time needed to process them, comply with applicable obligations and address responsibilities. No additional fixed retention period is stated here; each case is reviewed against its purpose and applicable obligations.

Collaboration inquiries will be retained only while needed for their purpose and applicable obligations. Once that purpose ends, deletion or blocking will be assessed as appropriate, including backup handling. No fixed period is stated and no implemented automatic deletion is claimed.

8. Security and incidents

The private register is held outside Git with restricted access. Processing requires minimum identity checks, limited retention and incident assessment without disclosing data through logistics channels. These controls are reviewed as part of channel operations.

9. Changes and future activities

Changes to this notice will be communicated at this route with an effective date. This notice does not cover accounts, newsletters, payments, chat, pixels, first-party analytics cookies or forms, none of which are active on the website. CUR-04 coverage is limited to voluntarily received inquiries and their contextual follow-up; prospecting, campaigns, lists obtained from social networks and other commercial activities are governed separately and are not enabled by this notice.