Comprehensive Privacy Notice
Last updated: August 8, 2026
1. Party Responsible for the Processing of Personal Data
LAB JURIDICO Y LEGAL MX, S.C., commercially operating under the name TradeWorks, with its address at Lázaro Cárdenas, exterior number 216, interior 5, Residencial San Agustín Primer Sector, C.P. 66260, San Pedro Garza García, Nuevo León, Mexico, is responsible for the processing of the personal data referred to in this Privacy Notice.
For matters related to privacy and personal data protection, including the exercise of ARCO rights, withdrawal of consent, and requests to limit the use or disclosure of personal data, you may contact us at:
2. Scope of this Privacy Notice
This Privacy Notice applies to the processing of personal data of individuals who contact TradeWorks regarding its professional services through:
- the forms available on the tradeworks.com.mx website;
- the email address contacto@tradeworks.com.mx; or
- the WhatsApp number published by TradeWorks.
It also covers technical data that may be generated or recorded when using the forms and the security mechanisms associated with them.
This Notice refers to the processing of data of prospects and individuals who request information or contact.
If an individual subsequently becomes a TradeWorks client, the subsequent processing of their data will be subject to the purposes, legal obligations, and retention periods applicable to the corresponding professional relationship.
If such professional relationship requires additional processing activities that are not covered by this Privacy Notice, TradeWorks will make the applicable privacy notice available to the data subject before carrying out such processing and, when legally required, will obtain the corresponding consent.
3. Personal Data We Process
Identification and contact information
- name;
- email address;
- telephone number or identifier associated with the account from which the individual chooses to contact TradeWorks through WhatsApp; and
- any other contact information voluntarily provided by the individual in their communication.
Information contained in the request
- message sent;
- inquiry or request for information;
- information related to the service regarding which contact is requested; and
- any other information the individual voluntarily chooses to provide in order to explain their request.
Technical and security data associated with website forms
When using the website forms, certain technical data may be generated or recorded, including:
- date and time of submission;
- IP address;
- user agent or technical information related to the browser or device used;
- URL or page from which the submission was made;
- technical metadata related to the operation of the form; and
- information or technical signals used for the detection of spam, fraud, or abuse through Google reCAPTCHA.
The existence of such technical data may depend on the interaction performed and the current technical configuration of the website. TradeWorks does not represent that all such fields are generated or populated in every case.
4. Sensitive Personal Data
TradeWorks does not request or require sensitive personal data in order to use the website contact forms or to make an initial request for information by email or WhatsApp.
Accordingly, we ask that you do not include in your message data related to health, racial or ethnic origin, genetic information, religious, philosophical or moral beliefs, political opinions, sexual preference, or any other information that may be considered sensitive and that is not necessary to make your initial request.
5. Purposes of Processing
Personal data obtained through the website form, email, or WhatsApp will be processed solely for the following purposes:
- to respond to your request for information or contact;
- to respond to inquiries related to TradeWorks services;
- to follow up on your request and on the relationship with you as a prospect; and
- where applicable, to provide you with information, a proposal, or a quotation related to the request or service regarding which you contacted TradeWorks.
Additionally, data and technical signals related to the form may be processed to protect the website and its contact mechanisms against spam, fraud, abuse, automated traffic, or other activities that may affect its security or operation.
These are primary purposes directly related to the reason for which the data is collected.
TradeWorks does not use personal data obtained through these channels for newsletters, email marketing campaigns, advertising lists, or subsequent promotional campaigns independent from the request made by the individual.
Therefore, with respect to these contact channels, TradeWorks does not establish secondary marketing purposes for which a separate opt-out mechanism would need to be provided.
6. Google reCAPTCHA and Form Security
The website forms use Google reCAPTCHA as a protection mechanism against spam, fraud, and abuse.
When this service is executed, data or technical signals associated with the user’s interaction may be processed as necessary to perform risk analysis and determine whether an interaction has legitimate or automated characteristics.
reCAPTCHA may set the technical cookie named _GRECAPTCHA when it is executed for the purpose of providing its risk analysis.
According to the current documentation for the service, Google processes customer data captured through reCAPTCHA in connection with the provision and maintenance of the service and its security, threat detection, fraud, and abuse prevention capabilities.
TradeWorks implements reCAPTCHA for security and the prevention of spam, fraud, and abuse, and not for advertising or marketing purposes.
7. Use of WhatsApp as a Contact Channel
TradeWorks provides prospects with a link to voluntarily initiate a conversation through WhatsApp.
When an individual chooses to use this channel, the communication takes place through a technology platform operated by a third party and, therefore, access to and use of such platform are also subject to the terms, policies, and privacy settings applicable to the WhatsApp service.
TradeWorks will process the information it receives through this channel solely for the purposes established in this Privacy Notice.
8. Transfers of Personal Data
TradeWorks does not sell, rent, or commercially share with third parties the personal data obtained through the channels described in this Notice.
TradeWorks does not contemplate transferring such data to domestic or foreign third parties for purposes of their own.
The foregoing does not prevent communications that may be required by a competent authority when legally required or when any of the circumstances provided for under applicable law permit a transfer without the consent of the data subject.
