Privacy

1. Identity and Address of the Responsible Party

CARDINAL (hereinafter "the Responsible Party"), domiciled at Todos Santos, Baja California Sur, México, is responsible for the processing of your personal data.

2. Personal Data Collected

The Responsible Party will collect the following personal data:

  • Full name
  • Phone number
  • Email address
  • Fiscal data (when necessary for service billing)

Please note that sensitive personal data is not collected.

3. Purposes of Data Processing

The personal data you provide will be used for the following purposes:

Primary Purpose:

  • The provision of the services you request.
  • The preparation of legal documents and procedures necessary for such services.
  • Billing and collection of services.
  • Contact and communication necessary for service follow-up.

Secondary Purpose:

  • Sending informational or promotional material related to our services.
  • If you do not wish for your personal data to be used for the secondary purpose, you may express your refusal through the mechanisms established later in this notice.

4. Transfer of Personal Data

The Responsible Party undertakes not to transfer your personal data to third parties without your consent, except for the exceptions provided by Law, or when necessary to fulfill the primary purpose of the processing. This includes:

  • Competent authorities that legally require it.
  • Institutions or entities with which it is necessary to share information for the service provision (e.g., public registries, financial institutions).

Please note that if third-party tools or services are used for marketing management, your data may be shared with such providers solely for the purpose of carrying out promotional activities. You may oppose this transfer.

5. Means to Exercise your ARCO Rights

You have the right to exercise your rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights) regarding the processing of your personal data. To do so, you must send an email to the address sales@cardinal.report. Your request must contain at least:

  • Your full name and a means to notify you of the response.
  • A clear and precise description of the personal data regarding which you seek to exercise any of the rights.
  • Any element that facilitates the location of the personal data.
  • In the case of rectification, you must attach the documentation supporting your request.

Response Time

We will respond to your request within a maximum period of 20 business days from the date we receive your email. If the request is appropriate, we will make the rectification, cancellation, or opposition effective within 15 business days following the date the response is communicated.

6. Revocation of Consent

At any time, you may revoke the consent you have granted for the processing of your personal data, provided that such revocation does not have retroactive effects. To revoke your consent, you must follow the same procedure as for exercising ARCO Rights.

7. Changes to the Privacy Notice

The Responsible Party reserves the right to make modifications or updates to this privacy notice at any time. Such modifications will be made known to you through the official website of CARDINAL, in the corresponding section.