Privacy Notice

At Brel Proyectos Financieros, S.A. de C.V. and/or any of its holdings, subsidiaries, affiliates, companies, or entities within the same corporate group (“BPF”), we acknowledge and recognize the importance of handling and using personal information responsibly. That is why, through this Privacy Notice (“Privacy Notice”), we inform you that BPF collects, uses, stores, processes, transfers, and protects certain personal information under the following terms.

This Privacy Notice, along with the information.

Purpose, Use & Collection of Personal Data

Purpose and Use. As part of our internal, corporate, commercial, advertising, customer service, and operational processes, as well as our methods of information handling, contracting, billing, tracking, and service delivery, BPF collects, uses, and protects your personal data, including sensitive information, for the following purposes (“Purposes”):
(i) Identifying, locating, and contacting the data owner.
(ii) Sending and providing information related to BPF.
(iii) Sending and providing information about BPF’s services, including promotions, advertising, and quotes.
(iv) Responding to customer inquiries and concerns.
(v) Conducting pre-contract investigations, including but not limited to credit bureau and judicial authority checks.
(vi) Establishing a commercial, professional, or business relationship.
(vii) Fulfilling legal and contractual obligations.
(viii) Assessing service quality and customer experience at BPF.
(ix) Conducting surveys and consultations by BPF.

(x) Sending important notices related to BPF or its services, including updates on contract terms and new services.
(xi) Ensuring the safety and integrity of individuals visiting BPF premises.
(xii) Creating databases and generating statistical data for internal control at BPF.

Personal Data. BPF may collect and use the following types of personal data (“Personal Data”), including but not limited to:

Identifying Information: If you are an individual, this may include your full name, nationality, country, age, place and date of birth, marital status, occupation, address, landline, personal and mobile phone numbers, official identification documents (such as birth certificate, voter ID, passport, visa, CURP), biometric data (fingerprints, iris scan, hand geometry, facial features). If you are a legal entity, this may include business name, nationality, primary activity or sector, address, landline, date and place of incorporation, constitutional documents and amendments (such as deeds and policies), full name of the legal representative, their authorities, and their identification documents.
Electronic Data: Email addresses and social media accounts.
Fiscal Data: Tax address, proof of registration and taxpayer status with the Federal Taxpayer Registry (RFC), tax compliance opinion issued by SAT, status in SHCP’s provisional or definitive listings related to Article 69-B of the Federal Tax Code, invoices, electronic tax receipts (CFDIs), fee receipts, and annual tax returns.
Financial Data: Bank details (institution, account number, CLABE), credit history, quotes, and transaction amounts.
Legal Data: Incorporation certificate, powers of attorney, public deeds documenting corporate statute reforms or share transfers, contracts, agreements, legal history, lawsuits, judgments, and rulings.

Data Collection. You expressly authorize BPF to collect your Personal Data through any of the following means, including but not limited to:
(i) Directly from you during a personal visit to our facilities.
(ii) Through email, phone calls, or video conferences.
(iii) Through navigation on our Official Website or use of our online services, chatbots, and applications.
(iv) Through interactions on our Official Social Media platforms.
(v) Through instant messaging platforms such as SMS, WhatsApp, Telegram, Messenger, and similar services.
(vi) Through direct or indirect interactions with official advertising and marketing companies subcontracted by BPF.
(vii) By subscribing to our Newsletter.
(viii) Through direct or indirect interactions with any physical or legal entity, domestic or foreign, or any third party.
(ix) Through any other legally permitted mechanism.

If you enter, move through, or remain in BPF’s facilities, you will be recorded and/or photographed for security reasons.
BPF is committed to ensuring that all collected Personal Data is handled with the strictest security measures to guarantee confidentiality.

