Privacy Notice
IgniteYou / Antizombie
Version 1.0 · Last updated: 28 October 2026
Terms and Conditions: https://igniteyou.online/en/terms · Versión en español: https://igniteyou.online/es/privacy
This Notice explains what personal data we collect, why we use it, who we share it with, and how you can control it. It applies to igniteyou.online, the Antizombie course pages, checkout, and the IgniteYou learning platform.
1. Personal data we collect
We collect only what we need for the purposes in Section 3.
| Category | Examples | Where it comes from |
|---|---|---|
| Identification | First and last name | You, at checkout |
| Contact | Email address | You, at checkout |
| Account | Password (stored hashed, never in plain text) and sign-in data | You, at checkout and sign-in |
| Purchase | Plan, number of seats, amount, currency, date, order number, payment status, refunds and payment disputes | Created when you buy; payment status from Stripe or PayPal |
| Payment confirmation | Payment status and the Stripe or PayPal transaction reference. Your card or PayPal account details are entered with Stripe or PayPal, not on our forms | Stripe or PayPal |
| Invoicing (only if you ask for a CFDI) | Name or business name, RFC, tax regime, tax postal code, CFDI use | You, on request |
| Seat holders | Name and email of people you assign a seat to | The Buyer |
| Learning activity | Lessons started and completed, progress percentage, quiz or multiple-choice answers, dates and times | Your use of the platform |
| Course reflections (optional) | Free-text answers you write in course questionnaires and module exercises. May contain sensitive data (see Section 2) | You, only if you choose to write them and consent |
| Community posts | What you post in community, group, or live spaces, if and when we offer them (we do not offer them today) | You |
| Testimonials | Your words, name, image, or voice, only if you agree to give a testimonial | You |
| Technical | IP address (also used to estimate your country so we can show an approximate price in Mexican pesos), browser and device type, session identifiers, server and application logs | Automatically (see Sections 11.2 and 12) |
| Support | Messages you send us by email or WhatsApp, and your phone number if you write to us on WhatsApp | You |
Card numbers. You enter your payment details with Stripe (on Stripe's hosted checkout page, for card, Apple Pay, Google Pay, and Link) or with PayPal, not in our forms. Our checkout form sends us only your name, email, and password. We never receive or store your full card number.
Financial data. Purchase and payment-confirmation data are financial data. We process them to perform the contract you asked for. You also give your express consent by accepting at checkout and paying.
2. Sensitive data: your course reflections
Some course questionnaires and module exercises invite you to write personal reflections in your own words. Writing them is optional. You can complete the course without saving any reflection.
Because reflections can reveal very personal matters, such as your emotional or psychological state, your health, or your beliefs, we treat them as sensitive personal data. We do not ask for any other sensitive data.
- Your express written consent first. We save reflections only after you give your express, written consent through a separate consent step inside your signed-in account, before your first reflection is saved. It is separate from accepting our Terms and Conditions, and the box is never pre-ticked. We keep a record of your consent (date, time, and the version of this Notice).
- What we use them for. Only to store your reflections and show them back to you in the course. We never use them for marketing, never sell them, and never publish them.
- Withdrawing and deleting. You can withdraw this consent at any time (Section 7) or ask us to delete your reflections (Section 6). When you withdraw, we stop saving new reflections and delete the ones saved.
- How long we keep them. See Section 11.2.
Please do not write details about other people in your reflections.
3. Why we use your data
3.1 Necessary purposes
We need your data for these purposes to provide the service you bought:
- Create and manage your account and seats, and verify your identity when you sign in.
- Process your payment, refunds, and payment disputes through Stripe or PayPal.
- Give you access to the course and record your progress. Your progress record is also used to apply the refund rules in our Terms and Conditions.
- If you consent (Section 2), save your course reflections and show them back to you.
- Send service messages: receipts, access instructions, security notices, and changes to our Terms or this Notice.
- Answer support requests, refund requests, and complaints, including before PROFECO.
- Issue CFDI invoices if you ask for one and meet our tax and accounting obligations.
- Protect the Service and its members: prevent fraud, account sharing, unauthorized copying or distribution of course content, and security incidents, and enforce our Terms and Conditions.
- Close the seats of anyone we learn is under 18 and delete their data.
- Exercise or defend legal rights and comply with orders from competent authorities.
