Privacy

• Controller and contact

  Acumaris, reachable at contact@acumaris.com. Details of the owning company, its registration, and its address are provided in writing to anyone who requests them and, in all cases, before an engagement is signed.

A · If you write to us

• What data we process

  What you give us through the form or by email: name, firm, title if you provide it, email address, country or countries and sector of interest, your role in the transaction, the option you choose, the chain if you choose to name it, and anything you want to tell us. If you request an analysis of a specific chain, also the record of your acceptance of the terms: what you accepted, when, and from which email address. Please do not include sensitive data or personal data about third parties.

• What we use it for

  To reply, verify that the request comes from a real company, prepare the first analysis or the example you request and, if you engage us, deliver the service. We do not sell it, disclose it to third parties for their own purposes (other than the service providers in section D, who process it on our behalf), or use it in work for anyone else.

• Legal basis

  Where the General Data Protection Regulation (GDPR) applies: taking steps at your request prior to entering into a contract (Art. 6(1)(b)), and our legitimate interest in replying to professional inquiries, verifying requesters, and keeping proof of the terms accepted (Art. 6(1)(f)). Submitting the form does not mean you agree to receive marketing unrelated to your request.

• The chain you name

  The name of the chain you give us is your confidential information. We do not contact that company, we do not tell anyone you asked, and we do not use it for any other purpose. At your request, we will sign a nondisclosure agreement before you give us the name.

• How long we keep it

  If there is no engagement, twelve months from the last contact, or sooner if you ask. If there is an engagement, for the term of the contract and the applicable statutory retention period thereafter. The record of the terms accepted, for as long as the confidentiality obligations remain in effect, plus the applicable limitation period.

B · Professional outreach we initiate

• What data we use

  We may write to executives at investment funds, family offices, credit funds, and transaction advisers to introduce our work. We use published professional data — name, title, firm, and professional contact details — taken from public professional profiles and corporate websites.

• Legal basis

  Where the GDPR applies, our legitimate interest in introducing our professional services (Art. 6(1)(f)), provided the conditions for relying on it are met. Our communications also comply with the rules that apply in each country and to each channel.

• If you’d rather not hear from us

  Just tell us. We’ll stop writing and keep only what we need to honor your request. If you don’t reply, we delete your data twelve months after the last contact.

C · Public information we analyze

• What we do

  We analyze, from the outside, how business locations and chains perform against their competition, using publicly available information: business directories, public records, and reviews consumers post on open platforms.

• How we use reviews

  We analyze them in aggregate. We do not publish, quote, or share individual reviews, or reveal who wrote them. Publicly visible reviewer-account details, such as how many reviews the account has posted, are used only to weight each review statistically and to compare, in aggregate, how the same accounts rate different locations — never to identify, contact, or profile anyone. The documents we deliver contain results aggregated by location, never figures for groups small enough to identify an individual.

• Legal basis

  Where the GDPR applies, our legitimate interest in conducting comparative studies of how locations and chains perform, based on public information, with results intended for organizations, not assessments of individuals (Art. 6(1)(f)) — and only where the necessity and balancing requirements are met. Where Mexican law applies, the Federal Law on the Protection of Personal Data Held by Private Parties.

• How long we keep it

  Reviews as collected, up to 24 months. Location-level indicators derived from the analysis, up to 36 months, reviewed annually. Anonymized statistical results may be retained for historical analysis.

• Do we hold data about you?

  If you posted a review and want to access, object to, or request deletion of the related data, write to contact@acumaris.com. To help us find it, include your username, the location, the date, or a link to the review, if you have them.

D · Applies to all of the above

• Providers and recipients

  We use service providers for website and form hosting, spam filtering, technical collection of public information, analytical processing (including AI tools), cloud storage, and email. Aggregated results go only to the clients who commission them. We do not sell or rent personal data.

• International transfers

  Some providers may process data outside the European Economic Area. Where the GDPR applies, those transfers comply with Chapter V of the GDPR (Art. 44 et seq.). You can ask us which safeguards apply.

• Your rights

  In the European Union: access, rectification, erasure, restriction, portability where applicable, and objection, including objection to processing based on legitimate interest (Art. 21 GDPR). In Mexico: the ARCO rights (access, rectification, cancellation, and opposition). In California, where the CCPA applies: the rights to know (access), correct, and delete. Write to contact@acumaris.com; where necessary, we will ask for reasonable information to verify your identity. In the European Union, we generally respond within one month; in Mexico, within the time limits set by law.

• Complaints

  In the European Union, you can lodge a complaint with the data protection authority of the Member State where you live or work, or where the alleged infringement took place. In Mexico, with the authority responsible for personal data protection. You can also write to us first; doing so does not affect your right to complain to the authority.

• Your browser

  We use no tracking, analytics, or advertising cookies. We store the language you choose in your browser, and nothing else. Fonts are served from our own server. The hosting provider logs technical connection data, such as IP addresses, for security.

• Security and automated decisions

  We use encrypted connections and restricted access. We do not profile individuals or make solely automated decisions about them.

• Minors

  This site is intended for professionals and businesses. We do not knowingly collect data from minors.

• Changes to this policy

  Any changes will be posted on this page with their date. Last updated: October 23, 2026.