Our Privacy Notice

1. Party responsible for processing your personal data

Indimetropolitana, S.A. de C.V. ("Indigo Translations"), with an address at Avenida Presidente Masaryk #101 - 32, Colonia Polanco, Alcaldia Miguel Hidalgo, CDMX, Mexico, 11560, is responsible for processing the personal data covered by this privacy notice (the "Notice"). Processing is governed by Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) (the "Law") and other applicable provisions.

You may contact Indigo Translations by calling +52 55 5557 4260 and asking to be connected to Indigo Translations, or by emailing info@indigo-translations.com.mx. Requests under this Notice should also be sent to that email address, addressed to the person responsible for Client Relations.

2. Purposes of processing

Primary purposes. We use your data to respond to enquiries and requests for quotations; define and provide interpretation, translation, localisation and administrative support services (the "Services"); communicate with you and the people you designate for the engagement; coordinate documents, queries and deliveries; manage invoicing and payment; and comply with legal and contractual obligations relating to the Services.

Secondary purposes. With your authorisation, we may use your contact details to send information and promotional communications about the Services. You may refuse or withdraw this authorisation at first contact or at any later time by emailing info@indigo-translations.com.mx with the subject "No promotions". Refusing authorisation does not affect or prevent the provision of the Services.

Where processing requires consent, we will obtain it in the form required by the Law. Express consent for financial or asset-related data and express written consent for sensitive data are addressed in section 4. Exceptions to consent requirements will apply only where the relevant legal conditions are met.

3. Personal data we collect and how we obtain it

The website contact form requests your name, email address, organisation, optional telephone number and a description of the matter. We use this information to respond to your enquiry and, where appropriate, prepare a quotation. Do not send sensitive data through that form.

To arrange and provide the Services, we may collect the necessary identification and contact details, addresses, tax and billing information, and personal data contained in documents to be translated or reviewed. The scope and categories of data in those documents will be determined according to the engagement and disclosed before processing where required.

Data may be obtained directly from you, verbally, in writing or electronically; from people you authorise to coordinate the engagement; or from clients who provide documents for the Services. We may also obtain data from publicly accessible sources permitted by the Law, solely for the disclosed purposes and under the applicable legal basis.

Where Indigo Translations processes personal data on behalf of a client, it will act in accordance with the engagement instructions and the obligations applicable to a data processor.

The site stores your language preference in your browser’s local storage to remember your selection. You can remove it by clearing the site data in your browser’s privacy settings. To display fonts and load components needed for the page to function, your browser requests resources from Google Fonts and unpkg. These requests communicate technical connection data to those providers, such as your IP address and browser information included in the request. Consult your browser’s privacy controls to manage local storage and block external requests; blocking these resources may affect the site’s appearance or operation.

4. Sensitive, financial and asset-related data

The initial contact form does not request sensitive personal data as defined in article 2(VI) of the Law. Documents for an engagement may nevertheless contain such data. Before receiving and processing them, we will agree with the client on transfer and storage methods and the applicable conditions, taking the sensitivity of the information into account.

Where Indigo Translations is responsible for obtaining consent to process sensitive personal data, that consent will be express and in writing, as required by article 8 of the Law, unless a legal exception applies. For financial or asset-related data, we will obtain express consent where required by article 7 of the Law, subject to the applicable legal exceptions. Processing will be limited to the data and purposes necessary for the engagement.

5. Use, security and communication of data

We will use your data solely for the disclosed purposes and for the periods necessary to fulfil them and meet applicable retention obligations. Where cancellation is appropriate, data will be blocked and subsequently deleted in accordance with the Law; data may be retained where required by law or to address liabilities arising from the legal relationship.

Access to documents is restricted to those assigned to the engagement. We apply security measures and confidentiality obligations according to the nature and sensitivity of the information, and agree with the client on transfer and storage methods. Confidentiality obligations continue after the relationship with the people involved in processing ends.

