Skip to content

Legal

Privacy Notice

Last updated: October 21, 2026

Colores de México, operator of the EPHORIA brand, with address in Mexico City, Mexico, is responsible for the processing of your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the Privacy Notice Guidelines.

This notice explains what data we collect, what we use it for and how you can exercise your rights.

1. Personal data we collect

We only collect data you give us directly, through the contact form on this site, by email, or while contracting and running an experience or event.

  • Identification data: your name and, where applicable, the company or institution you represent.
  • Contact data: email address and, if you choose to share it, phone number.
  • Project data: whatever you write about the experience, event or collaboration you are looking for.
  • Billing data: legal name, tax ID, tax address and invoice usage, only when you request a tax receipt.

2. Sensitive data

We do not collect sensitive personal data. If a specific experience required health, accessibility or dietary information in order to host you at the venue, we will ask for it separately and with your express consent, and use it only for that purpose.

3. Purposes of processing

We use your data for the following primary purposes, which are necessary for our relationship with you:

  • Answering your messages, requests and briefs.
  • Preparing proposals, quotes and contracts.
  • Producing, coordinating and following up on the contracted experience or event.
  • Managing access, tickets, cancellations and refunds.
  • Issuing tax receipts and meeting our legal and accounting obligations.

4. Secondary purposes

In addition, and only if you do not object, we may use your data to send you information about new productions, invitations and brand communications, and to build internal statistics that help us improve our experiences.

These purposes are not necessary for our relationship with you. You can object at any time by writing to the address at the end of this notice, or by using the unsubscribe link included in every communication.

5. Transfers and processors

We do not sell or trade your personal data.

To operate, we share data with providers acting as processors, who may only handle it on our behalf: email and hosting platforms, ticketing and payment systems, technical production vendors and accounting firms. All of them are contractually bound to protect your data and to use it solely to provide us with the service.

We only transfer data without your consent in the cases set out in article 37 of the Law, for example when required by a competent authority.

6. Access, rectification, cancellation and objection rights

You have the right to access your personal data, to rectify it when inaccurate, to request its cancellation when you believe it is no longer necessary, and to object to its processing for specific purposes. You may also revoke any consent you have given us.

To exercise any of these rights, send a request to the address at the end of this notice, stating your name, a means of replying to you, a copy of your official ID, a clear description of the data concerned and what you are asking for.

We will answer within a maximum of 20 business days and, where the request is well founded, act on it within the following 15 business days.

7. Data retention

We keep your data for as long as it is needed to fulfil the purposes described, and afterwards for the periods required by applicable tax and commercial law. Once those periods end, the data is blocked and securely deleted.

8. Security

We apply reasonable administrative, technical and physical safeguards to protect your data against damage, loss, alteration, destruction or unauthorised use. No system is infallible: should a breach significantly affect your rights, we will notify you without delay.

9. Cookies

This site uses cookies and similar technologies. Which ones we use, and how to disable them, is set out in our Cookie Policy.

10. Changes to this notice

We may update this privacy notice when our practices or the applicable law change. The version in force is always the one published on this page, with its last-updated date.

11. Supervisory authority

If you believe your right to data protection has been infringed, you may file a complaint with the Mexican data protection authority.

For anything concerning your personal data, write to us at:

contacto@coloresdemexico.events