Privacy Policy

I. IDENTIFICATION OF THE RESPONSIBLE PARTY AND THE PROCESSOR:

Unsettled Business, LLC.,  is responsible for the processing of your Personal Data in its possession, the use thereof, and its protection. In the exercise of this authority, it has designated as the Processor of said treatment: Unsettled Business, LLC., The person responsible for processing your request to exercise your ARCO rights contact us by email, you can do so at: [email protected].

II. FOR THE PURPOSES OF THIS NOTICE, IT IS UNDERSTOOD:

Personal data: Any information concerning an identified or identifiable natural person. We collect your personal data directly when you provide it to us through various means, in our facilities, by phone, such as when you participate in our promotions or when you provide information for us to provide a service or acquire our products.

  • Applicable current legislation:

Law: Federal Law on the Protection of Personal Data Held by Private Parties. (LFPDPPP) Regulation: Regulation of the Federal Law on the Protection of Personal Data Held by Private Parties. (RLFPDPPP)

  • Principles governing the processing of your personal information:

We collect your personal data for the purposes mentioned in this Privacy Notice; they will be treated observing the principles of legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility, enshrined in the Law.

  • Sensitive personal data:

Those personal data that affect the most intimate sphere of the data subject or whose misuse could give rise to discrimination or pose a serious risk to the individual. In particular, sensitive data are considered those that may reveal aspects such as racial or ethnic origin, current and future health status, genetic information, religious, philosophical and moral beliefs, union affiliation, political opinions, sexual preference.

  • Financial or patrimonial personal data.

If your payment method is by credit card, the following data will be requested, which, in terms of article 8 of the Federal Law on the Protection of Personal Data Held by Private Parties, are considered within the category of financial or patrimonial personal data: The name of the cardholder, the card number, the expiration date of the card, and the name of the bank. The Law requires that in case the collected personal data include sensitive or patrimonial and/or financial data, the Responsible Party carries out acts that collect and constitute the express consent of the owner as provided in the second paragraph of article 8 of the Law and other applicable legislation, either through the signature of the corresponding format, whether printed or using electronic means, through direct responses, and their corresponding processes for obtaining consent, by way of example but not limited to, through express consent and supply by the Owner of personal data.

Tacit and Express Consent.

Tacit consent results from facts or acts that presuppose it. So that in the absence of your refusal, we will consider your consent on those terms. In terms of the provisions of article 9 of the Federal Law on the Protection of Personal Data Held by Private Parties, your express consent is requested for the processing of sensitive, financial, and patrimonial personal data, indicating whether you accept or not the treatment. Remembering that in terms of article 1803 of the Federal Civil Code, consent is express when it is manifested verbally, in writing, or by unequivocal signs.

Duration of the processing of your personal data.

Your personal information will be treated only for the time necessary to fulfill the purposes described in the Privacy Notice that is made available to you and, if applicable, in accordance with the provisions of the respective legal provisions. Notwithstanding any provision of this Privacy Notice, the Owner acknowledges that his consent will not be required for the processing of his personal data by the Responsible Party or third parties in any of the cases indicated in article 10 of the LFPDPPP.

Personal data of minors.

We are aware of the importance of protecting the privacy and personal data of minors, so we do not obtain, use, disclose, or store information related to minors without the prior consent of their parents or guardians. If you are a parent/guardian and become aware that a minor has provided their personal data without your consent, you can request that such data be canceled.

III. PURPOSES AND/OR USES OF PERSONAL DATA

Your personal data and/or sensitive personal data may be used for various purposes, depending on the particular case in which they are provided or collected, always in accordance with this Privacy Notice or its updates that, at the time, are made available to comply with the following necessary purposes:

  1. If you are our client.

  2. If you are our supplier.

  3. If you work in our organization or are in the selection process.

  4. For video surveillance within our facilities.

  5. For information obtained through communication by email.

  6. IF YOU ARE OUR CLIENT:

Your personal data will be used for the following purposes:

If you are a consumer or potential consumer: To comply with obligations arising from a commercial legal relationship that may exist or be established with you, that is, to provide the services and products required by you, to enforce and/or execute a contract, for statistical purposes, to inform about changes or new products or services related to what was contracted or acquired by our clients, evaluate the quality of the service, determine the quality of our products and services, exchange necessary information to address internal, external audits and by authorities, as well as for commercial, marketing, advertising, and/or commercial prospecting purposes and to grant benefits and fulfill obligations contracted with our clients as well as carry out internal studies on consumption habits.

How we collect your personal information.-

We collect your personal data directly when you provide it to us through various means, such as when you provide us with information to provide you with a service or sell you a good, it can be in person or through electronic records. We can also obtain such information from you, from other sources permitted by law, such as telephone directories or public databases on the internet.

The data we obtain may include, among others:

Name, Address, phone, gender, age, date of birth, email, banking information. This information is essential for us to generate the service you are requesting, so we ask you to indicate your acceptance of the processing of such data.

