Comprehensive Privacy Notice

Last updated: November 3, 2026

This English version is provided for convenience. In case of any difference, the Spanish version prevails.

GRUPO ENLAFIN, S.A.P.I. DE C.V., in its capacity as the data controller responsible for the processing of personal data, with its domicile at Calzada General Mariano Escobedo 748, Colonia Anzures, C.P. 11590, Alcaldía Miguel Hidalgo, Ciudad de México, makes this Comprehensive Privacy Notice available to data subjects in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and other applicable provisions.

1. Definitions

For the purposes of this Privacy Notice, the following terms mean:

Privacy Notice:: the document made available to the data subject, in physical, electronic, or any other format, through which the data controller informs the data subject of the purposes and main characteristics of the processing of their personal data.
Personal Data:: any information concerning an identified or identifiable natural person.
Sensitive Personal Data:: personal data that affect the most intimate sphere of the data subject, or whose misuse may give rise to discrimination or entail a serious risk to the data subject.
Consent:: the free, specific, and informed expression of the data subject's will by means of which the processing of their personal data is carried out.
ARCO Rights:: the rights of Access, Rectification, Cancellation, and Opposition with respect to personal data and its processing.
Data Controller:: the private-sector natural person or legal entity that carries out the processing of personal data.
Data Processor:: the natural person or legal entity that processes personal data on behalf of the data controller.
Data Subject:: the person to whom the personal data relate.
Transfer:: any communication of personal data, within or outside Mexican territory, made to a person other than the data subject, the data controller, or the data processor.

2. Purpose and principles

The purpose of this Notice is to inform data subjects of the existence and main characteristics of the processing to which their personal data will be subject, so that they can make informed decisions and keep control over their information.

Personal data will be processed in observance of the principles of lawfulness, purpose, loyalty, consent, quality, proportionality, information, and accountability.

3. Personal data we may collect

Depending on its relationship with the data subject, VidaMar may process the following categories of data:

Identification data: first name, surnames, marital status, RFC (Mexican taxpayer ID), CURP (Mexican population registry code), and official identification.
Contact data: address, landline or mobile phone number, and email address.
Financial or asset data, when necessary for a transaction: bank account, CLABE (Mexican interbank account number), account holder, and information related to payments, financing, or contractual obligations.
Image and voice, when participating voluntarily in video calls, meetings, or audiovisual communications.
Documentation for compiling or verifying files, such as identification documents, proofs of address, and other documents necessary for the corresponding legal or commercial relationship.
Technical and browsing data when our websites or digital services are used, such as IP address, browser and device type, language, access times, referring pages or sites, interaction with the site, cookies, pixels, and similar technologies.

Should it be necessary to process sensitive personal data, express written consent will be requested under the terms established by applicable law. Financial or asset data that require consent will be processed with express consent, except in the cases provided for by the Law.

The data subject represents that the data they provide are true, complete, and up to date.

4. How data is obtained

Personal data may be obtained directly from the data subject through, among other means, telephone communications, email, video calls, in-person meetings, contracts, documents, websites, digital platforms, applications, contact tools, appointment calendars, or interactions with digital services.

Data may also be obtained from publicly accessible sources or from other sources permitted by applicable law.

5. Purposes of the processing

Primary and necessary purposes:

Responding to requests for information and contact, and commercial follow-up.
Scheduling and managing appointments, meetings, or video calls.
Preparing quotes, proposals, and simulations related to VidaMar's products and services.
Compiling, updating, and managing the files of prospective clients, clients, co-owners, or persons related to a transaction.
Verifying identity and, where applicable, compiling contractual, tax, financial, or compliance documentation.
Formalizing, managing, and performing legal and commercial relationships.
Providing real estate, co-ownership, management, and customer care services related to VidaMar.
Handling requests, clarifications, complaints, and the exercise of rights.
Maintaining the security, operation, continuity, and improvement of our websites, systems, and digital platforms.

Secondary purposes:

Where applicable, we may use certain technical, browsing, and contact data for statistical analysis, campaign measurement, advertising attribution, improvement of the digital experience, marketing communications, and VidaMar advertising or remarketing.

These secondary purposes are not essential to the main relationship. The data subject may at any time request that such use be limited, or revoke their consent, by sending an email to legal@vidamar.club.

6. Cookies, pixels, and similar technologies

Our websites may use cookies, pixels, web beacons, and similar technologies to enable technical functions, remember preferences, measure use of the site, understand campaign performance, and improve the browsing experience.