To coordinate or deliver the Services, we may communicate only the necessary data to recipients designated by you or the client. Data may also be communicated to competent authorities where required by a legal obligation or request. Domestic or international transfers to third parties will comply with articles 35 and 36 of the Law: we will inform the recipient of this Notice and the applicable purposes, and obtain the data subject’s consent where required. Consent will be dispensed with only where a legal exception applies.

For a transfer requiring your consent, we will first inform you of the recipient or recipient category and the purpose, and ask you to state whether you accept or refuse that transfer. Merely reading this Notice will not be treated as blanket authorisation for any transfer.

Suppliers processing data on behalf of Indigo Translations must follow the processing instructions, confidentiality obligations and applicable security measures. Their involvement as data processors will be distinguished from a transfer to a third party processing data on its own behalf.

6. Rights of access, rectification, cancellation and objection

You or your legal representative may request access to your personal data at any time; rectification where it is inaccurate, incomplete or out of date; cancellation where appropriate; or objection to processing in the circumstances provided by the Law. These are known as ARCO rights. Cancellation is subject, where applicable, to the blocking periods and retention exceptions established in articles 24 and 25 of the Law.

Send your request to info@indigo-translations.com.mx, addressed to the person responsible for Client Relations, and include: (i) your name and address or another means of receiving notifications; (ii) documents establishing your identity and, where applicable, your representative’s authority and identity; (iii) a clear and precise description of the data concerned, except for an access request; (iv) the right you wish to exercise or what you are requesting; and (v) information that helps locate the data. For rectification, specify the requested changes and attach supporting documents.

We will communicate our decision within a maximum of twenty business days from receipt of the request. If the request is granted, we will implement the decision within fifteen business days after communicating our response. Each period may be extended once for an equal period where the circumstances justify it, in accordance with article 31 of the Law.

The response will be sent by your designated notification method. Where access is granted, data will be made available to you or provided as uncertified copies or electronically, after your identity or your representative’s identity has been established. Exercising ARCO rights is free of charge, subject to reproduction or delivery costs permitted by the Law. If a request is refused in whole or in part, you will be informed of the reasons in accordance with the applicable provisions.

7. Withdrawal of consent and limits on use or disclosure

You may withdraw your consent to the processing of your personal data at any time, without retroactive effect, and may request limits on its use or disclosure. Email your request to info@indigo-translations.com.mx, addressed to the person responsible for Client Relations, stating your name, a means of receiving a response and the processing or use concerned. Where necessary to protect your data, we will ask you to establish your identity or authority to act as representative.

For these requests, we will apply the same response periods stated in section 6: twenty business days to communicate our decision and, where appropriate, a further fifteen business days to implement it, with any justified extensions that apply. We will inform you of any legal obligation that prevents us from immediately stopping processing or requires retention of certain data. If the data is necessary to provide the Services, we will explain the consequences of withdrawal for the engagement.

To stop receiving promotional communications, simply email info@indigo-translations.com.mx with the subject "No promotions" and identify the email address or telephone number receiving them. You do not need to exercise an ARCO right or provide identity documents to unsubscribe.

8. Changes to the privacy notice

We may update this Notice to reflect changes in the law, the Services or our processing practices. The updated version and its date will be published at www.indigotranslations.com.mx under "Privacy notice". You may also request it by emailing info@indigo-translations.com.mx. Where a change requires new consent, we will obtain it before carrying out the relevant processing.

9. Competent authority and protection of your rights

If you believe that your rights have been infringed or that processing of your data breaches the Law, you may contact the Secretaría Anticorrupción y Buen Gobierno, the authority responsible for personal data held by private parties, through its official channels and the procedures provided by the Law.

If you disagree with the response to an ARCO request, you may submit a data protection application to that authority within fifteen business days after the response is communicated to you, in accordance with article 40 of the Law. If you receive no response, you may submit the application once the statutory response period has expired, enclosing evidence of the date you submitted your request. Consult the authority’s official channels and current requirements for the procedure.