Skip to main content
ES EN
Become a Founding Partner

Privacy Policy

Last updated: September 29, 2026

Data controller

The Change Machine A.C., with its address at Calle 6 Norte Bis 227, Solidaridad, C.P. 77710, Playa del Carmen, Quintana Roo, Mexico, is responsible for the use and protection of your personal data, in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

For any questions or requests regarding your data, email us at hola@thechangemachinemx.org or call us at +52 998 291 2220.

Personal data we collect

Contact form

When you write to us through the website, we receive your full name, email address, organization or company (optional), phone number (optional), the way you would like to get involved and your message.

Donations

Donations are made through Donorbox, a third-party platform. Donorbox and its payment processors (such as Stripe or PayPal) receive the payment data; The Change Machine does not receive or store card numbers. For each donation, we receive the data the platform shares with us, such as your name, email address, the amount and the campaign you donated to.

Partnerships and sponsorships

If your company or organization joins us as a partner or sponsor, we collect the contact details of its representatives and the information needed to formalize the agreement.

Participants in our programs

If you or a family member take part in any of our programs, such as MAREA, we will give you a specific privacy notice when you enroll, setting out the data collected for that activity and the purposes for which it is used.

Purposes of processing

Primary purposes

These are necessary for your relationship with us:

  • Responding to your messages and requests for information.
  • Managing your donations, thanking you for them and, where applicable, issuing any receipts you request.
  • Formalizing and following up on partnerships, sponsorships and agreements.
  • Reporting on the use of resources, without publishing data that identifies you without your permission.
  • Complying with the legal and tax obligations that apply to us as a civil association (A.C.).

Secondary purposes

These are not essential. We only use your data for them if you do not object:

  • Sending you information about our programs, their impact and new ways to get involved.
  • Inviting you to the association's events and activities.

If you do not want us to use your data for these purposes, email us at hola@thechangemachinemx.org with the subject line "Opt-out of secondary purposes". Opting out does not affect your relationship with us.

Data transfers

We do not sell, rent or trade your personal data. We only share it when necessary:

  • Donorbox and its payment processors, to process your donations.
  • Service providers that help us operate the website and email, under a duty of confidentiality.
  • Competent authorities, when required by law.

Your ARCO rights

You have the right to Access your data, Rectify it if it is inaccurate, Cancel it when it is no longer needed and Object to its use for specific purposes (ARCO rights). You may also revoke any consent you have given us.

How to exercise them: send your request to hola@thechangemachinemx.org with the subject line "ARCO Rights". Include your full name, a copy of your official ID, a description of the data and of the right you wish to exercise, and any document that helps us locate the data. We will respond within a maximum of 20 business days.

Cookies and website tools

Our website uses cookies and similar technologies:

  • Essential: necessary for the site to work and remain secure.
  • Analytics: Google Analytics and Microsoft Clarity, loaded through Google Tag Manager, help us understand in aggregate how the site is used, for example which pages are visited and how people navigate through them.
  • Accessibility: the accessibility toolbar remembers your preferences, such as text size or contrast.
  • Third-party services: the Donorbox donation form and YouTube videos (which only load when you press play) apply their own privacy policies.

You can block or delete cookies in your browser settings. Some features of the site may then stop working properly.

Security and retention

We protect your data with administrative, technical and physical safeguards: encrypted connection (HTTPS), access restricted to the staff who need it and providers that meet security standards. We keep your data only for as long as necessary for the purposes described or as required by law; after that, we securely delete or anonymize it.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our activities or in the law. We will post any changes on this page, along with the date of the update.

Scroll to Top