Privacy notice

1. 01Identity and address of the data controller

   Grupo ICB is the controller of your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”), published in the Official Gazette of the Federation on 20 March 2025.

   Address: Presidente Masaryk 61, piso 9, despacho 901, Col. Polanco, Alcaldía Miguel Hidalgo, C.P. 11560, Ciudad de México, Mexico.

   Contact for personal data matters: contacto@grupoicb.mx.

2. 02Personal data we collect

   Through the contact form we collect:

   • Name.
   • Email address.
   • Organisation (optional).
   • Subject and content of your message.

   We do not request sensitive personal data (for example health status, ethnic origin, religious beliefs or political opinions). Please do not include them in your message.

   While you browse, our hosting provider may log technical connection data, such as the IP address, in security and operations logs. The form also limits submissions per IP address; that counter is held only in memory and for a few minutes.

3. 03Purposes of processing

   Primary purposes, necessary to handle your request:

   • Receive, read and reply to the message you send us.
   • Follow up on your enquiry and, where applicable, begin a professional services relationship with you or your organisation.
   • Prevent abuse and keep the site and the form secure.

   Secondary purposes, not necessary to handle your message:

   • Compile internal statistics, without identifying you, on the topics of enquiries we receive.
   • If you authorise it, contact you to share the weekly report and other content from the firm.

   If you do not want your data processed for the secondary purposes, write to contacto@grupoicb.mx saying so. Declining will not affect how we handle your message.

4. 04Transfers and service providers

   We do not transfer your personal data to third parties other than the providers that serve us on our behalf (processors), such as site hosting and email delivery. These providers may process your data only on our instructions and may be located outside Mexico.

   We will disclose your data to others only when a law or a competent authority requires it, in the cases set out in Article 36 of the Law.

5. 05ARCO rights and how to exercise them

   You have the right to Access your personal data, to Rectify it when it is inaccurate or incomplete, to request its Cancellation, and to Object to its processing (ARCO rights).

   To exercise them, send a request to contacto@grupoicb.mx with the subject “ARCO rights” that includes:

   • Your name and an address or means to receive notifications.
   • A copy of a document proving your identity or, where applicable, your representative's.
   • A clear and precise description of the data concerned, unless you are requesting access.
   • The right you wish to exercise, or what you are requesting.
   • Anything that helps us locate your data. To rectify, state the changes and attach supporting documents.

   We will communicate our decision within a maximum of twenty business days from receipt of your request. If it is upheld, it will be carried out within the following fifteen business days. These periods may be extended once, by an equal period, when circumstances justify it. Exercising ARCO rights is free of charge; only reproduction or shipping costs may be charged.

   If you believe your right has not been honoured, you may file a data protection request with the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance).

6. 06Withdrawing consent and limiting use

   You may withdraw the consent you gave us at any time, or ask us to limit the use or disclosure of your data, by writing to contacto@grupoicb.mx with the subject “Withdrawal” and the identification details listed in the previous section. Withdrawal has no retroactive effect and, depending on the case, may prevent us from continuing to handle your request.

7. 07Cookies and tracking technologies

   This site uses no tracking, advertising or third-party analytics cookies, and it loads no scripts, fonts or content from external domains.

   It may store only technical items strictly necessary for it to work, such as your browsing language preference. These are not used to identify you or to build profiles.

8. 08Security and retention

   We maintain administrative, technical and physical safeguards to protect your data against damage, loss, alteration, destruction or unauthorised use. We keep your data for as long as needed to handle your request and meet legal obligations, and then delete or anonymise it.

   We do not knowingly collect data from minors.

9. 09Changes to this notice

   Any change will be published on this page with its update date. If a change alters the purposes or requires your consent again, we will tell you at the email address you gave us.

Version for legal review