QS Lean Thinking SA de CV
Effective 27 August 2026 · Last updated 27 August 2026
This Privacy Policy explains how QS Lean Thinking SA de CV (“QS Consulting”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you visit www.qslean.com (the “Site”), contact us, submit a form, use our chat widget, or receive text messages from us. Read it together with our Terms of Service.
1. Who we are
QS Lean Thinking SA de CV is an operations and project management consultancy incorporated in the United Mexican States, trading as QS Consulting. We are the data controller responsible for the personal information described in this policy.
For any privacy question, request or complaint, write to hroman@qslean.com.
2. Information we collect
We collect information that you give us, and information generated automatically when you use the Site.
Information you give us
- Contact details: name, business email address, mobile or landline phone number, company name and job title.
- Enquiry content: anything you type into a form, our website chat widget, a scheduling page, or an email you send us.
- Consent records: which consent checkboxes you selected, the date and time you selected them, and the page you were on. We keep this so that your consent can be evidenced.
- Engagement information: if you become a client, information about your organisation and project that you share with us during the engagement.
Information collected automatically
- Technical data: IP address, browser type and version, device type, operating system and screen size.
- Usage data: pages viewed, time on page, referring URL and the links you clicked.
We do not collect payment card numbers on the Site, and we do not knowingly collect sensitive personal data such as health, biometric, racial, religious or political information. Please do not submit it to us.
3. How we use your information
We use personal information for the following purposes:
- To respond to your enquiry and provide customer support.
- To coordinate the calls, meetings and appointments you request.
- To deliver and administer consulting services under an engagement agreement.
- To send customer care and transactional messages relating to an existing enquiry or engagement.
- To send promotional messages about our services, but only where you have given separate marketing consent.
- To operate, maintain, secure and improve the Site.
- To keep records of consent and to comply with our legal, tax and regulatory obligations.
Our legal bases for processing are your consent, the performance of a contract with you, our legitimate interest in operating and improving our business, and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before it.
4. SMS and text messaging
If you provide your mobile phone number and tick the consent checkbox in our website chat widget, QS Lean Thinking SA de CV may send you text messages. The checkbox is unchecked by default, so ticking it is an affirmative act by you. The consent disclosure names both types of message we send:
- Customer care messages: replies to support requests, ticket updates, appointment coordination and follow up communications relating to an existing enquiry or engagement.
- Promotional messages: special offers, discounts, event promotions and service announcements.
Consent to receive text messages is never bundled with any other agreement, and it is not a condition of purchasing any goods or services from us. Message frequency varies. Message and data rates may apply. Reply STOP to any message to unsubscribe, or HELP for help. The full program terms are set out in our Terms of Service.
Mobile information is never sold or shared for marketing. No mobile information will be sold, rented or shared with third parties or affiliates for marketing or promotional purposes. Sharing with subcontractors who provide support services, such as customer service providers and our messaging platform, is permitted solely so that we can deliver the messages you asked for.
Text messaging originator opt-in data and consent are excluded from every other sharing category described in this policy. That information will not be shared with any third parties for their own purposes.
5. How we share information
We do not sell your personal information. We share it only in these circumstances:
- Service providers. Vendors who process data on our behalf, under contract and on our instructions only. These include our CRM and messaging platform (LeadConnector, a HighLevel product), our email and calendar provider, our website host and our analytics provider.
- Professional advisers. Lawyers, accountants and auditors, where reasonably necessary.
- Legal and safety. Where required by law, court order or a competent authority, or to establish, exercise or defend legal claims.
- Business transfer. In connection with a merger, acquisition or sale of assets, subject to the protections in this policy.
As stated in section 4, mobile opt-in data and consent records are excluded from all of the categories above, except where strictly necessary for a service provider to deliver the messages you requested.
6. Cookies and analytics
The Site uses cookies and similar technologies that are strictly necessary for it to function, plus optional analytics cookies that help us understand which pages are useful. Our chat widget may set a cookie so that a conversation persists across page loads.
You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the Site from working. We do not use cookies for cross site behavioural advertising.
7. Data retention
We keep personal information only for as long as we need it for the purpose it was collected, and then for as long as the law requires. In practice:
- Enquiries that do not become engagements: up to 24 months from the last contact.
- Client engagement records: for the duration of the engagement, then for the period required by Mexican commercial and tax law.
- SMS consent and opt out records: for as long as we operate the message program and for at least four years afterwards, because we must be able to evidence consent and honour opt outs.
- Website analytics: up to 26 months, in aggregated or pseudonymised form where possible.
8. Security
We apply administrative, technical and physical safeguards appropriate to the sensitivity of the information. These include encrypted transport (HTTPS), access controls, multi factor authentication on business accounts, and vendor due diligence. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by law.
9. Your rights and choices
Depending on where you live, you may have the right to access your personal information, to have it corrected, to have it deleted, to object to or restrict how we use it, to withdraw consent, to receive a copy in a portable format, and not to be treated unfairly for exercising any of these rights.
- Mexico. Under the Ley Federal de Proteccion de Datos Personales en Posesion de los Particulares you may exercise your ARCO rights (Acceso, Rectificacion, Cancelacion and Oposicion) and revoke your consent by writing to the contact in section 14.
- United States. If you live in a state with a comprehensive privacy law, including California, you may exercise the rights that law grants you. We do not sell personal information, and we do not share it for cross context behavioural advertising.
- Europe and the United Kingdom. If the GDPR or UK GDPR applies to you, you may exercise the rights it grants and lodge a complaint with your supervisory authority.
Marketing opt out. To stop promotional email, use the unsubscribe link in any message. To stop promotional or customer care text messages, reply STOP to any message from us. Opting out of promotional messages does not stop messages that are strictly necessary to deliver a service you asked for, unless you opt out of those as well.
We will respond to a verified request within the time limit set by the applicable law. We may need to confirm your identity before acting on it.
10. International transfers
We are based in Mexico and several of our service providers are located in the United States. Where we transfer personal information across borders, we do so on the basis of your consent, the necessity of the transfer to perform a contract with you, or appropriate contractual safeguards with the receiving vendor.
11. Privacy of minors
The Site and our services are intended for business users aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has given us personal information, contact us and we will delete it.
12. Third party sites
The Site may link to third party websites, schedulers or platforms that we do not control. This policy does not apply to them. Review their privacy policies before providing personal information.
13. Changes to this policy
We may update this policy from time to time. The effective date at the top of the page shows when it last changed. Material changes will be announced on this page, and where the law requires it we will ask for your consent again. Continuing to use the Site after a change means you accept the updated policy.
14. How to contact us
QS Lean Thinking SA de CV (QS Consulting)
Attention: Personal Data Officer
Homero 205, Polanco V Seccion, Miguel Hidalgo, 11560, Mexico City, Mexico
Email: hroman@qslean.com
Web: www.qslean.com