Privacy Policy

1. Who we are

Comercializadora Online LACABA, SAS (“LACABA”, “we”, “us”), a company incorporated under the laws of Mexico with its domicile in the Estado de México, Mexico, is the party responsible for the personal data collected through this website. We operate under the brand name Inner Fire Alchemy.

This document is our aviso de privacidad (privacy notice) under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) and its implementing regulations. It is written in English because that is the language of our content and of the audience we serve.

It applies to innerfirealchemy.today, to every landing page and free guide we publish, and to the emails we send you as a result.

For anything in this notice, write to laura@innerfirealchemy.today.

2. What we collect

Data you give us on purpose

When you fill in one of our forms to request a free guide, we collect:

If you write to us directly by email, we also hold whatever you chose to put in that message, for as long as needed to answer you properly.

Data collected automatically at signup

Our email platform records, at the moment you submit a form, the IP address the submission came from, the date and time, and the specific form you used. We do not choose this — it is standard practice that exists to prove consent was genuinely given and to block automated abuse. We disclose it here because it is your data too.

Our email platform later records whether you open an email and whether you click a link in it. We use this only to understand which material is actually useful and to stop sending to addresses that no longer read us.

3. What we never collect

We also do not ask for, and never store, payment card details, government identification numbers, or your postal address.

4. Why we use your data

Mexican law asks us to separate the purposes that are essential to the service you requested from the ones that are not. Here is that separation, honestly drawn.

Primary purposes — necessary to give you what you asked for

• Deliver the free guide or resource you requested.
• Send you the sequence of educational emails that accompanies that guide.
• Answer your questions, requests and any right you decide to exercise.
• Keep the list clean and secure: prevent fraudulent or automated signups, and honour unsubscribes.
• Comply with legal obligations that may apply to us.

Secondary purposes — not necessary; you may refuse them

• Send you announcements about new guides, courses, programs or paid offerings from Inner Fire Alchemy.
• Measure, in aggregate, which content and subject lines are worth continuing.

5. Your consent

Under Mexican law, when you enter your details in one of our forms and submit them, you are giving your tacit consent to the treatment of your data as described in this notice. There is no fine print behind that: the form asks for a name and an email, and this document tells you everything that happens to them afterwards.

You may revoke that consent at any time (see section 10). Revoking it does not undo processing that already took place lawfully, but it stops it going forward.

6. Who we share it with

We do not sell, rent, trade or lend your personal data to anybody. Ever. We share it only with the service providers we need in order to operate, and only to the extent they need it:

Under Mexican law these are remisiones (remittances to service providers acting on our behalf), not transferencias to independent third parties, and therefore do not require your separate consent. These providers may process data on servers located outside Mexico, including in the European Union and the United States. They are bound by contract to process it only on our instructions.

We would also disclose data if a competent authority lawfully required it of us, or if it were strictly necessary to defend our legal rights. If that ever happens and the law permits us to tell you, we will.

7. Cookies and analytics

As of the date of this notice, our landing pages set no advertising cookies and carry no tracking pixels. There is no Meta pixel, no advertising network, and no third-party profiling on these pages. Your browser stores a single technical identifier locally so that the form does not submit your address twice in the same visit.

We intend to add Google Analytics to measure, in aggregate, how many people reach these pages and from where — for example, how many arrive from a YouTube video description. When it is active, it will set analytics cookies and process anonymous browsing data such as your approximate region, browser, device type and referring page. It will never receive your name or email address.

You can refuse analytics cookies through your browser settings, or install Google’s official opt-out add-on at tools.google.com/dlpage/gaoptout. Blocking them does not limit your access to any of our content.

The emails we send contain a small invisible image that tells our platform whether the message was opened. If you read email with images blocked, this does not register.

8. How long we keep it

We keep your name and email address for as long as you remain subscribed. There is no expiry date on a relationship you have not ended.

