Privacy and data processing
Zarur Legal Services S.A.S., RFC ZLS260729LL1, operator of the Zarur Legal Insights brand, is responsible for processing personal data. Its contact address is Calzada de los Misterios 360, Col. Vallejo, Gustavo A. Madero, Mexico City, C.P. 07870, Mexico. The privacy and ARCO rights contact is contacto@zarurls.com.
Service and purposes
Zarur Legal Insights will process data to manage the request, identify the parties, receive documents directly from the owner, validate consistency, consult legal and relevant sources, prepare and deliver the report, respond to clarifications and comply with legal and contractual obligations. They will not be reused for marketing without separate authorization.
Data by participant and service
The initial request collects contact, company, decision, relationship, exposure and context data without asking for sensitive documents. If an investigation is contracted, the scope may require identity, contact, address, activity, career, relationships, income or assets, as well as relevant corporate, labor, economic, contractual or registry documents. Each participant or representative must only provide their own information or information that they are authorized to provide. In leasing, tenant and guarantor keep separate invitations for their data and documents.
Asset data and consent
The benefit requires processing patrimonial or financial data provided by its owners. Before sending, each participant knows the purposes and expressly expresses his or her consent. No sensitive personal data is intentionally requested. If a document contains unnecessary information, the owner can hide it as long as it does not prevent the requested verification.
Analysis and decisions
The report distinguishes documents provided, consultations in lawful sources, coincidences, differences and limitations. Zarur Legal Insights does not decide for the client, does not guarantee conduct, solvency or future performance and does not make exclusively automated decisions of acceptance or rejection.
Managers and transfers
Technology providers, including Wix, Stripe and Cloudflare, are used to operate the site, manage accounts and records, process payments and host information, and act under their own privacy obligations and conditions. The data is not sold. They will only communicate when necessary to provide the service, comply with a legal obligation or respond to a valid request from authority.
Security and conservation
Documents are received via individual, single-use invitations, stored encrypted in a private repository—with no public links—and can only be downloaded from an authorized administrative account. Payment validation, secure sessions, role controls, and query and download logging are also applied. Unless a legal or contractual obligation or dispute requires longer retention, original files are automatically deleted no later than twelve months after receipt. Reports, consents, logs and tax records may be retained for the applicable legal periods and then blocked or deleted.
ARCO rights and revocation
To request access, rectification, cancellation or opposition, revoke consent or limit use and disclosure, the owner may write to contacto@zarurls.com. The request must state the participant’s name, preferred response channel, the right being exercised, a clear description of the data involved, and documents proving identity or representation. We will communicate our decision within twenty business days after receiving a complete request and, when appropriate, implement it within the following fifteen business days. Each period may be extended once when legally permitted and justified.
Security incidents
If a security incident materially affects a participant’s financial or personal rights, Zarur Legal Insights will document the incident, contain the risk and notify affected people without delay through the available contact channel, explaining the nature of the incident, the data involved, the measures taken and recommended protective steps.
Changes to the notice
The relevant modifications to this notice will be communicated on this same page. The current version will be the one published at the time of delivery of the data.