COMPREHENSIVE PRIVACY NOTICE
Last updated: August 19, 2026
In compliance with Articles 15, 16, and other applicable provisions of Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, hereinafter, the “Law”), published in Mexico’s Federal Official Gazette (Diario Oficial de la Federación) on March 20, 2025, this Comprehensive Privacy Notice is issued under the following terms:
I. IDENTITY AND ADDRESS OF THE DATA CONTROLLER
The data controller responsible for the processing of your personal data is Moisés Salgado Nápoles, principal of the law firm commercially known as SALGADO MARETTE Regulatory & Compliance, with address at Insurgentes Sur 2388, 3rd Floor, San Ángel, Postal Code 01000, Álvaro Obregón, Mexico City, Mexico; telephone number 55 8255 2442; Federal Taxpayer Registry (RFC) number SANM8512116T0.
For purposes of this Privacy Notice, he shall hereinafter be referred to as the “Data Controller.”
The Data Controller is responsible for collecting, receiving, using, and protecting the personal data provided by clients, prospective clients, and other users. Personal data will be processed in accordance with the principles of lawfulness, consent, information, quality, purpose limitation, loyalty, proportionality, and accountability established under the Law.
By providing personal data in person, electronically, through social media, WhatsApp, by telephone, or through any other means, the data subject acknowledges having read and understood this Comprehensive Privacy Notice and authorizes the processing of personal data in accordance with its terms.
If you do not agree with the terms of this Privacy Notice, you are not required to provide personal data and should refrain from doing so. However, where certain information is essential and necessary for the provision of professional services, failure to provide such information may prevent us from providing those services.
SALGADO MARETTE may collect personal data through the following channels:
Telephone.
Social media.
Email.
Written communications and forms completed by the data subject.
WhatsApp.
In-person communications.
II. PERSONAL DATA COLLECTED
For purposes of carrying out the activities described in this Privacy Notice, we may collect the following categories of personal data:
Identification Data
Full name.
Where the client is a legal entity, information concerning its legal representative and powers of attorney.
Address.
Date of birth.
CURP — Mexico’s Unique Population Registry Code.
RFC — Mexican Federal Taxpayer Registry number — and tax status certificate.
Mexican voter identification card (INE).
Passport or other government-issued identification.
Handwritten signature.
Gender.
Position or job title.
Nationality.
Contact Data
Email address.
Landline and/or mobile telephone number, personal or business telephone number, WhatsApp, Telegram, and social media contact information.
Financial or asset-related data, solely where necessary for the provision of legal services.
Electronic signature.
Information regarding events, facts, or incidents forming the basis of the professional services requested.
Employment or professional information.
Academic information.
Personal image, for two separate purposes:
a) identification; and
b) testimonials or similar purposes. In the latter case, the data subject’s express consent will be obtained before use through the corresponding authorization form.In certain cases, sensitive personal data, including health status or medical information, provided that such information is strictly necessary for the particular matter and the data subject has given express written consent.
Personal data relating to minors must be provided by their parents, guardians, or any person legally exercising parental authority or guardianship.
III. PURPOSES OF PROCESSING
A. Primary Purposes — Necessary for the Provision of Services
Personal data may be processed for the following primary purposes:
Preparing fee quotations, engagement proposals, or professional services agreements.
Sending proposals and reports regarding the progress of professional services.
Providing legal advice, representation, and professional services in connection with matters formally engaged.
Preparing agreements, legal briefs, complaints, claims, settlements, and other legal documents.
Filing and managing registrations, authorizations, administrative appeals, and proceedings before administrative or judicial authorities, including, for example, COFEPRIS, PROFECO, IMPI, SEMARNAT, CONAPRED, courts, and other municipal, local, or federal authorities.
Identity verification and preliminary evaluation of a matter.
Compliance with obligations arising from the legal relationship between the data subject and the Data Controller.
Billing, collection, and compliance with tax obligations.
B. Secondary Purposes
Personal data may also be processed for the following secondary purposes:
Sending newsletters, legal communications, or regulatory updates.
Invitations to events, seminars, training sessions, or other activities promoted by the Firm.
Client satisfaction surveys.
Marketing, advertising, or business development activities related to legal services.
If you do not wish your personal data to be processed for these secondary purposes, you may communicate your objection by email to: contacto@salgadoregulatory.com
Refusal to authorize the use of personal data for secondary purposes will not, under any circumstances, prevent you from accessing or obtaining professional services that you may request or engage.
IV. TRANSFERS OF PERSONAL DATA
Personal data may be transferred to third parties without requiring additional consent only in those circumstances permitted under Article 36 of the applicable Law.
In particular, transfers may be made to:
Laboratories, where expert reports or chemical, toxicological, medical, or similar testing is required in connection with the professional services provided.
Notaries Public, for the formalization, notarization, certification, or recording of legal documents.
External service providers, including experts, specialized couriers, translators, administrative agents, and technical specialists whose participation may be necessary to perform the legal engagement.
Accounting firms or accounting service providers, for purposes of compliance with accounting and tax obligations.
The Mexican Tax Administration Service (SAT) for purposes associated with the issuance of CFDIs, Mexico’s electronic tax invoices.
In all cases, such transfers shall be limited to purposes directly related to compliance with legal obligations and the provision of professional legal services.
Personal data will not be transferred to domestic or foreign legal entities for purposes unrelated to the primary purposes described in this Privacy Notice.
