Privacy notice
Privacy
This notice covers the Aceves company website at www.aceves.mx. It describes what the site does today.
Last updated
Who runs this website
This website is run by Aceves LLP, a limited liability partnership registered in Almaty, Kazakhstan, BIN 261040026632. Registered names and the full address are on the company details page.
What the website collects
The website has no visitor accounts, analytics or advertising trackers, and it sets no cookies of its own. It asks for personal information in one place: the contact form. Only the contact page runs scripts: our own form script and Cloudflare's security check, described below. The other pages contain no scripts.
The contact form
When you send a message, the form sends your name (if you give one), your email address and your message to our contact service, together with the result of the security check. The service runs on Amazon Web Services (AWS) in its US East region. Like any web service, it also receives your IP address and the technical request headers your browser sends.
The service checks the message and, if it passes the checks, sends it as an email to the company's mailbox through Amazon Simple Email Service. Your email address is set as the reply address so we can answer you. The service does not keep a copy of the message. The delivered email stays in the company's mailbox with our other correspondence.
We use what you send only to read and answer your message.
Limits on repeated messages
To stop the form being used to send bulk mail, the service counts accepted messages per network address and hour. It does not store your IP address. It stores a one-way keyed hash of the address (for IPv6, of its first half), combined with the hour, and a count. Each record expires two hours after the start of its hour, and AWS deletes expired records automatically, usually within a few days.
The service writes brief technical log entries, such as whether a message was delivered or refused and how long the request took. They contain no names, email addresses, message text, IP addresses or security-check tokens, and are deleted after 14 days. AWS also processes request information to run and protect its services, under its own practices.
Security check by Cloudflare
The contact page uses Cloudflare Turnstile to tell people from automated programs. Only that page loads it. Turnstile runs from Cloudflare's servers in your browser, and Cloudflare processes your IP address, information about your browser and device, and signals from the check itself. It then issues a single-use token, which the form sends with your message; our service asks Cloudflare whether the token is valid before sending anything.
Cloudflare is a separate company and handles this information under its Turnstile privacy addendum. We use the check only for security, not for analytics or advertising.
Page delivery
The website's files are stored in Amazon S3 and delivered by Amazon CloudFront, both run by Amazon Web Services. To deliver a page, CloudFront necessarily receives technical request information from your browser: your IP address, the address you requested, your browser's user agent and similar request headers. Pages are delivered from the CloudFront location nearest to you, which may be outside your country.
CloudFront access logs are off for this website, so we do not keep a record of page requests. AWS still processes request information to deliver and protect its service, under its own practices. Aceves does not use it to identify visitors or build visitor profiles.
Fonts and other assets
Fonts, styles and images are served from this website. Apart from the security check on the contact page, pages do not load scripts, fonts or images from other companies, so viewing them does not send requests to outside content networks.
Links to our product websites
The bar at the top of each page links to our mobile app websites. Those sites have their own privacy information, which applies once you open them. This notice does not describe our apps or TokenGate; each product documents its own processing.
Changes
We will update this notice before the website changes how it collects or uses information from visitors.