Política de Privacidad

Last updated: June 2026 Applies to: factum-partners.com and all related services

This Privacy Policy describes how Factum Partners, S.A. de C.V. collects, uses, and protects your personal information when you visit our website or engage with our services. We collect only what is necessary, we do not sell your personal information, and we respect the rights granted to you under Mexican (LFPDPPP), European (GDPR), and applicable U.S. privacy laws.

1. Who We Are

Factum Partners, S.A. de C.V. is a consulting and technology firm headquartered in Mexico City, Mexico, specializing in Project Portfolio Management, Innovation Management, and Process Optimization. We operate across Mexico, the United States, Spain, Brazil, Colombia, Chile, Argentina, and Central America. As the operator of this website and provider of our professional services, Factum Partners acts as the data controller responsible for the personal information described in this policy.

2. Data We Collect

We collect personal information only when it is necessary, proportionate, and relevant to the purpose for which it is collected.

Information you provide directly: contact details such as your full name, professional email address, phone number, job title, and company name submitted through our contact form or email correspondence; the content of your inquiries or messages; and information you share with us during consulting engagements, which may include organizational or operational business data.

Information collected automatically: usage data including IP address, browser type, operating system, pages visited, time on site, and referring URL; and cookie and tracking data such as session identifiers and behavioral data collected through first-party and third-party cookies.

3. How We Use Your Data

We use your personal information to respond to inquiries submitted through our contact form or sent directly to our team; to deliver consulting services and manage our professional relationship with clients and partners; to send relevant communications about our services, events, or industry insights, only with your consent or where permitted by applicable law; to analyze website usage and improve site performance and content; to fulfill legal obligations including tax and invoicing requirements; and to protect the security and integrity of our systems.

4. Legal Basis for Processing (GDPR)

For individuals located in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on the following legal bases: consent, where you have given us explicit permission; contract, when processing is necessary to perform an agreement with you or take pre-contractual steps at your request; legal obligation, when required by applicable law or regulatory authority; and legitimate interest, for purposes such as improving our services and managing our operations, where our interests do not override your rights and freedoms. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

Factum Partners does not sell, rent, or trade your personal information. We may share data with trusted technology partners and service providers — including Planview, Brightidea, and ElectroNeek — who act as data processors on our behalf and are bound by appropriate data protection agreements. We also use third-party tools for hosting, analytics, email delivery, and CRM functions; these providers are prohibited from using your data for their own purposes. We may disclose personal information when required by law, court order, or regulatory authority, including tax authorities in Mexico (SAT). In the event of a merger, acquisition, or asset sale, we will notify you in advance if such a transfer affects your data.

6. International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence, including Mexico, the United States, Spain, and other countries where our service providers operate. For transfers from the EEA or UK to countries without an adequate level of data protection, we rely on Standard Contractual Clauses approved by the European Commission or other permitted mechanisms. All processing of personal data of Mexican residents is conducted in accordance with the LFPDPPP and its regulations.

7. Cookies and Analytics

Our website uses cookies and similar technologies to improve your experience and understand how visitors interact with our content. Essential cookies are required for the basic functioning of the site and cannot be disabled. Analytics cookies, including Google Analytics, collect anonymized data about site usage to help us improve performance and content. Preference cookies remember your settings across sessions. You can control non-essential cookies through your browser settings or our cookie consent manager. For information on how Google processes analytics data, please refer to Google’s Privacy Policy at policies.google.com/privacy.

8. Data Retention

Contact and inquiry data is retained for up to three years from the date of last contact, or until you request deletion. Client and service data is retained for the duration of the engagement and for a minimum of five years thereafter, as required by Mexican tax and commercial law. Invoicing and financial records are retained for at least five years in compliance with SAT requirements. Analytics data is retained in anonymized form for up to 26 months. When data is no longer required, it is securely deleted or anonymized.

9. Your Rights

Depending on your country of residence, you may have the right to access the personal data we hold about you; to request correction of inaccurate or incomplete data; to request deletion of your data, subject to legal retention requirements; to object to processing based on legitimate interests or for direct marketing; to request restriction of how we use your data; and to request portability of data processed by automated means based on consent or contract.

Mexican residents have ARCO rights — Access, Rectification, Cancellation, and Opposition — under the LFPDPPP. Requests are processed within 20 business days.

We will respond to all verified requests within 30 calendar days. We reserve the right to verify your identity before processing any request. If you are not satisfied with our response, you may lodge a complaint with the relevant supervisory authority: INAI in Mexico (inai.org.mx), your national Data Protection Authority in the EU (edpb.europa.eu), or the ICO in the United Kingdom (ico.org.uk).

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, disclosure, or destruction, including encrypted data transmission, access controls, and regular security assessments. No method of electronic transmission or storage is completely secure. In the event of a data breach posing a risk to your rights or freedoms, we will notify you and the relevant supervisory authority as required by law.

11. Children’s Privacy

Our website and services are directed exclusively at business professionals and organizations. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or services. When we make material changes, we will update the date at the top of this page and, where appropriate, notify affected individuals by email or through a prominent notice on our website.

13. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us at:

Factum Partners, S.A. de C.V. Email: contacto@factum-partners.com Website: factum-partners.com Headquarters: Mexico City, Mexico

For ARCO rights requests under the LFPDPPP, please submit your request in writing to the email above, including your full name, a copy of your official ID, and a clear description of the right you wish to exercise. We will acknowledge receipt within 5 business days and resolve your request within 20 business days.