Likewise, personal data will not be shared with other external third parties except where such third party has been engaged by us and its participation is necessary for the provision of a service or delivery associated with the professional engagement. Where applicable, such third parties shall be subject to the relevant data protection obligations.
Where payments are processed through online payment systems, credit cards, debit cards, banking terminals, or other electronic payment mechanisms, the corresponding transactions may be processed through certified third-party platforms, financial institutions, or technology providers.
Financial information entered directly into such payment systems may therefore be processed independently by the relevant bank, payment processor, or third-party provider. SALGADO MARETTE does not directly control information processed independently by such third parties.
V. ARCO RIGHTS AND PROCEDURES FOR EXERCISING THEM
Under Mexican data protection law, you have the right to Access, Rectification, Cancellation, and Objection with respect to your personal data. These rights are commonly referred to in Mexico as ARCO Rights (Derechos ARCO).
You may also revoke consent previously granted for the processing of your personal data, where legally applicable.
To exercise any of these rights, you must submit a request to: contact@salgadoregulatory.com
Your request should include your name, contact information, the right you wish to exercise, and sufficient information regarding the relevant personal data.
For purposes of exercising an ARCO Right, you must attach a legible copy of a valid government-issued identification and clearly identify both the right being exercised and the personal data to which the request relates.
Valid identification may include:
Mexican voter identification card with photograph;
passport; or
professional identification card containing a photograph.
The request must include:
a. Full name of the data subject.
b. Contact information through which you wish to receive the response to your request, such as an email address or telephone number.
c. A clear and precise description of the personal data in relation to which you wish to exercise your rights.
d. The specific right or rights — Access, Rectification, Cancellation, or Objection — that you wish to exercise.
e. Information or identification of documents that may assist us in locating the relevant personal data.
f. In addition, the following information must be provided depending on the right being exercised:
Access
Indicate the format or means through which you wish to receive or reproduce the requested personal data.
Rectification
Identify the corrections or amendments requested and provide supporting documentation.
Cancellation
Identify the reasons for requesting deletion or cancellation of personal data contained in the Data Controller’s databases, files, records, or documentation.
Objection
State the circumstances or reasons supporting your request to cease the processing of personal data and identify the specific purposes and personal data to which the objection relates.
Once an ARCO Rights request has been received, we will notify you by email or through the written communication channel identified in your request whether the request has been granted or denied within a period not exceeding 20 business days, calculated from the day following receipt of the request.
Where the request is granted, the corresponding ARCO Right will be implemented within an additional period not exceeding 15 business days, calculated from the day following notification of the determination.
VI. COOKIES AND TRACKING TECHNOLOGIES
The Website may use cookies and other tracking technologies to enable proper operation, remember certain User preferences, obtain information concerning browsing activity, and, where applicable and subject to any legally required consent, analyze Website usage and measure the effectiveness of certain communications or marketing activities.
Cookies used on the Website may be classified according to their purpose as follows:
Necessary Cookies
These cookies enable the technical operation, security, and proper functioning of the Website and its features.
Analytics Cookies
These cookies provide statistical information regarding how Users interact with the Website, including, for example, pages visited, browsing duration, device used, and other metrics intended to evaluate and improve Website performance.
Marketing Cookies
Where tools of this nature are enabled, marketing cookies may be used to measure campaign effectiveness, understand certain interactions with content or communications, and, where applicable, provide content related to the User’s browsing preferences.
Cookies that are not strictly necessary will be subject to the preferences selected by the User through the cookie management mechanism available on the Website.
Users may accept, reject, or modify their preferences concerning available categories of cookies through the corresponding control panel.
Users may also configure their browsers to block or delete cookies, although doing so may affect certain Website functionalities.
Information obtained through these technologies will be processed only for the disclosed purposes and in accordance with applicable Mexican personal data protection law and this Privacy Notice.
VII. CONSENT, USE, AND LIMITATION OF DISCLOSURE OF PERSONAL DATA
You may at any time object to the use of your personal data for secondary purposes, including receiving communications concerning legal developments, advertising, or promotional materials.
To do so, please send an email to:
contacto@salgadoregulatory.com
The request should include your full name and a clear description of the action requested.
You may also request registration with Mexico’s Public Registry to Avoid Advertising (Registro Público para Evitar Publicidad), administered by the Federal Consumer Protection Agency (PROFECO).
The purpose of that registry is to enable individuals to limit the use of their contact information for certain advertising purposes.
Where applicable, registration must be completed directly through the channels established by PROFECO.
VIII. SECURITY MEASURES
The Data Controller has implemented administrative, technical, and physical security measures designed to protect personal data against damage, loss, alteration, destruction, unauthorized use, access, or processing.
Personal data will be retained only for the period necessary to fulfill the purposes that justified its processing or for such longer period as may be required under applicable law.
Once the relevant purpose has been fulfilled, the personal data will be blocked and subsequently securely deleted, as applicable.
Personal data collected by SALGADO MARETTE is treated confidentially.
However, confidentiality obligations do not extend to information that the data subject has made public, has previously disclosed to third parties, or voluntarily makes available through telephone communications, social media platforms, internet platforms, or other public communication channels.
IX. AMENDMENTS TO THIS PRIVACY NOTICE
This Privacy Notice may be modified, amended, or updated as a result of new legal requirements or changes arising from the services offered by SALGADO MARETTE.
Where amendments are made, the updated Privacy Notice will be made available through the same Website link or may be requested through the email address identified above.