The data you enter in the site's forms (name, WhatsApp number, email, and, if you built one, your quote with its reference number) are recorded in HubSpot, the tool VidaMar uses to follow up with its clients, so that a member of our team can contact you. Recorded along with them are the weeks you looked at in the simulator, the ad or link you came from, and, only if you accepted cookies, your browser's HubSpot and Meta identifiers. To know how many people visit the site and which sections and features they use, the site uses PostHog, which, without your authorization, only counts your visit anonymously, without cookies or recordings. Only with your authorization, PostHog also uses cookies, click maps, and session recordings with form fields hidden, and the site uses HubSpot's tracking code for analytics and Meta services for advertising measurement. These third parties may process technical data in accordance with their own terms and privacy notices.

Users can set their browser to block or delete cookies. Some features of the site or of integrated services may not work properly if certain technologies are disabled.

Optional analytics and marketing technologies are only activated according to the preferences chosen by the user, who can change or withdraw them at any time from Cookie settings. For more detail, see our Cookie Policy.

7. Data processors, third parties, and transfers

VidaMar may rely on providers of technology, hosting, storage, security, messaging, calendar, communication, data management, and other services necessary to operate its services. When these providers act as data processors, they will process the data on behalf of the data controller in accordance with the applicable instructions and obligations.

Where a transfer of personal data to a domestic or foreign third party that requires the data subject's consent is intended, such consent will be requested under the terms of the Law. Transfers that do not require consent may be carried out only in the cases permitted by applicable law.

8. Limiting use or disclosure and revoking consent

The data subject may at any time request to limit the use or disclosure of their personal data, or revoke consent previously given, where legally applicable, by sending a request to legal@vidamar.club.

The request must make it possible to identify the data subject and must clearly state the processing they wish to limit or the consent they wish to revoke.

Revocation will not have retroactive effect and may be subject to the exceptions or limitations provided for by applicable law.

9. Safekeeping, security, and retention

VidaMar will maintain reasonable and appropriate administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, and unauthorized use, access, or processing.

Personal data will be retained only for as long as necessary to fulfill the purposes disclosed and the applicable legal, tax, accounting, contractual, or liability obligations. When they are no longer necessary, they will be blocked and subsequently deleted in accordance with applicable law.

10. ARCO rights

The data subject or their legal representative may at any time exercise the rights of Access, Rectification, Cancellation, and Opposition with respect to their personal data.

The request may be sent to legal@vidamar.club or submitted in writing at the data controller's domicile, and must contain:

The data subject's name and address, or any other means of receiving notifications.
Documents evidencing the identity of the data subject or, where applicable, the identity and legal authority of their representative.
A clear and precise description of the personal data with respect to which any of the ARCO rights is to be exercised, except in the case of the right of access.
A description of the ARCO right to be exercised or of what the data subject is requesting.
Any other element or document that helps locate the personal data.

Requests for rectification must also state the changes to be made and include documentation supporting the request.

VidaMar will communicate its decision within a maximum of twenty business days from receipt of the request. If the request is granted, it will be given effect within the fifteen business days following communication of the response. These periods may be extended only once, for an equal period, when the circumstances justify it.

Exercising ARCO rights is free of charge, without prejudice to any reproduction, copying, or shipping costs that may apply.

11. Competent authority

If the data subject considers that their right to the protection of personal data has been violated, they may turn to the Secretariat of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno) and exercise the means of protection provided for by the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

12. Data of minors and third parties

When a person provides personal data of minors, persons under guardianship, or any other third party, they represent that they have the legally required authorization, representation, or consent to provide such data and allow its processing.

13. Changes to this Privacy Notice

VidaMar may modify or update this Privacy Notice as a result of legal, regulatory, or operational changes, or changes in the services provided.

Any changes will be published at: https://vidamar.club/aviso-privacidad

The version published at that address will show the date of its last update.

14. Contact

Data controller:: GRUPO ENLAFIN, S.A.P.I. DE C.V.
Domicile:: Calzada General Mariano Escobedo 748, Colonia Anzures, C.P. 11590, Alcaldía Miguel Hidalgo, Ciudad de México.
Email for privacy matters and the exercise of rights:: legal@vidamar.club

Making this Privacy Notice available does not replace the express consents that, under applicable law, must be obtained for certain processing of personal data.

Back to the site Cookie settings