Mercado North | Privacy Policy

1. Information we receive

Inquiries and quotes. We receive your name, company, email address, phone number, phone country and phone type, requested turnaround, message, and any files you choose to submit. You can request a quote without creating an account. We also receive information you send by email, phone, text, WhatsApp, or other business communication channels.

Accounts. Registration by email collects your full name, email address, and password, with optional company and phone details. Authentication is handled through our website’s authentication provider. If you choose Google sign-in, we receive the account identity and profile information made available through that sign-in, such as your name and email address. Account records can include a profile picture you upload, profile edits, authentication identifiers, confirmation and recovery events, and two-factor authentication settings if you enable that feature.

Client and project materials. We receive source documents, instructions, terminology, correspondence, and deliverables associated with inquiries and projects. Files may include personal information about you or other people, including identity, immigration, legal, financial, health, employment, or other sensitive information. Provide only what is needed and what you are authorized to share. The sensitive-material instructions in section 4 apply.

Business records. We maintain information needed for quotes, contracts, invoices, payment status, project administration, customer notes, and business correspondence. Payment providers may provide transaction confirmations and related billing information.

Technical information. Website and infrastructure services process information needed to deliver and protect the website, such as IP addresses, browser or device information, requested pages, timestamps, authentication and session information, and error or security logs. The quote-submission handler uses a hashed email address and, when supplied by the hosting infrastructure, a hashed IP address for rate limiting. Hashing is not a promise that data is anonymous.

Cookies and browser storage. We use browser storage for sign-in sessions and cookie preferences. Optional third-party content is described in section 5.

2. Why we use information

We use the information described above to:

• Answer inquiries, evaluate files, prepare quotes, and schedule calls.
• Create, authenticate, maintain, and support accounts.
• Provide and review requested language services and manage client relationships.
• Send account confirmations, recovery messages, quote confirmations, project communications, and invoices.
• Administer billing and verify payment status.
• Prevent abuse, enforce appropriate access, investigate errors, and maintain the website.
• Maintain appropriate business records, resolve disputes, and meet legal obligations.

3. Who receives information

We share information as reasonably needed for the purposes above with the following categories of recipients:

Website infrastructure, authentication, database, and storage providers. The website project uses Lovable Cloud and Supabase-compatible authentication, database, and storage services for accounts, profiles, quotes, and uploaded files.

Email providers. Lovable’s managed transactional email service handles account and quote messages. Quote notification emails include contact details, the message, requested turnaround, and attachment filenames; files are accessed separately through the administrator interface. Ordinary business email also handles client correspondence.

Scheduling and sign-in providers. Calendly processes information when you load or use the booking calendar. Google processes your sign-in when you choose that option. Their own privacy notices also govern information they process for their independent purposes.

Linguists and other service professionals. Qualified contractors may receive materials needed to evaluate or perform a project, subject to appropriate confidentiality obligations and any project-specific restrictions. We remain responsible for managing the services we provide.

Business systems and payment providers. Cloud storage, project management, customer relationship, language technology, accounting, and payment services may process information needed for the business relationship.

Professional and legally required recipients. We may disclose information to legal, accounting, insurance, or other professional advisers where reasonably necessary; to authorities when required by law; or as reasonably necessary to address fraud, security incidents, or legal claims. A business transfer may involve records relevant to the transferred business, subject to applicable law and continuing confidentiality obligations.

We do not publicly display client materials, deliverables, names, or project details for promotional purposes without prior written permission.

We do not sell personal information.

4. Confidential and sensitive materials; AI

We treat nonpublic client materials as confidential when received, including during quote evaluation. We use them to evaluate or perform requested services, administer the relationship, and meet applicable legal obligations. An applicable NDA, Business Associate Agreement, or other specialized agreement supplies any additional agreed protections.

Contact zach@mercadonorth.com before submitting protected health information, Social Security numbers, payment-card details, privileged legal communications, export-controlled information, or other materials requiring special handling. We can discuss whether the project is appropriate and arrange an approved transfer method and any required agreement. Do not put passwords or full payment-card information in the quote form or message field.

Receiving a file does not mean that every regulatory or security requirement for that file has been satisfied. We do not claim that all website uploads are HIPAA compliant or that sending a legal document preserves attorney-client privilege. Applicable legal duties are not waived merely because special handling was not arranged.

We may use language and business technology, including AI-assisted tools, as described in an applicable project agreement. We will not knowingly enter confidential client content into a generative-AI system without the client’s express authorization and reasonable safeguards appropriate to the information. Submitting a file, creating an account, or accepting website terms is not that authorization. Any permitted AI processing must be consistent with applicable law and project-specific restrictions.

