Data protection
Privacy Notice
Last updated: October 2026
Palmera Legal, domiciled in Quintana Roo, Mexico ("the Firm"), is the controller responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and the Privacy Notice Guidelines. This notice explains what data we collect, what we use it for, who we may share it with, and how you can exercise your rights.
Data controller
Palmera Legal is responsible for processing your personal data. For any matter related to this notice you can reach us at contacto@palmeralegal.mx, or by WhatsApp or phone at +52 983 441 9515, Monday to Friday from 9:00 a.m. to 5:00 p.m.
Who this notice applies to
This notice applies to people who contact us or request information (prospects), to clients who engage our real estate, corporate, immigration, intellectual property, contract or government-processing services, to people who take part in a recruitment process or collaborate with the Firm, and to our suppliers.
Personal data we collect
From prospects: name, email, phone, nationality, preferred language, and whatever you choose to share when describing your matter. From clients, depending on the service: official ID or passport, immigration document, RFC, CURP, proof of address, marital status and spouse details, financial and asset information, bank details for paying taxes and fees, property information, shareholdings, powers of attorney, handwritten or electronic signature and, in immigration matters, photographs, proof of income and family-tie documents. From candidates and collaborators: academic and work history, references, social security number and bank details for payroll. From suppliers: legal name, RFC, tax address, tax status certificate and bank details for payment.
Sensitive personal data
As a rule we do not collect sensitive data. In immigration procedures based on family ties or humanitarian grounds, in labor matters and in collaborator files, data on health or family situation may be collected. Such data is processed only with your express written consent, for the specific purpose of the procedure, and is protected with reinforced security measures.
Primary purposes
To answer your request for information and follow up; prepare quotes and proposals; build your file; carry out property due diligence; prepare and formalize purchases and bank trusts (fideicomisos); incorporate companies and manage corporate acts; draft powers of attorney, wills and contracts; conduct trademark searches and registrations; handle immigration and government procedures before the authorities; represent you before notaries, registries and agencies; issue tax receipts and comply with the Firm's legal, tax and professional obligations.
Secondary purposes
We may also use your data to send you information about our services, newsletters and event invitations, and to compile internal statistics and measure website usage. These purposes are optional: you can opt out from your first contact or at any time by writing to contacto@palmeralegal.mx, without affecting how we handle your request or the services you have engaged.
Data transfers
We do not sell or share your data with third parties for marketing purposes. To deliver the service you engaged, we may transfer your data, only to the extent necessary, to notaries and public brokers, trust and banking institutions, the Public Registry of Property and Commerce, cadastre and treasury offices, the Mexican Institute of Industrial Property, the National Institute of Migration, the Ministry of Foreign Affairs, the Tax Administration Service, the Mexican Social Security Institute, courts and other competent authorities. These transfers do not require your consent under Article 37 of the Law. The providers that run our communication, email, scheduling and payment tools may also access your data; they act on behalf of the Firm and under confidentiality obligations.
Cookies and tracking technologies
This site uses one first-party cookie to remember whether you accepted or rejected the cookie notice, plus aggregated, anonymous measurement tools (Vercel Analytics and Vercel Speed Insights) that set no cookies and do not identify individual visitors. Data that may be obtained this way includes IP address, browser and device type, pages visited and approximate location. You can disable cookies in your browser settings; if you do, the notice will appear again.
ARCO rights and how to exercise them
You have the right to access your personal data, rectify it when inaccurate, cancel it when you consider it is no longer needed for the purposes of this notice, and object to its processing for specific purposes. To exercise them, send your request to contacto@palmeralegal.mx or to the Firm's address, stating your full name and a means to receive our reply, a copy of your official ID (and of the document proving representation, where applicable), the right you are exercising and a clear description of the data concerned. We will reply within 20 business days and, if your request is granted, make it effective within the following 15 business days. These periods may be extended once, for an equal period, when circumstances justify it.
Withdrawing consent and limiting use
You may withdraw your consent to the processing of your data and ask us to limit its use or disclosure through the same procedure described above. Note that we may not always be able to act immediately, as a legal obligation may require us to keep processing your data, and that withdrawal may mean we can no longer provide the service you engaged.
Security measures and retention
We apply administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction or unauthorized use. We keep data for as long as needed to fulfil the purposes of this notice and applicable legal obligations, including tax and professional retention periods. Information about your matters is further protected by attorney-client privilege.
Changes to this notice
Palmera Legal may amend this notice to reflect legislative changes, new internal policies or new services. Any change will be published on this page with its update date. If you believe your right to personal data protection has been violated, you may file a complaint with the competent data protection authority in Mexico, without prejudice to contacting us first to resolve any concern.