Transfer of Personal Data

Your Personal Data, including sensitive data and the information mentioned above, may be transferred by BPF and processed within or outside the country by third parties other than BPF. This will only occur when it is necessary for a specific activity or service provided by suppliers, agents, or third parties offering services related to BPF’s internal, corporate, operational, commercial, advertising, informational, customer service, and business processes. These services may include:

Administration, finance, accounting, and legal services
Billing and collections
Advertising and marketing agencies promoting BPF’s services
Companies or third parties handling sales, customer coordination, and support
Federal, state, and municipal authorities, only in cases that fall under the exceptions outlined in the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations

If such a transfer occurs, BPF will communicate this Privacy Notice to the respective third parties, who will be required to comply with its terms.

By signing this Privacy Notice, you expressly authorize BPF to transfer your Personal Data.

Means to Exercise Rights of Access, Rectification, Cancellation, or Opposition (ARCO)

BPF informs you that you have the right to access your personal data in our possession and be informed about how we process it. You also have the right to rectify your data if it is inaccurate or incomplete, cancel it if it is excessive or unnecessary for the stated purposes, or oppose its processing for specific reasons.

If you have provided us with your personal data for the stated purposes and wish to access, rectify, update, cancel, oppose, or revoke its use, you may submit a request at any time. Your request must be in writing and addressed to our Personal Data Processing Department either physically at our office (address provided at the end) or via email at: legal@brelfinancial.us.

The request must include the following information:

Full name and address
Email address
Documents proving your identity
A clear and concise description of the right you wish to exercise (reason for the request)
If requesting a rectification, you must specify the changes required and provide supporting documentation.

If the request is submitted by someone other than the data owner, legal representation must be proven with a power of attorney signed by two witnesses or a public instrument, along with identification for both the data owner and the legal representative.

BPF will respond within a maximum of 20 business days from the date your request is received. Our response will be sent via email. To process your request, BPF may require you to present original documents for verification at our office within five business days from the request date. If you do not provide the originals within this time frame, your request will be archived, and your personal data will continue to be processed as outlined in this Privacy Notice.

If your request is approved, it will take effect within 15 calendar days from the date BPF informs you of the resolution.

However, BPF may deny ARCO rights in the following cases:

If you are not the data owner or have not proven legal representation.
If your personal data is not found in our database.
If fulfilling the request would infringe on the rights of a third party.
If there is a legal restriction or a competent authority ruling that prevents the exercise of ARCO rights.
If rectification, cancellation, or opposition has already been carried out

Revocation of Consent for Personal Data Processing
You may revoke your consent for the processing of your personal data at any time. To do so, you must submit a request via email to the address provided at the end of this Privacy Notice, clearly stating your request.
Use of Cookies and Web Beacons
Cookies and web beacons are pieces of information that a website transfers to an individual device’s hard drive for record-keeping purposes. Our website does not use these mechanisms to collect any information.
Contact Information
We work daily to limit the use or disclosure of personal data. BPF has implemented administrative, technical, and physical policies and mechanisms to protect the personal data you have provided, preventing loss, misuse, unauthorized access, exposure, modification, or destruction. These privacy practices are carried out continuously to ensure the protection, confidentiality, and security that your personal data deserves.

For any questions or comments regarding our Privacy Notice, or if you need assistance or wish to update your personal data, please contact:

Responsible Entity:
Personal Data Processing Department

Contact Information:
Calle Colomos No. 2512,
Col. Italia Providencia, C.P. 44648, Guadalajara, Jalisco, Mexico

+52 (33) 2304 0645
legal@brelfinancial.us

Monday to Friday from 9:00 AM to 2:00 PM and from 4:00 PM to 7:00 PM (GMT-06:00)

Authorization
By accessing our facilities, using our Website, interacting with our Social Media, subscribing to our Newsletter, or exchanging communications via telephone, video conference, email, or instant messaging applications, you give your consent for your Personal Data to be collected, used, stored, processed, transferred, and protected in accordance with this Privacy Notice, as well as under the purposes, terms, and conditions stated herein.
Updates & Changes
BPF reserves the right to modify or update this Privacy Notice, in whole or in part, at any time. Changes may result from internal policy updates, legislative reforms, or new jurisprudence criteria that establish updated requirements or processes. The latest version published on our Website will be considered the current and applicable version of this Privacy Notice.