Skip to content

Privacy notice

Comprehensive privacy notice, version 2026-10-19. It explains which personal data we process, why, who we share them with and how you can exercise your rights, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.

1. Data controller

The Performance Collective, with address at calle Chichén Itzá núm. 94, colonia CTM V Culhuacán, alcaldía Coyoacán, C.P. 04440, Ciudad de México, is the controller of your personal data (in this notice, "THE PERFORMANCE COLLECTIVE" or "we"). For any privacy matter, contact us by WhatsApp or phone at +52 55 4003 2661.

2. Personal data we process

- Coaching application: name, email, phone or WhatsApp, country, city, preferred contact method, language, program of interest (service, modality and duration), main goal, training experience and optional comments. We also record the date and the version of this notice you accepted. - Contact form: name, email and your message. - Newsletter (only if you subscribe): your email. - If you enroll and pay: amount, date, status and the PayPal transaction identifiers, and the record of the documents you accepted (version, date and time). We never receive or store your card or bank details: PayPal processes them. - During the program: body measurements, training and eating logs, and the health information described in section 3. The public forms do not ask for health data or photographs. Programs are only for people aged 18 or over; we do not knowingly collect data from minors.

3. Sensitive personal data (health)

Only if you enroll in a program, and in order to design it, adapt it and follow it up safely, we will process health data you give us: medical conditions, injuries, medicines or treatments relevant to exercise and eating, and, only if you authorise it, progress photographs. These data are processed only with your express written consent, which you give in a separate box, electronically, before the program starts. Only the coaching team sees them, they are not used for any other purpose and they are not shared with third parties except as stated in section 5. You can withdraw this consent at any time (section 8). If you do, we will not be able to keep providing the program safely.

4. Purposes

Purposes needed for the relationship you request: - assessing your application and contacting you through the channel you chose; - preparing your proposal, processing the payment and providing the coaching service; - answering your questions, complaints and requests, including privacy requests; - complying with legal, tax and security obligations, and keeping proof of what you accepted. Additional purposes, only if you authorise them: - sending you the newsletter, if you subscribe (you can unsubscribe at any time); - using your images and results for promotional purposes, only if you authorise it in a separate box (revocable). Refusing the additional purposes does not affect your application, your program or its price. You can refuse by sending a WhatsApp message to +52 55 4003 2661.

5. Who we share your data with

We use providers that process the data only on our behalf and under our instructions (processors): - Supabase: database where applications and programs are stored (servers in the United States); - Vercel: website hosting (United States); - Resend: emails sent by the website (United States); - PayPal: payment processing; - our email provider and, if you choose WhatsApp as your contact channel, WhatsApp. As a result, some of your data are stored outside Mexico. We do not sell or rent your data and we do not transfer them to third parties, except where the law allows it without your consent (for example, a request from a competent authority).

6. Security

Access is limited to two administrators, with a password and mandatory two-step verification. Every action on an application is recorded with its author and date. Backups are encrypted. Connections to the website are encrypted (HTTPS).

7. How long we keep your data

- Applications that do not become a program: up to 12 months from submission; then they are deleted. - Program data, including health data and progress photographs: for the duration of the program and up to 12 months after it ends; then they are deleted. - Payment and acceptance records: 5 years, for tax obligations and as proof of the contract. You can ask for your data to be deleted earlier (section 8), except what the law requires us to keep.

8. Your rights (ARCO) and withdrawal of consent

You can access, rectify or cancel your data, object to their processing, withdraw your consent or limit the use of your data by sending a WhatsApp message to +52 55 4003 2661 with: - your name and your application reference, if you have one; - the right you want to exercise and a clear description of the data; - a copy of your official ID (or, if a representative acts for you, their ID and the document proving the representation). We will reply within 20 business days at most and, if appropriate, carry out your request within the following 15 business days. Every request and its resolution are recorded.

9. Cookies

This website only uses one strictly necessary cookie (tpc_locale, to remember your language). We do not use analytics or advertising cookies.

10. Changes to this notice and authority

Any change will be published on this page with its new version and date; if the change requires your consent, we will ask for it. If you believe your right to the protection of personal data has been violated, you may go to the competent authority, the Secretaría Anticorrupción y Buen Gobierno (Mexico).

Last updated: October 19, 2026