3.2 Optional purposes (you can say no)
You can refuse these and still buy and use the course:
a. Send you news, offers, and promotions about Antizombie and IgniteYou by email.
b. Invite you to surveys or product research.
c. Publish your testimonial (see Section 3.3).
We also create aggregated, de-identified statistics to improve the course. Data that no longer identifies you is not personal data.
How to say no: leave the "I want to receive news and offers" box unchecked at checkout; or later, use the unsubscribe link in any marketing email or write to [email protected] with the subject "Optional purposes." Saying no never affects your access or your refund rights.
3.3 Testimonials
We use your name, image, voice, or testimonial in marketing only with your separate, express consent, given each time and stating where and how it will appear. Giving a testimonial is never a condition of buying or of a refund. You can withdraw it at any time; we will stop new uses and remove it from places we control, but we cannot recall copies already published by third parties.
4. Who we share your data with
4.1 Service providers that work for us
These providers handle data on our behalf and under our instructions. That is not a transfer under Mexican law. We require them to keep it confidential and use it only to serve us.
| Provider | What they do | Data |
|---|---|---|
| Stripe | Payment processing for card, Apple Pay, Google Pay, and Link payments | Name, email, payment details entered with Stripe, transaction data, device and IP data for fraud checks |
| PayPal | Payment processing for PayPal payments | Name, email, payment details entered with PayPal, transaction data, device and IP data for fraud checks |
| Hostinger (shared hosting) | Hosts the website, platform, database, and logs | All platform data, including reflections |
| Cloudflare | Network delivery and security in front of our server (all traffic passes through it), bot protection, email-address protection on our pages, and Cloudflare Web Analytics (page-performance statistics) | IP address, request and device data |
| Vimeo | Plays course and sales videos | IP address, device data, viewing data |
| jsDelivr (content network) | Delivers open-source page components (icons, pop-up dialog library) | IP address and browser request data |
| Google Fonts (Google) | Delivers the typefaces used on our pages | IP address and browser request data |
| Email-sending provider | Sends receipts and service messages | Name, email |
Stripe and PayPal also use some data for their own purposes, such as fraud prevention and compliance, under their own privacy policies (Stripe, including Link: https://stripe.com/privacy and https://link.com/privacy · PayPal: https://www.paypal.com/us/legalhub/paypal/privacy-full). For those purposes they are responsible, not us. If you pay with Apple Pay or Google Pay, Apple or Google also process your data under their own policies. Vimeo and Google may also process data under their own policies. If you write to us on WhatsApp, WhatsApp processes your phone number and messages under its own terms and privacy policy.
4.2 Transfers that the law allows without your consent
| Recipient | Why |
|---|---|
| Mexico's tax authority (SAT) and authorized CFDI certification providers | Issue and report invoices; tax compliance |
| Courts, PROFECO, the Secretaría Anticorrupción y Buen Gobierno, and other competent authorities | Comply with lawful orders; exercise or defend legal rights |
| Banks and card networks, through Stripe or PayPal | Complete your payment and resolve payment disputes, including sending proof of purchase, acceptance, and access |
We do not sell your personal data, and we do not transfer it to third parties for their own purposes except as described above. If that ever changes, we will update this Notice and ask for your consent first.
If the business is ever transferred to a company owned by us or to a buyer, your data would pass to that new owner to continue the Service. We will tell you in advance, the new owner will be bound by this Notice, and we will ask for your consent where the law requires it.
4.3 Data processed outside Mexico
Our providers may store or process data outside Mexico. Our hosting provider's data centers may be located outside Mexico. Cloudflare operates a worldwide network. Google (fonts), Vimeo, and jsDelivr receive your IP address when pages load, wherever their servers are. Stripe states that it transfers data to several countries, including the United States. PayPal may also process data outside Mexico under its own privacy policy.
5. Adults only (18+)
- The Service is only for people 18 or older. Anyone under 18 may not buy, register, or use a seat, and we do not knowingly collect their data.
- If we learn that a user is under 18, we close the seat and delete that person's personal data, keeping only what the law requires us to keep (such as tax records of the payment). Refunds in that case follow Section 2.3 of our Terms and Conditions.
6. Your rights: access, correction, deletion, and objection
You, or your legal representative, may at any time:
- Access the personal data we hold about you and learn how we use it.
- Correct data that is inaccurate, incomplete, or out of date.
