Privacy Notice

I. Identity and address of the controller.

Brit, Saltzberg, Juárez, Abogados, S.C. (the “Controller”), with its address at Avenida Tamarindos 400 A, 3rd Floor, Bosques de las Lomas, Cuajimalpa de Morelos, Mexico City, C.P. 05120, Mexico, in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (the “Data Law”) and other applicable provisions, makes this privacy notice (the “Privacy Notice”) available to the owners of Personal Data, to inform them of the terms and conditions under which their personal data will be collected, used, stored, transmitted, or transferred by the Controller.

The Controller undertakes to process Personal Data in accordance with the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and accountability, always ensuring confidentiality and integrity.

II. Personal Data That May Be Collected.

To fulfill the purposes described in this Privacy Notice, the Controller may request and process the following Personal Data (the “Personal Data”):

Full name
Email address
Place and date of birth
Citizenship and nationality
Home address
Telephone and/or mobile number
Unique Population Registry Code (CURP)
Federal Taxpayer Registry (RFC)
Bank information provided by you

The Controller does not regularly collect sensitive Personal Data, understood as those that may affect the most intimate sphere of the data subject or whose misuse could give rise to discrimination or serious risk. Should the collection of such data be required, the Controller will obtain the express and written consent of the data subject and will adopt enhanced security measures as required by the Data Law.

III. Means of Obtaining Personal Data.

The Controller may obtain your Personal Data directly when you voluntarily provide it through physical or digital forms, email, meetings, videoconferences, events, or as part of contracted services; and indirectly, when provided by authorized third parties, authorities, financial institutions, or publicly available sources as permitted by the Data Law.

IV. Purposes of Processing.

Personal Data will be processed for the following purposes:

Primary Purposes (No Consent Required):

Verify and confirm your identity and the authenticity of the information provided.
Administer, operate, and fulfill the legal relationship established with you, including the provision of legal services, preparation of contracts, opinions, or filings before authorities.
Carry out billing, collection, and internal administrative management.
Comply with obligations arising from applicable legal, tax, professional, or regulatory provisions.
Provide information to judicial or administrative authorities when legally required.
Keep your client, supplier, or visitor file up to date.
Conduct due diligence, background checks, and compliance verification processes.
Protect the security of premises and individuals through video surveillance systems.

These purposes are essential for maintaining the legal relationship and fulfilling legal or contractual obligations, and therefore do not require your consent.

Secondary Purposes (Consent Required):

The Controller may also use your Personal Data to:

Send newsletters, legal updates, and professional communications of interest.
Invite you to seminars, conferences, publications, or events organized or sponsored by the Controller.
Conduct satisfaction surveys, quality analysis, and service improvement assessments.
Carry out marketing, advertising, or business development activities.
Share academic or informational content related to the Controller’s professional practice.

You may express your refusal to the processing of your Personal Data for these secondary purposes by sending an email to info@britabogados.com. Such refusal will not affect the provision of contracted legal services.

V. Transfer of Personal Data.

National or international transfers of Personal Data may be carried out without the consent of the Data Subject when any of the cases set forth in Article 36 of the Data Law apply. Nevertheless, by means of this Notice, the Data Subject grants consent for the Controller to transfer their Personal Data to third parties who collaborate or maintain a professional relationship with the Controller, in order to fulfill the purposes set forth in this Privacy Notice.

The Controller will take necessary measures to ensure that such third parties implement adequate administrative, technical, and physical security mechanisms to protect Personal Data against damage, loss, alteration, destruction, unauthorized use, access, or processing, and that they comply with the provisions of this Privacy Notice.

The Controller will not transfer the Data Subject’s Personal Data to unrelated or external third parties.

VI. Security Measures.

The Controller has implemented the necessary administrative, physical, and technical security measures to protect your Personal Data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

Only authorized personnel of the Controller may access your Personal Data, and they are required to maintain confidentiality even after the termination of their employment or professional relationship with the Controller.

VII. ARCO Rights (Access, Rectification, Cancellation, and Opposition).

You may exercise your ARCO rights or limit the use and disclosure of your Personal Data at any time by sending a written request to info@britabogados.com, including the following:

Full name and contact information for notices.
Copy of an identification document or, if applicable, proof of legal representation.
Clear and precise description of the data and the rights to be exercised.
Any other element that facilitates the identification of the data.

The Controller will acknowledge receipt of your request and respond within 20 business days as provided in the Data Law. If applicable, your request will be implemented within 15 business days following the response.

In case of partial or total denial, the Controller will duly inform you of the reasons for its decision.

VIII. Revocation of Consent.

You may revoke your consent for the processing of your Personal Data at any time by sending a request to info@britabogados.com.

Revocation will not be retroactive and may result in the Controller being unable to continue the legal relationship or the provision of contracted services.

IX. Limitation on Use or Disclosure.

If you wish to limit the use or disclosure of your Personal Data for purposes other than those that gave rise to its collection, you may request inclusion in an internal exclusion list by sending an email to info@britabogados.com.

X. Use of Cookies and Tracking Technologies.

The Controller’s website uses cookies, web beacons, and similar technologies for statistical purposes, to improve user experience, and to analyze web traffic. You may disable these technologies through your browser settings; however, certain features may not function properly.

XI. Retention and Deletion of Personal Data.

Personal Data will be retained only for as long as necessary to fulfill the purposes described in this Privacy Notice or as required by applicable legal provisions. Once such purposes have been fulfilled, data will be blocked and subsequently deleted in accordance with the timelines set forth in the Data Law.

XII. Modifications to this Privacy Notice.

The Controller may modify or update this Privacy Notice at any time. Any changes will be communicated through the website https://www.britabogados.com / or via email to the Data Subjects. Modifications will take effect seven business days after publication.

XIII. Complaints Regarding Personal Data.

If you have any questions or concerns regarding the collection, use, or processing of your Personal Data not directly related to the provision of legal services by the Controller, or regarding compliance with this Privacy Notice (a “Privacy Complaint”), you may contact the Controller at any time by emailing info@britabogados.com.

The Controller will make all reasonable efforts to address and resolve Privacy Complaints promptly. If disagreement persists, you may contact the competent data protection authority, the Secretariat for Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), to enforce your rights in accordance with the Data Law.

XIV. Consent.

By providing your Personal Data, whether physically, electronically, verbally, or through the Controller’s website, you consent to its processing in accordance with the terms of this Privacy Notice.

Where the Data Law requires express consent, it will be obtained through handwritten signature, electronic means, checkbox acceptance, or any other mechanism provided by applicable regulations.

XV. Last Update.

This Privacy Notice was last updated in October 2025.

Brit, Saltzberg, Juárez, Abogados, S.C.