Qonforme

Comprehensive privacy notice

Last updated: September 28, 2026

This is a courtesy translation. The Spanish version, issued under Mexican law, is the one that prevails.

1. Identity and address of the data controller

Traceteck, S.A. de C.V. ("Traceteck"), with its address at República de Uruguay 701, colonia Las Américas, C.P. 20230, Aguascalientes, Aguascalientes, Mexico, is the controller of the personal data it collects through the website qonforme.com and the Qonforme service (the "Service"), under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, its regulations and other applicable rules.

For any matter related to this notice, write to [email protected].

2. Who this notice applies to

  • Visitors and prospects: people who browse the website or request a trial, a quote or a demo.
  • Customers and users: representatives of the organizations that contract the Service and the people they give access to the portal or the shop-floor tablet.

The data of the staff who record, review or sign quality records in the Service (name, badge number, inspections, measurements, signatures and handwritten signatures, etc.) is captured and managed by each customer organization, which is its controller towards its staff. For that data, Traceteck acts as processor: it processes it only on the customer's behalf, following its instructions and the service agreement, and does not use it for its own purposes. Data subjects should address their requests about that data to their employer.

3. Personal data we collect

  • Identification and contact: name, email, phone, job title.
  • Organization data: trade name, legal name, tax ID (RFC), industry, approximate number of users, time zone and chosen access address (for example, acme.qonforme.cloud).
  • User account: username, password and PIN (stored only as a cryptographic hash, never in readable text), roles and access logs.
  • Billing, when you subscribe to a plan: tax data and whatever is needed for collection. Card data, if any, is processed directly by a payment provider; Traceteck does not store it.
  • Technical data: IP address, browser type, device, date and time of access, and usage logs of the Service, needed for its security and operation.

Sensitive data. Traceteck does not collect sensitive personal data for the purposes of this notice.

4. Purposes of processing

Primary purposes, necessary for your relationship with us:

  • Handling requests for information, free trial, quote or demo.
  • Creating and managing the organization's account and its users, and sending the sign-up confirmation.
  • Providing, maintaining, backing up and supporting the Service.
  • Verifying identity when signing in and when signing records, protecting account security and preventing misuse.
  • Invoicing, collecting and meeting tax, accounting and legal obligations.
  • Sending operational notices: changes to the Service, maintenance, due dates and changes to this notice.

Secondary purposes, not necessary for the Service:

  • Sending commercial information, product news and event invitations.
  • Running satisfaction surveys and internal statistics to improve the Service.

If you do not want your data used for secondary purposes, write to [email protected] with the subject "Secondary purposes". Your refusal does not affect the Service you contracted.

5. Transfers and processors

To operate the Service, Traceteck relies on providers that process data on its behalf and under its instructions, for example: cloud infrastructure and storage, email delivery, payment processing, web analytics and technical support. These providers are contractually bound to protect the data and not use it for their own purposes. Some may be located outside Mexico.

Traceteck does not sell or rent personal data. It only transfers it to third parties, without requiring your consent, in the cases the law allows, such as a request from a competent authority or the defense of rights in legal proceedings.

6. ARCO rights and withdrawal of consent

You have the right to access your data, rectify it if inaccurate, cancel it when you consider it is not needed for the stated purposes and object to its processing for specific purposes. You may also withdraw the consent you have given, to the extent the law allows.

To exercise them, send a request to [email protected] that includes:

  • your name and a means to send you the answer;
  • an official ID or, where applicable, the document proving representation;
  • a clear description of the right you wish to exercise and the data involved;
  • any document that helps locate the data.

We will answer within 20 business days of receiving the complete request and, if it is granted, we will carry it out within the following 15 business days. These periods may be extended once for an equal period when circumstances justify it.

If you work for an organization that uses Qonforme, address your request to your employer; if you send it to us, we will forward it to them.

7. Limiting use or disclosure

In addition to the procedure above, you may ask us at any time to stop sending you commercial communications by writing to [email protected] or using the unsubscribe link in every email. You may also sign up for the Public Registry to Avoid Advertising of Mexico's Federal Consumer Protection Agency (Profeco).

8. Cookies and similar technologies

The qonforme.com website uses Google Analytics, a service of Google LLC that, through cookies and similar technologies, collects technical information about your visit (pages viewed, time on site, traffic source, device and browser type, approximate location derived from your IP address). We use it only to obtain aggregate usage statistics and improve the site; we do not use it to identify you or for advertising. Google processes this information under its own privacy policy.

You can disable these cookies in your browser settings or by installing the Google Analytics opt-out browser add-on; the site will keep working normally. In addition, when the page loads, your browser downloads fonts from Google Fonts, which may log your IP address.

The Service's portal only uses the cookies strictly necessary to keep your session signed in securely and, on shop-floor tablets, to identify the registered device.

9. Security measures and retention

Traceteck applies administrative, technical and physical security measures to protect data against damage, loss, alteration, destruction or unauthorized use, access or processing, including: encrypted communications, passwords and PINs stored as cryptographic hashes, isolation of each customer's information, role-based access control and audit logs.

Data is kept for as long as the relationship with the customer lasts and, afterwards, for the periods required by applicable legal, tax or contractual obligations; once these end, it is blocked and deleted. Data from requests that do not lead to a contract is kept for up to 12 months.

10. Changes to this notice

This notice may change due to legal changes, changes in the Service or in our practices. The current version will always be published at qonforme.com/aviso-privacidad.html with its last-updated date; when the change is significant, we will also notify customers by email.

11. Authority

If you believe your right to personal data protection has been violated, you may go to the competent authority in the matter under current law.

Back to home