- Delete (cancel) your data. We first block it: we keep it only to deal with possible legal responsibilities until the legal limitation period ends, and then we delete it and tell you. Some data cannot be deleted while the law or our contract requires us to keep it, such as tax records.
- Object to processing for a legitimate reason, or object to automated processing that significantly affects you. We do not make automated decisions that have legal or similarly significant effects on you.
Exercising one right does not stop you from exercising another.
How to make a request. Email [email protected] with:
- your name and an email or address where we can reply;
- a copy of an official ID; a representative must also send their ID and proof of authority;
- a clear description of the data concerned (not needed for access requests);
- the right you want to exercise or what you are asking for; and
- anything that helps us find your data, such as your account email or order number.
For corrections, tell us what should change and attach supporting documents.
Deadlines (business days). We give you our decision within 20 business days of receiving your request. If it is granted, we carry it out within 15 business days after that. Each period can be extended once, for the same length, when the case justifies it, and we will tell you why. Access is given as electronic files or copies once your identity is confirmed.
Cost. Free. We may only charge actual reproduction or shipping costs. If you repeat the same request within 12 months, any charge will not exceed three times the daily UMA value, unless this Notice changed substantially.
When we may refuse. If identity or authority is not proven; if we do not hold the data; if it would harm someone else's rights; if a law or authority prevents it; or if the change was already made. We will always explain why, through the same channel you used and within the deadlines above.
If you disagree, or we don't answer. You may file a data-protection request (solicitud de protección de datos) with the Secretaría Anticorrupción y Buen Gobierno within 15 business days after we give you our answer. If we don't answer, you may file once our deadline has passed. See Section 15.
7. Withdrawing your consent
You may withdraw your consent at any time. Withdrawal does not affect processing that already took place. Write to [email protected] with the subject "Withdraw consent" and a copy of your ID. We answer within the deadlines in Section 6.
If you withdraw consent for a necessary purpose, we may no longer be able to provide the course; refunds then follow our Terms and Conditions. We will keep any data the law requires us to keep.
8. Other ways to limit use or disclosure
- Marketing emails: use the unsubscribe link or write to us. We keep an internal list of people who asked not to be contacted.
- REPEP: if you do not want advertising by phone call or text message, you can register your number, free of charge, in PROFECO's Public Registry to Avoid Advertising (REPEP) at https://repep.profeco.gob.mx or by phone at 800 962 8000.
- Cookies: you can block or delete cookies in your browser (Section 12). Blocking essential cookies prevents sign-in and checkout.
9. Who is responsible for your data
IgniteYou (operated by Bernardo Pérez Vázquez), an individual (persona física) doing business in Mexico as "IgniteYou" and "Antizombie," RFC PEVB850123UD5, with address for all purposes of this Notice at Fuente de las Cibeles M9 L4, Iguazú 101, Residencial Aqua, C.P. 77560, Cancún, Quintana Roo, Mexico ("we," "us"), is responsible for your personal data.
Privacy contact. Requests about your data are handled personally by the person named above. Email [email protected], Monday to Friday, 9:00 to 18:00 (Cancún time). Our WhatsApp number, +1 (713) 330-3367, is for WhatsApp support only (no calls); please send requests about your personal data by email.
Channel for notices. [email protected] is our channel for all requests, notices, and complaints about this Notice and your personal data. Requests and notices sent to that address, and our replies to the email you use, have full effect and count as received on the next business day after they are sent.
IgniteYou (operated by Bernardo Pérez Vázquez) · RFC PEVB850123UD5 · Mexico · [email protected] · WhatsApp: +1 (713) 330-3367 (WhatsApp support only, no calls)
Terms and Conditions: https://igniteyou.online/en/terms
10. Community spaces and other members
We do not offer community, group, or live spaces today. If and when we offer them, what you post there can be seen by other members. Under our Terms and Conditions, every member must keep what other members share confidential and may not record, screenshot, copy, repost, or disclose it outside the Service. Still, we cannot fully control what other people do. Please share only what you are comfortable with, and do not share sensitive data. We may remove posts that break our rules or reveal other people's personal data. If someone has misused information you shared, write to [email protected].
11. Security and data retention
11.1 Security
We use reasonable administrative, technical, and physical security measures, consistent with industry standards, to protect personal data against damage, loss, alteration, destruction, and unauthorized access or use. In particular:
- our website is served over an encrypted HTTPS connection;
- passwords are stored hashed, not in plain text;
- payments are processed by Stripe or PayPal, and your card details never reach our server; and
- anyone who handles your data for us must keep it confidential, even after their role ends.
