Comprehensive Privacy Notice
1. Identity and address of the data controller
| Data controller | [[FULL LEGAL ENTITY NAME]] |
|---|---|
| Address | [[STREET, NUMBER, NEIGHBORHOOD, MUNICIPALITY, POSTAL CODE, STATE]] |
| Privacy contact | [[privacidad@sudominio.com]] |
| Responsible person or department | [[NAME OR DEPARTMENT IN CHARGE OF PERSONAL DATA]] |
2. Personal data we collect
We collect the data you provide directly when completing the investor profile questionnaire:
| Category | Data |
|---|---|
| Identification and contact | First and last names, date of birth, nationality, country of residence, city or state, email and phone number. |
| Employment | Occupation or profession and sector. If acting for a legal entity: entity name, title and country of incorporation. |
| Asset and financial | Ranges of annual income, liquid net worth and the amount to be analyzed; the share of your net worth it represents; and the source of funds. |
| Investment profile | Experience, instruments traded, horizon, liquidity needs, objectives, risk tolerance and return expectations. |
| Compliance | Politically exposed person (PEP) status, beneficial ownership, tax residence and whether you are a U.S. citizen or tax resident. |
| Technical | IP address, browser type, and date and time of submission. |
Sensitive data: we do not request sensitive personal data. Please do not include it in free-text fields.
Third-party data: if you provide data about another person (for example, the beneficial owner or a PEP relative), you represent that you have their authorization and have informed them of this notice.
Minors: this site is not directed at persons under 18 and we do not knowingly collect their data.
Documents: this site will never ask for copies of identification, passwords or bank details. If an engagement is formalized, any required documentation will be requested through a secure channel and governed by this same notice.
3. Purposes of processing
Primary purposes (necessary to handle your request)
- Assess your profile, financial situation, objectives and risk tolerance.
- Contact you and schedule a consulting session.
- Identify you and comply with applicable know-your-customer and anti-money-laundering obligations.
- Prepare, where applicable, a service proposal and the corresponding contract.
- Respond to requests from competent authorities and comply with legal obligations.
Secondary purposes (not necessary to handle your request)
- Send you informational content, event invitations and promotional communications.
- Produce internal statistics and improve the site and our services.
How to opt out of secondary purposes: check the corresponding box in the form or write to us at any time at [[privacidad@sudominio.com]]. Opting out does not affect the handling of your request.
4. Consent
Because this involves asset and financial data, we obtain your express consent through the acceptance checkbox in the form before your data is submitted. We keep a record of the date and the version of this notice you accepted.
5. Disclosures and transfers
Disclosures to processors. We share data with providers that process it on our behalf and under our instructions, such as our web hosting and email providers. Their servers may be located outside Mexico. These providers are required to protect the data and may not use it for their own purposes.
Transfers. We do not sell or share your data with third parties for their own purposes. It may be transferred without your consent only where the law allows, for example to competent authorities that lawfully require it.
[[If data is later shared with a custodian, intermediary or business partner, describe here with whom, for what purpose and whether your consent is required.]]
6. ARCO rights
You have the right to Access your data, Rectify it if inaccurate, Cancel it when you consider it is not needed for the stated purposes, and Object to its processing for specific purposes.
Send your request to [[privacidad@sudominio.com]] including:
- Your name and a means to send you our response.
- A document proving your identity or, where applicable, legal representation.
- A clear description of the data and the right you wish to exercise.
- Any information that helps us locate your data.
We will respond within a maximum of 20 business days and, if applicable, give effect to your request within 15 business days after our response. Exercising these rights is free of charge; only justified shipping or reproduction costs may apply.
7. Revoking consent and limiting use
You may revoke your consent or ask us to limit the use or disclosure of your data using the procedure in the previous section. Revocation is not retroactive and, in some cases, we may not be able to act on it immediately if a legal obligation requires us to retain the data.
You may also register with the Public Registry to Avoid Advertising (REPEP) of Mexico’s Federal Consumer Protection Agency (PROFECO).
8. Retention and security
If no service relationship is formalized, we will delete your data no later than [[12 months]] after your last contact with us. If one is formalized, we will keep it for the duration of the relationship and for the periods required by applicable regulations.
We apply reasonable administrative, technical and physical security measures, including encryption in transit (HTTPS), storage outside the server’s public folders, restricted access and internal notifications that contain no personal data.
10. Changes to this notice and authority
This notice may change due to legal developments or changes in our services or privacy practices. We will publish the current version on this page with its update date.
If you believe your right to personal data protection has been violated, you may contact the competent authority, which since 2025 is Mexico’s Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).