Comprehensive Privacy Notice

This English version is provided for convenience. In case of any discrepancy, the Spanish version (Aviso de Privacidad) prevails.

In accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (the "Law") and other applicable provisions, we provide you with this Comprehensive Privacy Notice.

1. Identity and address of the data controller

Derecho en México, a trade name of SACNAMIS CORPORATION, S.A.S. de C.V. (the "Controller"), with address for notices at Calzada Norte 93, Ciudad Granja, Zapopan, Jalisco, Mexico, ZIP code 45010, is responsible for the processing of your personal data.

2. Personal data we collect

To fulfil the purposes described in this notice, we may collect the following categories of data:

• Identification: name, signature, Mexican tax and population IDs (RFC, CURP) or their foreign equivalents, nationality, date of birth, marital status and official ID.
• Contact: address, landline and mobile phone, email.
• Financial and property: assets, income, tax information and data needed for invoicing and collecting fees.
• Related to your matter: documents, facts, procedural history and information about third parties involved that you provide to us.

Sensitive personal data

Depending on the nature of the matter (for example, family or labor matters), it may be necessary to process sensitive data, such as information about your health or that of your relatives. Such data will be processed with enhanced security measures and only with your express written consent, which we will request in the services agreement or in a specific document.

If you provide us with data of third parties (counterparties, relatives, witnesses), you represent that you are authorized or have their consent to do so, and such data will be used only to handle your matter.

3. Purposes of processing

Primary purposes (necessary for the service)

• Responding to your request for information or initial consultation.
• Analyzing your matter and preparing the corresponding legal strategy.
• Providing the legal advice, representation and litigation services engaged.
• Drafting contracts, filings, complaints and other documents.
• Appearing before judicial, administrative and notarial authorities.
• Invoicing, collecting fees and complying with tax obligations.
• Keeping you informed about the progress of your matter.
• Complying with legal obligations and professional secrecy.

Secondary purposes (not necessary for the service)

• Sending you legal information of interest, newsletters and notices about legislative changes.
• Conducting quality and satisfaction surveys.

If you do not want your data used for secondary purposes, you may tell us at any time through the contact details above. Your refusal will not be a reason to deny you our services.

4. Data transfers

Your data may be shared, without requiring your consent, in the cases provided for by the Law, with:

• Courts, tribunals and administrative authorities, when necessary to defend or exercise your rights.
• Notaries and commercial notaries (corredores públicos), to formalize legal acts.
• Experts, correspondents and collaborating lawyers involved in your matter, under a duty of confidentiality.
• Tax authorities and other competent authorities, to comply with legal obligations or duly grounded requests.
• When your matter has international elements, lawyers, notaries, translators or authorities in the relevant country, only to the extent necessary to handle it.

We do not sell or assign your personal data to third parties for commercial purposes.

5. ARCO rights

You have the right to Access your personal data, Rectify it if it is inaccurate or incomplete, Cancel it when you consider it is not required for the stated purposes, and Object to its processing for specific purposes.

To exercise these rights, send a request to rsr@derechoenmexico.com or deliver it to our address, including:

• The data subject's name and a means to receive our response.
• A document proving your identity or, where applicable, that of your legal representative.
• A clear description of the data and the right you wish to exercise.
• Any document that helps locate your data.

We will respond within a maximum of 20 business days from receipt of the request and, if it is granted, it will take effect within the following 15 business days, in accordance with the Law. Some data must be retained for the periods required by applicable legal, tax and procedural provisions.

6. Revocation of consent and limitation of use

You may revoke your consent or limit the use and disclosure of your data by following the same procedure described for ARCO rights. Revocation will not have retroactive effects and, in some cases, may prevent us from continuing to provide the service.

In Mexico you may also register with the Public Registry to Avoid Advertising (REPEP) of the Federal Consumer Protection Agency (Profeco).

7. Cookies and similar technologies

This site only uses technical cookies and local storage needed for it to work (for example, to remember that you have read this notice). We do not use advertising cookies. You can disable them in your browser settings.

The site contains links to third-party services, such as WhatsApp and Google Maps, which have their own privacy policies. When you use the contact form, your message is sent through WhatsApp and is not stored on this site.

8. Changes to this privacy notice

This notice may be amended due to legal changes, changes in our services or in our privacy practices. Any change will be published on this page, with the date of the last update.

If you believe your right to data protection has been violated, you may contact the data protection authority established by the Law in force in Mexico.

Short-form Privacy Notice