Website information
Privacy notice
Last updated: September 3, 2026
1. Identity of the controller
LIC International Inc., operator of this website under the Concha de Palacio brand ("Concha de Palacio", "we", "us"), located at 1515 Plume Grass Pl, Round Rock, Texas 78655, United States, with US tax identification number EIN 74-2903110, is responsible for personal data collected through this website. For privacy matters and rights requests, email contact@conchadepalacio.com or call +1 619 707 1357.
2. Data we collect
When you contact us by email, we may collect your name, email address, telephone number, project location, message contents and any information you choose to provide. We do not request sensitive personal data; please do not include it in free-text messages.
When you visit the site, our technical providers may automatically process limited data such as IP address, date and time, requested URL, browser, device, operating system, referring page and security logs. If you authorize analytics, Google Analytics also receives online identifiers, approximate location information and data about pages visited, session, device, browser and interactions. We do not deliberately send names, email addresses or telephone numbers to Google Analytics.
3. Purposes and legal bases
- Answer enquiries and communicate with you.
- Evaluate projects and prepare requested quotations, proposals or pre-contractual steps.
- Manage the professional relationship and provide contracted services.
- Protect the site, prevent abuse or fraud and comply with legal obligations.
- With your consent, measure audiences and understand aggregate site usage so we can improve it.
We do not use Google Analytics for advertising, ad personalization or Google Signals. We do not make automated decisions with legal effects. In the European Economic Area, our legal bases are requested pre-contractual steps, performance of a contract, compliance with legal obligations, our legitimate interests in answering enquiries and protecting the service and, for Google Analytics, your consent, which you may withdraw at any time.
4. Processors, disclosures and transfers
The site is hosted by Vercel. If you accept analytics, we use Google Analytics, provided by Google LLC, under its business privacy terms. These providers may process data in the United States and other countries. Where applicable, international transfers rely on recognized mechanisms such as standard contractual clauses or applicable data protection frameworks.
We may disclose data where legally required by an authority, to protect rights or safety, or to professional advisers bound by confidentiality. We do not sell or rent personal data and do not share it for cross-context behavioural advertising.
5. Retention and security
Enquiries that do not result in a contractual relationship are retained for up to 24 months after the last contact. Client records are retained during the relationship and then for up to five years, or longer where required by legal, tax, contractual or claims obligations.
Google Analytics user and event data is retained only as long as needed for measurement and in all cases for no more than 14 months; aggregate reports may be retained longer. Analytics cookies may last for up to two years. Your consent choice is stored locally for six months. We use reasonable administrative and technical safeguards, although no system is completely infallible.
6. Rights in Mexico
Under Mexico's Federal Law on Protection of Personal Data Held by Private Parties, you may exercise rights of access, rectification, cancellation and objection (ARCO), withdraw consent or limit the use and disclosure of your data. Email your request to contact@conchadepalacio.com with your name, response method, right requested, description of the data and proof of identity or authority. We will respond within the statutory periods. You may also contact Mexico's Ministry of Anti-Corruption and Good Government.
7. European rights
Where the General Data Protection Regulation (GDPR) applies, you may request access, correction, erasure, restriction, portability or objection; withdraw consent without affecting earlier processing; and complain to the supervisory authority where you live, work or where the alleged infringement occurred. You may also request information about safeguards used for international transfers.
8. California residents' rights
To the extent the CCPA, as amended by the CPRA, applies, California residents may request to know, access, correct or delete personal information; receive information about its sources, purposes and recipients; limit certain uses of sensitive information; and receive equal treatment. During the preceding twelve months, we may have collected identifiers and contact details, project information and Internet activity directly from you or your device, and disclosed them to hosting, security and, only with consent, audience-measurement providers for business purposes. We do not sell or share personal information for cross-context behavioural advertising and do not use sensitive information for purposes that trigger the right to limit. We will honour Global Privacy Control signals where legally applicable.
Use the contact details in section 1 to exercise these rights. We may verify your identity before responding. An authorised agent may submit a request with appropriate documentation. The site does not respond differently to “Do Not Track” signals because it does not conduct cross-site advertising tracking.
9. Cookies and analytics
Google Analytics does not load and receives no information until you select “Accept analytics.” If you accept, it may set the _ga cookie to distinguish visitors and _ga_QTFM7TGDX6 to persist session state, each with a default duration of up to two years. Advertising signals and personalization are disabled.
You may reject analytics without losing access to the site. You can withdraw or change consent at any time through the “Cookie settings” button visible on every page; when consent is withdrawn, we delete Analytics cookies accessible from this domain. Your choice is stored locally for six months so we do not ask on every visit. Hosting and security may use strictly necessary storage or logs that do not require this consent.
10. Children and changes
The site and services are not directed to children, and we do not knowingly collect their data. We may update this notice to reflect legal or processing changes; the current version and date will be published here.