  1. IF YOU ARE OUR SUPPLIER:

Your personal data will be used for the following purposes:

  • Those necessary for the commercial legal relationship with the Responsible Party.
  • Evaluate and, if necessary, hire you in the future as a supplier, and:
  • Keep track of contracted suppliers and their services for later registration and administration in systems.
  • Make transfers with your personal data to third parties in terms of the privacy notice. How we collect your personal information.-

We collect your personal data directly when you provide it to us through various means, by offering or providing us with your goods or services as a result of our business relationship.

The data we obtain may include, among others:

Name, phone numbers, email, address, fiscal address, nationality, country of residence, name, phone (mobile and landline), address and official identification of the sales manager and commercial director, name, denomination, business name, address and phone number of main clients and contacts, letter of introduction, RFC, CURP, Hacienda registration format (R1 or R2), service or business of the company where you work, level at which it operates (local, regional, or national), in case of being local the cities it covers, details of the product or service it provides, and main commercial conditions, lawyer who reviewed the contract, data of the assisted person, and; the following financial or patrimonial data: main credit institutions where you have bank accounts, branches, account numbers, bank loans, CLABE account numbers, and amounts.

  1. IF YOU WORK IN OUR ORGANIZATION OR ARE IN THE SELECTION PROCESS:

Your personal data will be used for the following purposes:

To comply with the obligations arising from the employment relationship that may be created with you, as well as for personnel administration; form employee records; form employee medical records; payroll payment and administration; payment of benefits, salaries and benefits, bonuses, reimbursements, pensions, insurance and others; hiring of insurance; document and control the allocation of computer and communication assets; internal audits; creation of a work email account; preparation of the company directory; assignment of work tools; assignment of keys and passwords, ensure compliance with confidentiality obligations and other labor obligations; verify personal and employment references; contact family members, dependents, and/or beneficiaries in case of emergency. Similarly, we inform you that we may use your personal data for other purposes, provided that such purposes are compatible and can be considered analogous to the above.

How we collect your personal information.-

Directly from you when applying for a job in our organization and when formally hired.

The data we obtain may include, among others:

Full name; copy of official identification with photograph (passport, voter ID, professional ID); age; date of birth; copy of birth certificate; address; copy of proof of address (electricity, telephone, or property tax receipts); copy of a released military card (if applicable); marital status; copy of marriage certificate (if applicable); nationality; copy of migration document (if applicable); email; personal phone, work, cell phone; copy of the taxpayer registry; copy of the Unique Population Registry Code (CURP); social security number; copy of the Mexican Social Security Institute card; education certificates or study certificates; certificates or proof of language proficiency; employee number; employee category and position; salary, earnings, and deductions; copy of the notice of registration, withdrawal, or salary modification from the Mexican Social Security Institute (IMSS); copy of the last job’s earnings certificate; photograph; personal references; emergency contact information; information related to beneficiaries or dependents, which may include full name, date of birth, and other identification details, such as copies of the birth certificates of dependents; curriculum vitae; information regarding the employee’s performance; certificates of previous jobs; copy of proof of affiliation to AFORE; copy of mortgage credit certificates (INFONAVIT), recommendation letters, and/or any other documentation or information related to the employment relationship between you and our organization. Sensitive personal data may also be collected and processed: health status; illnesses suffered or currently suffering; allergies; blood type; results of medical examinations; medical certificates for illness treatments. Other personal, sensitive and non-sensitive data may be processed, which are not included in the lists above as long as such data are considered of the same nature and are not excessive for the purposes for which they are collected.

  1. FOR VIDEO SURVEILLANCE WITHIN OUR FACILITIES.

The images obtained by the video cameras located within our facilities are for access control, maintaining the confidentiality of information, as well as security within our facilities. The images and sound captured by the video surveillance cameras will be used for your safety and that of all our visitors and collaborators through monitoring and the people who work in our facilities or visit us. The images are kept for a maximum of 72 hours for security reasons, after which they are permanently deleted.

  1. FOR INFORMATION OBTAINED THROUGH EMAIL COMMUNICATION

The information obtained through communication with you via email is confidential and for the exclusive use of the person(s) to whom it is addressed. If the reader of this electronic transmission is not the intended recipient, it is notified that any distribution or copy of it is strictly prohibited. If you have received any email in error, please notify the person who sent it immediately and permanently delete it from your storage system.

The information obtained by email remains in our possession only for the time necessary to fulfill the obligations arising from the professional or commercial relationship we have with you before being permanently deleted from our computer systems and storage devices.

IV. LIMITATION OF THE USE OR DISCLOSURE OF YOUR PERSONAL DATA

If you wish to limit the use or disclosure of your personal information in our possession, the mechanism that has been implemented for the exercise of such rights is through the presentation of the respective request, sending an email to the following address: insert email with the subject: REQUEST FOR LIMITATION OR DISCLOSURE OF PERSONAL DATA.

