How we handle your data.

Vigía Legal, domiciled in Mexico City, is the controller of your personal data under the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its regulations, and the INAI guidelines.

We have appointed a Data Protection Officer (DPO) who receives ARCO requests and privacy inquiries at the address listed at the end of this notice.

Vigía Legal collects personal data only when the data subject voluntarily provides it through the website contact form or direct email:

• Full name of the requester
• Work email address
• Company or organization name
• Country of operation (optional)
• Message content (optional)
• Browser IP address at submission time, logged in server logs for security purposes

We do not collect sensitive personal data (racial origin, health status, religious beliefs, etc.) and we do not use advertising tracking cookies on this site.

Primary purposes of data processing:

• Respond to your specific request (commercial proposal, demo, other inquiry)
• Maintain communication with you during evaluation or contracting
• Fulfill contractual obligations if we enter into an engagement
• Keep record of the request for internal audit and traceability

Secondary purposes (all optional and revocable) are: aggregated statistical analysis of interest in our services. We do not perform marketing or newsletter outreach, nor transfer data to third parties for advertising purposes.

To operate the site and process the contact form we use third-party services that act as data processors under contract:

• Vercel Inc. (USA) — static website hosting
• Resend (USA) — contact form email delivery to the controller's inbox
• Google Workspace (USA) — controller's email mailbox

These third parties have contractual agreements with Vigía Legal that limit data use to the service object, prohibit their own use of the data, require security standards equivalent to or higher than those applicable in Mexico, and acknowledge the data subject's ARCO rights.

We do not transfer personal data to other third parties without your explicit consent. If future transfers to clients (for example, within an engagement) arise, we will inform you in advance with the specific purpose.

At any time you may exercise the rights of Access, Rectification, Cancellation or Opposition (ARCO) regarding your personal data, as well as revoke any consent you have granted.

To exercise these rights, send an email to privacidad@vigialegal.mx stating: your name, contact email, the right you wish to exercise, and a clear description of your request. Attach official identification (INE, passport) or the means that proves your identity.

We respond within a maximum of 20 business days from receipt of your request, as required by Art. 32 of the LFPDPPP. If the request is granted, it materializes within 15 business days after the response.

If you wish your information not to be used for secondary purposes or you want it removed from our prospect base, contact us at privacidad@vigialegal.mx with the specific request. The change is applied within 5 business days.

You may also check the Public Consumer Registry (REPEP) operated by PROFECO if you wish to block commercial communications more broadly.

Vigía Legal may modify this Privacy Notice at any time. Modifications are published on this same page with the last-updated date visible.

If changes affect primary purposes or transfers, we will notify you via the contact method you have registered with us, before they take effect.

The National Institute for Transparency, Access to Information and Personal Data Protection (INAI) is the authority responsible for ensuring LFPDPPP compliance in Mexico. If you believe your right to data protection has been violated, you may file a complaint with INAI at home.inai.org.mx.