• If you unsubscribe, we stop sending immediately and retain only the minimum record needed to make sure we never email you again by mistake.
• If you ask us to delete your data, we erase it from our active systems within the legal deadline described in section 10.
• If you have not opened a single email in twenty-four months, we treat that as an answer and remove you ourselves.

Backups made by our providers may retain copies for a short additional period before being overwritten in the normal cycle.

9. How we protect it

Your data lives inside MailerLite’s infrastructure, protected by their administrative, technical and physical safeguards, and reachable only through a small number of accounts protected by strong, unique credentials. Every page of ours that collects data is served over an encrypted HTTPS connection.

We will not pretend that any system on the internet is invulnerable. What we can commit to is this: we hold the smallest amount of data that lets us do the work, which is the most effective protection there is, and if a breach ever affected your data materially, we would notify you and the competent authority as the law requires.

10. Your ARCO rights

Mexican law grants you four rights over your own data, known together as derechos ARCO, plus the right to revoke your consent:

• Access — ask us what data we hold about you and what we do with it.
• Rectification — have inaccurate or incomplete data corrected.
• Cancellation — have your data deleted from our records.
• Opposition — object to us using your data for a particular purpose.
• Revocation of consent — withdraw the permission you gave us.

How to exercise them

Send a request to laura@innerfirealchemy.today. To let us act on it properly, please include:

1. Your full name and an email address we can reply to.
2. A copy of an official identification document, so we can confirm you are who you say you are. We use it only to verify the request and destroy it afterwards.
3. A clear description of what you want — which right you are exercising and, where relevant, which data it concerns.
4. If you are acting on someone else’s behalf, a document proving you are authorised to do so.

What happens next

We will answer you within twenty business days of receiving a complete request. If we grant it, we will put it into effect within fifteen business days of that answer. Exercising any of these rights is free of charge; we may only pass on justified shipping or certification costs if you ask for the information in a physical format.

If you are not satisfied

If you believe we have not respected your rights, you may file a complaint with the competent Mexican data protection authority designated under the Federal Law on the Protection of Personal Data Held by Private Parties. We would rather you told us first, at the address above, and gave us the chance to put it right.

11. Leaving the list

Every single email we send carries an unsubscribe link at the bottom. One click and the relationship ends, with no confirmation loop, no survey and no attempt to talk you out of it.

We would rather have a small list of people who genuinely want to be there than a large one that resents us.

12. Visitors outside Mexico

Our content is in English and reaches people well beyond Mexico. We are governed by Mexican law, but we do not use that as a way to give you less.

If you are in the European Union or the United Kingdom: we process your data on the basis of your consent, and you may request access, rectification, erasure, restriction, portability of your data, or object to its processing, using the same address in section 10. You may also withdraw consent at any time. Our email provider is established in the European Union.

If you are in California: we do not sell or share your personal information as those terms are defined by the CCPA/CPRA, we have not done so in the preceding twelve months, and we will never discriminate against you for exercising any privacy right.

Wherever you are: if a right exists for you under your local law, write to us and we will honour it in good faith rather than argue about jurisdiction.

13. Age requirement

Our material is intended for adults aged 18 and over, and our forms are not directed at children. We do not knowingly collect data from anyone under 18. If you believe a minor has given us their data, write to laura@innerfirealchemy.today and we will delete it promptly.

14. Links to other sites

Our pages and emails may link to other places — our YouTube channel, for instance, or a resource we consider worth your time. Once you follow such a link you are on someone else’s property, under their privacy policy and not ours. We encourage you to read theirs. We are responsible only for what happens on our own pages and in our own emails.

15. Changes to this notice

We may update this notice when what we do changes — when we activate analytics, for example, or add a new service provider. The “Last updated” date at the top always reflects the current version, and this page always holds the version in force.

If a change is substantial and affects how we use data you already gave us, we will not bury it: we will tell you by email before it takes effect.

16. How to reach us

A real person reads this address.

Whether it is a formal ARCO request or a plain question about what we hold on you, the same address works, and you will get an answer.