Privacy notice.
Version 2026-10-v4
Courtesy translation. The Spanish version is the legally binding one. Español
It Girl Concept, contact email hola@theitgirlconcept.com, is responsible for the use of your personal data under the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP) in force and its regulations.
What data do we use?
- First name, last name, email, country and age range.
- If you take the undertone quiz and choose to, your email and your result (warm, cool or neutral), and where you came to the site from (for example, “Instagram, direct message”, and only the domain of the site that referred you), so we know which channel works.
- If you take part in “I analyze my followers” (theitgirlconcept.com/analizame, in Spanish): your first name or your Instagram or TikTok username (@), your email, your confirmation that you are 18 or older, what you asked us about and 1 or 2 selfies. Your selfies are sensitive personal data; we only process them with your express consent, which you give by checking the corresponding box.
- Your questionnaire answers (lifestyle, hair, preferences and, if applicable, details about your event).
- Your face and body photographs. They are sensitive personal data because they make it possible to identify you by your physical features; that is why we only process them with your express written consent, which you give us by checking the corresponding box (electronic consent).
- Your purchase details (services, amount, date). Your card details are processed by Stripe; we neither see nor store them.
- If you buy a gift card: your name and email, the service and occasion you choose, and the names you write in “To” and “From”, which are printed on the card. From the person who receives it we only use the name you write; we don’t ask you for their email or phone number.
What for?
Necessary purposes
- Carrying out your image analysis and creating illustrative simulations (for example, a different haircut or hair color) with digital image analysis and editing tools.
- Delivering your report, handling your revisions and giving you support.
- Complying with tax and legal obligations.
- Issuing your gift card, emailing it to you and validating its code when it is redeemed.
Secondary purposes (only if you authorize them separately)
- Publishing your before and after on this site and on our social media. Only with your express consent, which you give by checking a separate box at checkout or in your order questionnaire; you choose whether you appear without a name (default) or with your first name, and we never use your last name or your contact details. We show you how it looks before publishing. You can revoke it at any time by writing to hola@theitgirlconcept.com. Incentive: at the Founder price, this permission is part of the discount conditions (if you don’t want to give it, you pay the regular price); at the regular price it is optional and, if you give it, we gift you The Vibe I See in You add-on. Details in the before-and-after terms. Nothing of a minor is published through this route: only with the authorization of her mother, father or guardian.
- Sending you promotions, only if you check a separate box (in the undertone quiz, at checkout or on /analizame): style tips, newsletter, post-purchase emails about complementary services and a single reminder if you started a payment and did not complete it. To personalize them we use your undertone (if you took the quiz), the services you bought, your language and the channel through which you found us. Every email includes a link to unsubscribe. For now these emails are only sent in Spanish.
- “I analyze my followers”: publishing on TikTok and Instagram a post with your selfie, a mini color reading and a digital color simulation on your photo that does not change your face or your skin, only if you check the authorization box on /analizame. We use your first name or, if you authorize it separately, your @; never your last name. If we choose you, we let you know before publishing. You can ask us to take the post down and delete your selfie at any time by writing to hola@theitgirlconcept.com; we do it the same day.
- If you take the undertone quiz and give us your email, storing it with your result to send you the mini guide (and news only if you check that separate box). You can ask us to delete it at any time.
You may refuse the secondary purposes without affecting your service. The only difference is the one stated above for the before and after: without that permission, neither the Founder price nor the gift applies.
Who do we share it with?
Your photos are processed with digital image analysis and editing tools through technology providers (hosting, private storage, email, payments and image processing services). These providers act as processors: they handle your data only on our behalf, to provide the service and under contract; some are located outside Mexico. For example, we use Resend (United States) to send and manage our emails. We do not allow them to use your photos to train their models or for any purpose of their own. We do not sell your data.
Links to stores (affiliate links)
Some pages, such as Your shades, link to external stores, and some of those links are affiliate links. Our site does not load code or cookies from those stores or from affiliate networks, and we do not give them your data. If you click, the store or the affiliate network may use its own cookies to record that you came from here, under its own privacy notice. More in How we choose products.
Cookies and visit measurement
We use three cookies of our own. None of them is used to show you ads:
- itg_utm: stores which post or campaign you came from (for example, “tiktok”), for up to 30 days, so we know which content brings purchases.
- itg_pais: stores the country you visit us from, for up to 7 days, to show you the prices and payment methods of your country.
- itg_idioma: stores the site language, only if you change it.
To count visits we use Umami, which does not use cookies or store data that identifies you.
You can delete or block cookies in your browser settings. The site keeps working; we just won’t know where you came from, and we won’t show your country’s prices by default.
How long do we keep it?
- Your photos and simulations are deleted when your order closes or, at the latest, 14 days after your delivery, unless you authorize us to use them for before and after. Aesthetic simulations are always deleted, even with that permission.
- Your report (which contains your image) is deleted from our systems 30 days after your order closes; download it to keep it.
- Your purchase data is kept for as long as tax laws require.
- Your undertone quiz email is kept for up to 24 months from your last interaction, or until you unsubscribe.
- If you unsubscribe from our emails, we keep only an encrypted fingerprint of your email so we don’t subscribe you again by mistake.
- In “I analyze my followers”: if we don’t choose you within 60 days, we delete your selfies and your contact details; if we choose you, we keep your selfie while the post is published; if you don’t finish your request, we delete it after 2 days.
- Gift card data, while the card is valid (12 months) and afterwards for as long as tax obligations require.
Minors
A minor’s photos are only received with the express consent of her mother, father or guardian, given in the order form before any photo is uploaded. We never perform an aesthetic simulation on minors, and nothing of a minor is published without a separate authorization from the guardian. “I analyze my followers” is only for adults 18 and over: we do not receive or publish selfies of minors.
Your rights (ARCO) and how to revoke your consent
You can access, rectify, cancel or object to the use of your data, and revoke your consent, by writing to hola@theitgirlconcept.com with your name and the email you used to purchase. We respond within a maximum of 20 business days. If you revoke your consent, we stop using your photos and delete them even if your order is not finished; the refund follows our refunds policy.
If you believe your right to data protection has been violated, you may turn to the competent authority on personal data protection (since 2025, the Ministry of Anti-Corruption and Good Governance, Secretaría Anticorrupción y Buen Gobierno).
Changes to this notice
If we change this notice, we will publish the new version here with its date. We record which version you accepted with each order.