V. REVOCATION OF YOUR CONSENT FOR DATA PROCESSING

You have the right to access your personal data that we possess and details of their processing, as well as to correct them if they are inaccurate or incomplete; cancel them when you consider that they are not required for any of the purposes indicated in this privacy notice, are being used for non-consensual purposes, or the contractual or service relationship has ended, or oppose their processing for specific purposes.

The mechanism that has been implemented for the exercise of these rights is through the presentation of the respective request, sending an email to the following address: insert email with the subject: REQUEST FOR REVOCATION OF CONSENT FOR THE PROCESSING OF PERSONAL DATA.

The deadline to address your request is 20 business days, and we will inform you of its outcome through the means you provided for notification.

VI. TRANSFER TO THIRD PARTIES OF YOUR PERSONAL INFORMATION

We undertake not to transfer your personal information to third parties without your consent and taking into account the exceptions provided for in Article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties, as well as to make this transfer in the terms set by that law.

Except in cases of Article 37 of the Law:

When the transfer is provided for in a Law or Treaty in which Mexico is a party. When the transfer is necessary for the prevention or medical diagnosis, the provision of health care, medical treatment, or the management of health services. When the transfer is made to controlling, subsidiary, or affiliated companies under the common control of the data controller, or to a parent company or any company in the same group as the data controller that operates under the same internal processes and policies. When the transfer is made by virtue of a contract concluded or to be concluded in the interest of the data subject, by the data controller and a third party. When the transfer is necessary or legally required for the protection of a public interest or for the procurement or administration of justice. When the transfer is necessary for the recognition, exercise, or defense of a right in a judicial proceeding. When the transfer is necessary for the maintenance or fulfillment of a legal relationship between the data controller and the data subject. We will only transfer your personal data to third parties, national or foreign, that are legally or commercially related to us to fulfill the purposes described in the Privacy Notice and its updates made available to you. Therefore, we may transfer your personal data in cases provided for and authorized by law and as follows:

To the Tax Administration Service, by virtue of the processes of issuing and sending Digital Tax Receipts over the Internet. To affiliated and/or commercially related persons or entities. To various authorities to meet requirements or as required by legislation or regulations. Your personal data will be processed only for the time necessary to fulfill the purposes described in the Privacy Notice made available to you and, where appropriate, in accordance with the provisions of the respective legal provisions.

VII. MODIFICATIONS TO THE PRIVACY NOTICE

We reserve the right to make modifications or updates to this privacy notice at any time, in order to address legislative changes, internal policies, or new requirements for the provision or offering of our services or products.

These modifications will be made available to the public through the following means:

Visible announcements in our establishments or customer service centers. Brochures or leaflets available in our establishments or customer service centers. On the website of our Data Processor (Privacy Notice section). We will send them to the last email address you provided. VIII. RIGHTS OF THE HOLDER OF PERSONAL DATA

You can exercise the rights of access, rectification, cancellation, and opposition (ARCO rights) regarding your personal and/or sensitive data. Likewise, you can limit the use or disclosure of your personal data and revoke the consent you have given for the processing of your personal data, as long as the processing is not necessary or results from a legal relationship.

THE ARCO RIGHTS CONSIST OF:

ACCESS.- To be informed of which of your personal data are contained in our personal data system, for what purposes they are used, their origin, and the communications that have been made with them, and, in general, the conditions and generalities of the treatment. The access obligation will be considered fulfilled when: The data is made available to the data subject or; by issuing simple copies, magnetic, optical, sound, visual, holographic, electronic documents, or any other means or technology considered appropriate. RECTIFICATION.- To correct or update your personal data in case they are inaccurate or incomplete. CANCELLATION.- That your personal data be removed, totally or partially, from our personal data system. This request may lead to a blocking period after which the data will be permanently deleted. OPPOSITION.- Oppose, for legitimate reasons, the processing of your personal data by our company. If you want to access the content of your personal data, rectify it, cancel it, or object to its use, the mechanism that has been implemented to exercise these rights is through the presentation of the respective request, sending an email to the following address: insert email with the subject: REQUEST FOR: ACCESS, RECTIFICATION, CANCELLATION, OR OPPOSITION, (As applicable), and with the following information:

Name of the data subject. Address of the data subject or email address to communicate the response to the request. Documents proving identity or personality to submit the request. Description of personal data to which any ARCO right is intended to be exercised. Any other element that allows the location of personal data and attention to the request. If you believe that your right to the protection of personal data has been violated by any conduct of our employees or our actions or responses, or suspect that there is a violation of the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties in the processing of your personal data, you may file the corresponding complaint or report with the IFAI, for more information visit: www.ifai.org.mx

The processing of your personal data under our possession will be carried out in accordance with these terms and conditions, so from this moment, it is understood that you expressly authorize the Controller and the Processor to process your personal information for this purpose, until you express your opposition through one of the elements indicated by the Law. For any matter related to the processing of your personal information that has not been addressed in this Comprehensive Privacy Notice, please contact the Processor, whose details are at the beginning of this document.

Last update: February 1st, 2024