5. Cookies, optional content, and choices

Our website uses essential session technologies and a first-party preference stored in your browser. These support sign-in and remember whether you accepted or rejected optional content.

The booking page uses a Calendly embed. The website’s consent controls are designed to keep it unloaded until you accept optional content. You may instead open Calendly directly using the separate link. That takes you to Calendly, where its own practices and choices apply.

You can select “Cookie preferences” in the footer to accept or reject optional content. Rejecting optional content does not prevent browsing the website or submitting a quote. Changing your choice stops future loading of the embedded content; it does not undo processing that already occurred or necessarily clear cookies previously set by another service. Browser controls can help you manage existing cookies and storage. Blocking essential storage can affect sign-in.

When Calendly or another optional service is loaded, that provider may collect device, usage, and identifier information under its own notice, including information it can connect with activity on other sites. Our site’s cookie setting does not control a separate provider’s website.

The Website does not currently change its behavior in response to browser Do Not Track signals. You can manage optional embedded content through “Cookie preferences” and contact us to exercise any opt-out rights provided by applicable law.

6. Payments and communications

The website does not include an on-site checkout or collection of card details. Service payments are arranged through the approved method in the applicable invoice or project documents. When a third-party payment service is used, its own privacy practices apply to the payment information it receives. Do not submit card or bank credentials through website messages or document uploads.

We send operational messages related to accounts, quotes, and projects. If we send promotional email, you can ask us to stop by emailing zach@mercadonorth.com and may use any unsubscribe option in the message. Opting out of promotional messages does not stop necessary account, security, billing, or project messages.

7. Storage, security, and retention

The website uses HTTPS. The Website uses private storage for quote attachments and profile pictures, administrator checks for quote-file access, and time-limited download links. Account settings include an optional authenticator-based two-factor feature. These controls do not make every transfer or file risk-free.

We use reasonable safeguards appropriate to the information and our operations. No electronic transmission or storage system is completely secure. Website uploads are not automatically malware-scanned. Please keep your own copy of submitted materials and protect your account credentials.

We retain information according to its purpose, applicable agreements, legal obligations, dispute or security needs, and the systems in which copies exist. Account closure and deletion of personal information are related but distinct requests. Closing an account does not automatically erase invoices, project records, email copies, or information we must lawfully retain.

We determine retention needs using the following criteria:

• Quote requests and attachments: the time needed to evaluate the request, communicate with you, and address related follow-up or disputes.
• Project source files, deliverables, and sensitive materials: the time needed to perform and revise the work, meet agreed handling requirements, and resolve project issues.
• Accounts, profiles, and pictures: the time needed to maintain the account, provide support, and address closure or deletion requests.
• Contracts, invoices, and correspondence: applicable accounting, tax, legal, insurance, and recordkeeping needs.
• Security records and backup copies: security and recovery needs, applicable retention obligations, and the storage provider’s backup lifecycle.

Any agreed project-specific deletion deadline remains subject to applicable law. Existing contractual commitments and applicable privacy rights remain effective. Closing an account does not cancel those commitments.

Our service providers and approved contractors may process information outside your state or country of residence. Applicable contractual and legal protections continue to govern that processing.

8. Access, correction, account closure, and deletion requests

You can edit available profile details and account-security settings in “My account.” To request account closure, deletion, access, or correction beyond those settings, email zach@mercadonorth.com or call 469-980-6297. You do not need to create an account to make a request. Please describe the request and the account email or project involved; do not send identity documents or passwords unless a necessary, appropriate verification method has been arranged.

We may verify your identity and authority and ask for information reasonably needed to locate records. Depending on the law that applies to the business and your information, you may have rights to access, correct, delete, or obtain a copy of information, withdraw consent, or opt out of certain processing. We respond as required by applicable law. Some information may need to be retained or may be subject to an applicable exception; we will explain a denial where required.

If we process information only on a business client’s instructions, we may coordinate the request with that client. We will not disclose another person’s confidential information in response to a request.

9. Children

The Mercado North website and accounts are intended for adults conducting business or seeking language services, not for children. You must be at least 18 to create an account. We do not knowingly collect information directly from children under 13 through this website. If you believe a child has submitted information, contact us so we can assess and address it. Client files may contain information about minors; that information requires appropriate authority and handling rather than being excluded from this policy.

10. Changes and contact

We may update this policy when our practices or applicable requirements change. We will revise the date and provide additional notice or obtain consent when required. A new policy does not retroactively authorize materially different uses of previously collected information merely because someone continues browsing.

For privacy questions, requests, or accessibility assistance:
Spanish With A Gringo LLC d/b/a Mercado North
Attn: Zach Bennett
Email: zach@mercadonorth.com
Phone: 469-980-6297
Website: https://mercadonorth.com