No system is completely secure, and we cannot guarantee absolute security.
If a security breach significantly affects your property or moral rights, we will inform you immediately so you can protect yourself, and we will give any other notices the law requires.
11.2 How long we keep data
- Account and purchase data: while your account is active.
- Learning activity: deleted within 12 months after your access ends or you close your account.
- Course reflections: deleted when you withdraw your consent or ask us to delete them, and in any case within 12 months after your access ends or you close your account.
- Community posts (if and when offered): same as learning activity.
- Tax and accounting records: for the period tax law requires (generally five years).
- Records of a breach of contract or non-payment: deleted no later than 72 months after the event.
- Marketing list: until you unsubscribe.
- Testimonials: until you withdraw consent.
When data is no longer needed, we block it for the time needed to deal with possible legal responsibilities and then delete it securely.
12. Cookies and similar technologies
We use only the cookies we need for the site to work. We do not use advertising cookies or tracking pixels.
| Name | Purpose | Duration | Type |
|---|---|---|---|
ignite_you_session |
Keeps your session (sign-in, checkout steps). Secure, not readable by page scripts (HttpOnly) | 2 hours | Our own, essential |
XSRF-TOKEN |
Protects forms against fraudulent requests. Secure | 2 hours | Our own, essential |
| "Remember me" cookie | Keeps you signed in, only if you tick "remember me" | Until you sign out or it expires | Our own, optional |
Page-performance statistics. We use Cloudflare Web Analytics to see how fast our pages load. Cloudflare states that it does not use cookies or similar browser storage for these statistics and does not use them to track individuals.
Third-party content. Some pages load content from third parties, which receive your IP address and browser data and may set their own cookies under their own policies:
- Vimeo: video player (sales page).
- Google Fonts (Google): typefaces on our pages; your IP address is sent to Google.
- jsDelivr: icons and the pop-up dialog library used on the join and checkout pages.
- Cloudflare: security, bot check on the sign-in page, email-address protection, and page-performance statistics.
- PayPal: if you choose to pay with PayPal, PayPal's payment pages or window, under PayPal's policies.
Card, Apple Pay, Google Pay, and Link payments happen on Stripe's own checkout page under Stripe's policies.
Blocking essential cookies prevents sign-in and checkout. If we ever add advertising or other tracking tools, we will update this Notice and, where required, ask for your consent before using them.
13. Buyers outside Mexico
We apply this Notice to everyone and answer access, correction, deletion, and objection requests from buyers in any country through the process in Section 6. The law where you live may give you additional rights; please tell us your country in your request.
14. United States residents
- State privacy laws. California's privacy law (CCPA/CPRA) and similar state laws apply only to businesses that meet revenue or data-volume thresholds. We do not currently meet them, so we do not claim compliance with those laws, and we will review this if our size or practices change. We do not sell your personal information or share it for cross-context behavioral advertising.
- Marketing email follows the federal CAN-SPAM Act: clear sender identification, a working unsubscribe link, and honored opt-outs.
- Security breaches: we will give any notice required by the breach-notification law of your state.
- Age: the Service is for adults 18 or older only (Section 5).
15. Authority
The authority that oversees the protection of personal data held by private parties in Mexico is the Secretaría Anticorrupción y Buen Gobierno, through its Personal Data Protection Unit (https://www.gob.mx/buengobierno). If you believe your rights have been violated, you may contact it.
16. Changes to this Notice
We will publish any change at https://igniteyou.online/en/privacy with a new "Last updated" date. If a change is material, for example new purposes, new transfers that need your consent, or new types of data, we will also email registered users at least 15 calendar days before it applies. If we want to use your data for a new purpose not described here, we will ask for your consent again.
17. Your consent
By giving us your data after this Notice is made available to you, you consent to its use for the necessary purposes in Section 3.1. You give express consent for financial data by accepting at checkout and paying. Optional purposes, testimonials, and course reflections (sensitive data) require your separate consent, as explained above. Reflections need your express written consent through the separate step described in Section 2.
18. Language
This Notice is available in English and Spanish (https://igniteyou.online/es/privacy). For people in Mexico, the Spanish version governs. For everyone else, if the two versions differ, the English version governs.