Processing carried out by service providers acting on behalf of the responsible party in order to provide a technical service will not be considered a transfer when, from a legal standpoint, it constitutes processing by a data processor in accordance with applicable law.
9. Data Retention
For prospects who do not become clients, TradeWorks will retain their personal data for up to 24 months from the last substantive interaction with the prospect.
For these purposes, a substantive interaction means a communication or action directly related to the continuation of the request or potential professional relationship, such as a response, meeting, additional request for information, exchange related to a proposal or quotation, or an equivalent communication demonstrating that the follow-up remains active.
Once the retention period has expired, the data will be subject, as applicable, to the corresponding blocking, cancellation, or deletion processes, without prejudice to cases in which retention is necessary for an additional period in order to comply with legal obligations or address potential liabilities arising from its processing.
If the prospect becomes a client, the foregoing period will cease to apply as the prospect retention policy, and subsequent processing will be subject to the purposes, legal obligations, and retention periods applicable to the client relationship.
When the professional relationship requires additional processing activities not covered by this Notice, TradeWorks will make the applicable privacy notice available to the data subject before carrying out such processing.
10. Limitation on the Use or Disclosure of Personal Data
The data subject may request at any time that the use or disclosure of their personal data be limited.
To do so, the request must be sent to:
The request must allow the data subject to be identified and clearly indicate the processing activity whose use or disclosure they wish to limit.
TradeWorks will review the request in accordance with applicable law and will communicate the corresponding determination to the data subject.
11. Withdrawal of Consent
When the processing of personal data depends on the consent of the data subject, the data subject may withdraw such consent at any time by submitting a request to:
The request must allow the data subject to be identified and clearly indicate the processing activity for which they wish to withdraw consent.
Withdrawal of consent will not have retroactive effect and will not affect the lawfulness of processing carried out prior to such withdrawal.
Likewise, withdrawal will not prevent TradeWorks from continuing processing activities that must be maintained pursuant to law, for compliance with obligations arising from a legal relationship, or where another legal basis permits or requires such processing or retention.
TradeWorks will process the request in accordance with the mechanisms, procedures, and time periods established under applicable law.
12. ARCO Rights
The data subject or, where applicable, their legal representative may exercise at any time the rights of:
Access: to know the personal data TradeWorks maintains concerning the data subject and the general conditions of its processing.
Rectification: to request the correction of data that is inaccurate, incomplete, or outdated.
Cancellation: to request the cancellation of personal data when legally applicable.
Opposition: to object to the processing of personal data in the circumstances provided for under applicable law.
To exercise any of these rights, a request must be sent to:
The request must contain, as applicable:
- the name of the data subject and an address or any other means for receiving notifications;
- information or documentation sufficient to verify their identity and, where applicable, the identity and authority of their representative;
- a clear and precise description of the personal data with respect to which the data subject seeks to exercise any ARCO right, except when the request relates exclusively to the right of access;
- an indication of the ARCO right the data subject intends to exercise and what is being requested; and
- any other element or document that facilitates locating the personal data.
When rectification is requested, the requested changes must also be identified and the information or documentation supporting the request must be provided.
TradeWorks will communicate its determination within the maximum period established by applicable law, which is currently 20 business days from receipt of the request. If the request is granted, it will be implemented within the 15 business days following the date on which the response is communicated.
These periods may be extended once for an equal period when justified by the circumstances of the case, in accordance with applicable law.
The exercise of ARCO rights is free of charge, without prejudice to reproduction, copying, or delivery costs that may legally apply.
13. Security and Confidentiality
TradeWorks shall establish and maintain reasonable and appropriate administrative, technical, and physical measures to protect personal data against damage, loss, alteration, destruction, and unauthorized use, access, or processing, taking into consideration the nature of the data and the risks associated with its processing.
Likewise, persons involved in the processing of personal data must maintain confidentiality with respect to such data in accordance with applicable law.
14. Changes to the Privacy Notice
TradeWorks may modify this Privacy Notice when necessary to reflect changes in its processing practices, website operations, technological services used, or applicable law.
The current version of the Comprehensive Privacy Notice will remain permanently available at:
https://tradeworks.com.mx/privacy-policy/
When a modification involves new purposes or processing activities that, under applicable law, require the data subject’s consent to be obtained again, TradeWorks will take the necessary steps to obtain such consent before beginning the new processing activity.
15. Competent Authority
If an individual believes that their right to personal data protection has been violated, they may exercise the remedies provided under the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) before the competent authority.
Currently, the competent federal authority under such Law is the Secretaría Anticorrupción y Buen Gobierno (Secretariat of Anti-Corruption and Good Governance).
16. Contact
For any questions related to this Privacy Notice or to the processing of personal data carried out by TradeWorks:
LAB JURIDICO Y LEGAL MX, S.C. / TradeWorks
Lázaro Cárdenas, exterior number 216, interior 5
Residencial San Agustín Primer Sector
C.P. 66260
San Pedro Garza García, Nuevo León, Mexico
Email: contacto@tradeworks.com.mx