Privacy notice

Version: 1.0 · Effective date: September 1, 2026

1. Identity and contact of the data controller

SORA (trade name). Legal entity name: Sorafusion Architects, S.A.S. de C.V.. Tax id: SAR240105U41. Address: Loma Alta 86, Col. San Juan Ixtacala, Atizapán de Zaragoza, C.P. 52928, Estado de México, México. General contact: info@sorafusion.com.

2. Personal data collected

Through our contact form: name, company, email, phone (optional), project type, project stage, services of interest, BIM maturity, preferred contact modality, and message (optional). We do not collect any other personal data through a form with active processing at this time.

3. Purposes of processing

Technical evaluation of the contact request and commercial response. Legal basis: the data subject's tacit consent (see point 7 for the objection and revocation mechanism). We do not collect sensitive, financial, or asset-related data through this form.

4. Transfers and data processors

The contact form is processed through a transactional email delivery provider acting as a data processor for email delivery. Final recipients of the form content: info@sorafusion.com.

5. Retention and security

Retention period for contact form data: 24 months. In prudent terms: we apply technical limits on submission frequency and mechanisms to detect automated submissions; form content is transmitted encrypted (HTTPS) to our email provider.

6. Access, rectification, cancellation, and objection mechanism

Any request for access, rectification, cancellation, or objection regarding processed personal data may be directed to: privacidad@sorafusion.com.

7. Revocation and contact

Processing of the ordinary personal data provided through the contact form is based on the data subject's tacit consent. The privacy notice is made available before submission; the person may abstain from submitting the form, or afterward object or revoke consent by writing to privacidad@sorafusion.com, with no retroactive effect and subject to applicable legal exceptions. We do not currently offer any newsletter subscription form — if one exists in the future, it will be audited and reflected here before being activated.

8. Cookies and analytics

We use Google Analytics 4 (GA4) conditionally, plus a lead-generation event on contact-form submission. We do not currently use any other third-party cookie or analytics mechanism.

9. Changes to this notice

Any change to this notice will be versioned; the current version and date are shown at the top of this document.

Jurisdiction

Country / jurisdiction: México (Estados Unidos Mexicanos) · Applicable law: Applicable federal laws of the United Mexican States; for personal data protection, the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Federal Law on the Protection of Personal Data Held by Private Parties — the official Spanish name prevails) currently in force.

The authority and procedures governing personal data protection, including any right of access, rectification, cancellation, or objection, are not subject to any contractual courts clause; they are governed by their own applicable statute and authority.