Privacy notice

Last updated: August 24, 2026

This notice explains what personal data I collect, what I use it for and how you can control it. It is written in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

This is an English translation provided for convenience. If there is any difference between versions, the Spanish version prevails.

1. Who is responsible for your data

Anna Leticia Corona Elizondo, operating under the trade name Anna Corona Mindfulness (formerly MBCT México), is responsible for the processing of your personal data.

• City of operation: Monterrey, Nuevo León, Mexico
• Contact email: programas@annamindfulness.com
• Website: annamindfulness.com

2. What data I collect

When you fill in any of the registration or information-session forms, I collect:

• Identification and contact data: name, email address and, where applicable, phone number.
• Information you choose to share: why you are interested in the program and any previous experience with mindfulness practice, if you decide to write it.

I do not collect financial data through the website. Payments are made by direct bank transfer, and I do not store information about your accounts or cards.

3. Sensitive personal data

The registration form includes questions about your emotional health: whether you have gone through episodes of depression or anxiety, and whether you are currently receiving psychological or psychiatric treatment.

Under the LFPDPPP, this information is sensitive personal data. I ask for it for one specific reason: MBCT is not right for every moment in life, and I need to assess with you whether this is yours. An acute depressive episode or a recent crisis calls for a different kind of support before this program.

How I handle this information:

• Only I have access to it.
• It is not shared with the rest of the group or with any third party.
• It is not used for advertising, targeting or any commercial purpose.
• It is kept for as long as you take part in the program and deleted afterwards, unless the law requires otherwise.

Your consent. Because this is sensitive data, the law requires your express consent. That is why the form includes a box you must tick deliberately: without it I cannot process your registration. You can withdraw this consent at any time by writing to programas@annamindfulness.com.

4. What I use your data for

Necessary purposes — without them I could not provide the service:

• Managing your registration and holding your place in the group.
• Sending you access to the sessions, practice materials and reminders.
• Issuing receipts and keeping track of payments.
• Answering your questions and following up between sessions.

Additional purposes — you can refuse them without affecting your participation:

• Letting you know about upcoming editions of the program or other courses.
• Inviting you to open sessions or sharing practice content with you.

If you don’t want to receive these messages, write to me at programas@annamindfulness.com and I’ll take you off the list. You can also use the unsubscribe link in any email you receive.

5. Who it is shared with

I do not sell, rent or trade your personal data. To operate, I rely on the following services, which act as data processors:

• Google (Forms, Drive and Gmail) — collecting and storing registrations, and email communication.
• Zoom — the platform where the live sessions take place.
• Netlify — hosting for this website.

These providers may store information on servers outside Mexico. By using the website and its forms, you consent to this transfer for the purposes described.

6. Recordings

Program sessions are not recorded. The group is a confidential space, and what is shared there is not recorded or reproduced outside it.

7. Your ARCO rights

You have the right to access your data, rectify it if it is inaccurate, cancel it when you consider it is no longer needed, and object to its use for specific purposes (known in Mexico as ARCO rights).

To exercise any of these rights, email me at programas@annamindfulness.com with:

• Your name and a way to contact you.
• A copy of an official ID, to confirm it is you.
• A clear description of which right you want to exercise and over which data.

I will respond within a maximum of 20 business days. If the request is granted, it will take effect within the following 15 business days.

8. Withdrawing your consent

You can withdraw the consent you gave for the processing of your data at any time, through the same email. Please note that in some cases I may not be able to act on the request immediately if there is a legal obligation to keep certain information, such as tax records.

9. Retention

I keep your data for as long as there is a relationship between us and, afterwards, for the period required by applicable tax and legal obligations. After that period, it is deleted.

10. Changes to this notice

If I change this notice, I will publish the updated version on this same page and change the date at the top. If the change is substantial and affects how your data is used, I will let you know by email.