Privacy notice

Last updated: October 7, 2026. This notice is issued under the Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on March 20, 2025.

1. WHO IS RESPONSIBLE FOR YOUR DATA

PBR Sales & Marketing is responsible for the processing of your personal data.

The personal data department of PBR Sales & Marketing handles everything related to your data at the email hola@pbr.mx or the WhatsApp number +52 322 473 3336.

2. WHAT DATA WE PROCESS

Depending on your relationship with PBR Sales & Marketing, we process the following data:

• If you request a diagnostic at pbr.mx or write to us: your name, the name and type of your business, your city, your WhatsApp, your email and whatever you write to us about what you want to solve; also, the language of the page, the campaign or website you came from, the first page you saw and the page you came from.
• If you are a client or a client’s representative: your name, the details of your official ID, your address, your tax data, your contact details, the details of the power of attorney under which you represent a company, and your payment data.
• If you appear in a photograph or video produced by PBR Sales & Marketing: your name, your ID, your image and your voice; if you are a minor, also the name and ID of your mother, father or guardian.
• If you visit pbr.mx: the data collected by the tracking technologies explained in section 8.

Clients’ payment data are financial (patrimonial) data and are processed without your consent because they are required to perform the contract (article 9, section IV, of the law).

We do not request sensitive personal data.

3. WHAT WE USE YOUR DATA FOR

Purposes necessary for our relationship with you:

• preparing the diagnosis you requested and contacting you to present it;
• answering your messages and preparing proposals and quotes;
• identifying the parties, signing and performing the contract, providing the services, collecting payment, invoicing and meeting tax obligations;
• producing, editing and delivering photographs and videos, and using them in the uses authorized in writing by the people who appear in them;
• handling requests submitted regarding personal data.

Purposes that are not necessary and that require your consent. You may refuse them without affecting your relationship with PBR Sales & Marketing:

• using the photographs and videos in which you appear in the portfolio and promotion of PBR Sales & Marketing, if you authorize it in the Image Release form;
• measuring visits to pbr.mx and showing ads of PBR Sales & Marketing on Meta and Google to people who visited the site, with the technologies in section 8.

4. HOW TO LIMIT THE USE OR DISCLOSURE OF YOUR DATA

You may ask in writing at hola@pbr.mx that we stop using your data for the purposes that are not necessary. In the Image Release form you may tick only the uses you authorize. And you may limit the tracking technologies as explained in section 8.

5. HOW TO EXERCISE YOUR ARCO RIGHTS

You may access, rectify or cancel your data, or object to its processing (ARCO rights). To do so, send your request to hola@pbr.mx with:

• your name and an email address or other means to receive the response;
• a copy of your official ID or, if you act through a representative, the documents that prove identity and representation;
• a clear description of the data regarding which you wish to exercise the right, unless it is the right of access;
• the right you wish to exercise or what you are requesting;
• any other document that helps locate your data.

If you request a rectification, indicate what must be corrected and attach the supporting document.

We will respond within a maximum of 20 business days from receipt of the request. If it is granted, it will take effect within the 15 business days following the response. These periods may be extended only once for an equal period, when the circumstances of the case justify it.

Access is provided by making the data available to you or by delivering a copy as an electronic document. Exercising ARCO rights is free of charge; only reproduction, copying or shipping costs could be charged.

If you disagree with the response, you may file a data protection request with the Secretariat of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno) within fifteen business days after receiving it; if you do not receive a response, you may file it once the response period expires.

6. HOW TO REVOKE YOUR CONSENT

You may revoke the consent you have given at any time, with a request to hola@pbr.mx containing the same information as in the previous section. Revocation has no retroactive effect. It does not apply to data that a legal provision requires us to keep processing, such as tax data.

7. TO WHOM YOUR DATA IS TRANSFERRED

We transfer data without your consent only in the cases of article 36 of the law: to the tax authorities, when a law requires it (section I); to the authorities that require it for the procurement or administration of justice (section V); and when necessary to recognize, exercise or defend a right in judicial proceedings (section VI).

The only transfer that requires your consent is the delivery of photographs and videos with your image and voice to the business that commissioned the production, for the uses you authorize. That consent is given by signing the Image Release form.

Providers that process data on behalf of PBR Sales & Marketing to provide it with a service, such as website hosting or email, do not receive a transfer: they act as processors and may only use the data for that service.

8. TRACKING TECHNOLOGIES ON PBR.MX

pbr.mx uses the Meta pixel and Google Analytics, with these Google advertising features: Google signals and Google Ads remarketing. These tools collect browsing data, such as browser and device identifiers, the IP address, the pages visited, the actions on the site and the page you came from. We use them to measure visits and to show ads of PBR Sales & Marketing on Meta and Google to people who visited the site. Meta and Google also process that data under their own policies.

You may block or delete cookies from your browser settings, adjust your ad preferences in your Meta and Google accounts, and install the Google Analytics opt-out browser add-on.

9. DATA PBR SALES & MARKETING PROCESSES ON BEHALF OF ITS CLIENTS

When PBR Sales & Marketing receives data of the customers or leads of the businesses it serves, for example through a campaign or an appointment, it processes them as a processor on behalf of that business (article 2, section XII, of the law). Those data are governed by that business’s privacy notice, and the rights over them are exercised before that business.

10. CHANGES TO THIS NOTICE

Any change to this notice will be published at pbr.mx/en/privacy-notice, with its update date. Clients will also be notified by email.