Privacy policy
Last updated: October 19, 2026
Leer en español · The Spanish version is the primary version.
We respect your privacy. This policy explains in plain language who is responsible for your data, what we collect, why, who we share it with, and how to exercise your rights.
1. Who is responsible for your data
The data controller is {{NOMBRE_LEGAL}}, located at {{DIRECCION}}, Mexico, who operates the Ciudadanía Lista brand. Privacy contact: hola@ciudadanialista.com.
Ciudadanía Lista is a private educational product. We are not a government agency and are not affiliated with USCIS.
2. What data we collect
- Contact data: your email and, if you enter it, your first name (free practice or waitlist forms). Stored in MailerLite.
- Purchase data: name, email, product purchased, country/state for tax purposes, and date. Purchases happen on Payhip; we never see or store your card details.
- Practice progress: stored only in your own browser's local storage. It is never sent to us.
- Support messages: whatever you write to us by email.
We do not collect sensitive data. We never ask for or store your immigration status, A-Number, USCIS receipt number, or details of your case. Please do not send them to us. If we receive them by mistake, we delete them.
3. Why we use your data
Primary purposes (required)
- Delivering what you asked for: the free practice, the cheat sheet, or the products you bought.
- Providing support and processing refunds.
- Meeting tax, accounting, and legal obligations.
Secondary purposes (optional)
- Sending study tips, news, and offers about our products.
- Letting you know when we open new services (for example, the practice-session waitlist).
How to opt out of secondary purposes: click "unsubscribe" at the bottom of any email, or email hola@ciudadanialista.com with the subject "No marketing". Opting out does not affect your purchase or support.
We do not sell or rent your personal information.
4. Who we share data with (international transfers)
We use service providers that process data on our behalf. Some are outside Mexico, so international transfers occur:
| Provider | Purpose | Country |
|---|---|---|
| Payhip | Store, file delivery, tax calculation | United Kingdom |
| Stripe and PayPal | Payment processing (through Payhip) | US / European Union |
| MailerLite | Email delivery and forms | European Union / US |
| Website hosting provider | Technical security logs | US |
| Google Fonts | Website fonts (Google can see your IP) | US |
These transfers are necessary to fulfill our relationship with you, so they do not require additional consent. Each provider has its own privacy policy. We may also disclose data to authorities when required by law.
5. Your rights and how to exercise them
You may request access to your data, correction, deletion, or object to its use, and you may withdraw your consent at any time (in Mexico these are known as ARCO rights).
- Email hola@ciudadanialista.com with the subject "Privacy request" from the address you used with us.
- Include your name, the right you want to exercise, and a clear description of the data (and the correct information, for corrections).
- If you write from a different address, we may ask for minimal information to confirm your identity (never immigration documents).
- We will respond within the legal deadlines (up to 20 business days to respond and 15 business days to carry out the change, where applicable).
If you believe we did not handle your request properly, you may contact the Mexican data protection authority (currently the Secretaría Anticorrupción y Buen Gobierno).
To delete your practice progress, clear this site's data in your browser.
6. Cookies, tracking, and "Do Not Track"
This site currently does not use advertising or tracking cookies, and we do not allow third parties to track your activity for advertising. Because we do not do this kind of tracking, the site does not change its behavior when your browser sends a "Do Not Track" (DNT) signal.
If we add analytics or advertising pixels (for example, Meta or TikTok) in the future, we will first update this policy, show a cookie notice, offer a "Do Not Sell or Share" opt-out, and honor Global Privacy Control signals where the law requires it.
7. How long we keep data
We keep your email while you remain subscribed. Purchase data is kept as long as needed for support and tax and accounting obligations (usually 5 years under Mexican law).
8. Children
Our products are intended for adults. We do not knowingly collect data from anyone under 18.
9. Changes
If we change this policy, we will post the new version on this page with its update date and, for important changes, notify you by email.