Privacy notice

Who is responsible for your data

Costilla Torres Romo, S.C. («CTR»), with its address at C. Alberto Cossío 105B, Int. 10, colonia Tangamanga, San Luis Potosí, S.L.P., México, is responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.

For any matter related to your personal data, write to us at contacto@ctrlegals.com or on WhatsApp at +52 444 355 9206.

What data we collect

Depending on how you interact with us, we may process the following data:

• Identification and contact: name, phone number, email address, company and position.
• Information about your matter: the documents and data you share with us to handle it, which may include information about your company, its shareholders, its employees or foreign nationals it plans to hire (for example, contracts, minutes, payroll receipts or immigration documents).
• Tax and payment data: company name, tax ID (RFC), tax address and the data needed to invoice and collect our fees.
• Browsing data: pages you visit on this site, device and browser type, approximate location and clicks on the WhatsApp buttons, obtained through cookies (see «Cookies and tracking technologies»).

Sensitive personal data

Some matters may require processing sensitive data, such as an employee's health information in a labor matter. We will only process it when the matter requires it and with your express written consent. Please do not send us sensitive data by WhatsApp unless we ask for it.

If you share data about other people (employees, shareholders or foreign nationals), you confirm that you have a legitimate basis to do so and that you have informed them of this notice.

How we use your data

Necessary purposes for our relationship with you:

• Replying to your inquiry and following up by WhatsApp, phone or email.
• Reviewing your matter, preparing a quote and, where applicable, the free assessment or review.
• Providing the legal services you hire, including representation before authorities, conciliation centers, courts, the National Immigration Institute (INM), consulates, municipalities, public registries, notaries and commercial notaries.
• Invoicing and collecting our fees.
• Complying with legal obligations and responding to requests from competent authorities.

Additional purposes, not necessary to serve you:

• Sending you information about our services and legal changes that may affect your company.
• Producing statistics to improve this site and our service.

If you do not want us to use your data for additional purposes, write to contacto@ctrlegals.com or message us on WhatsApp. Opting out does not affect how we handle your matter.

Who we share your data with

We do not sell your personal data. We only share it in these cases:

• With authorities, conciliation centers, courts, INM, consulates, municipalities, public registries, notaries and commercial notaries, when necessary to handle your matter or to comply with a legal obligation.
• With external affiliated lawyers or firms involved in your matter in areas we do not handle directly, only with your prior authorization.
• With service providers (website hosting, messaging, web analytics, accounting), who process the data on our behalf and under our instructions.

Your ARCO rights and how to exercise them

You have the right to access your data, rectify it if inaccurate, cancel it and object to its processing (ARCO rights). You may also revoke your consent and limit the use or disclosure of your data.

To do so, send your request to contacto@ctrlegals.com including:

• Your name and a way to send you our response.
• A document proving your identity or, where applicable, the legal representation of the person submitting the request.
• A clear description of the data and the right you wish to exercise.
• Any document that helps locate your data and, for a rectification, the corrections and supporting documents.

We will respond within a maximum of 20 days from receiving your request. If the request is granted, it will take effect within the following 15 days.

Some data must be kept due to legal obligations (for example, tax obligations or those arising from a case file), even after our relationship ends.

If you believe your right to personal data protection has been violated, you may file a complaint with Mexico's Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).

Cookies and tracking technologies

This site uses Google Analytics cookies to know how many people visit it, which pages they view and which WhatsApp buttons they use. These collect data such as device and browser type, approximate location and pages visited. The site's fonts are loaded from Google's servers, which receive your IP address to deliver them.

You can disable cookies in your browser settings. When you message us on WhatsApp, the conversation is also subject to WhatsApp's privacy policy.

Consent

By contacting us and sharing your data after reading this notice, you agree that we process it accordingly, unless you object. For sensitive data we will ask for your express written consent.

Changes to this notice

This notice may change due to legal reforms or changes in our services. We will publish any change on this page with its update date.