Last Updated: 5 April 2026
This Privacy Policy describes how Valestario ("we," "us," or "our"), operating through the website valestario.com, collects, uses, stores, and protects the personal data of users who interact with our platform. This policy is issued in compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) of Mexico, its Regulations, and the Guidelines issued by the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI).
Definition: Personal Data
Any information relating to an identified or identifiable natural person (the data subject). This includes names, email addresses, phone numbers, and any other data that, alone or in combination, can identify a specific individual.
1. Identity and Contact Information of the Data Controller
The data controller responsible for your personal information is:
- Name: Valestario
- Website: valestario.com
- Address: Cda. Sabino 7-2a, Ciudad de México, Mexico
- Phone: +52 55 1209 8310
- Email: info@valestario.com
2. Personal Data We Collect
We collect the following categories of personal data when you interact with our website or contact us:
Definition: Sensitive Personal Data
Under the LFPDPPP, sensitive personal data includes information that may affect the most intimate sphere of a person, such as health data, biometric data, or financial information that could lead to discrimination. We do not collect sensitive personal data through this website.
- Contact information: Full name, email address, and phone number provided through our contact form.
- Communication content: The content of messages or inquiries you submit through our website.
- Technical data: IP address, browser type, device information, pages visited, and time spent on pages, collected automatically through cookies and similar technologies.
- Newsletter data: Email address, if you voluntarily subscribe to our newsletter.
We do not collect sensitive personal data as defined under the LFPDPPP.
3. Purposes of Data Processing
Your personal data is processed for the following primary purposes, which are necessary to provide our services:
Definition: Primary Purpose
Under Mexican data protection law, primary purposes are those directly related to the reason why personal data is collected. Processing for primary purposes does not require additional consent from the data subject.
- To respond to inquiries submitted through our contact form.
- To schedule and conduct initial advisory conversations upon request.
- To provide information about our financial advisory services.
- To manage and maintain our communications with you.
We may also process your data for the following secondary purposes, which are not strictly necessary for the primary service relationship but help us improve:
Definition: Secondary Purpose
Secondary purposes are those not directly related to the primary service. Under the LFPDPPP, you have the right to opt out of secondary purposes without this affecting the primary service relationship.
- To send informational newsletters about financial planning topics, if you have subscribed.
- To analyze website usage patterns to improve our content and user experience.
- To conduct internal analytics for service improvement.
If you do not wish your data to be processed for secondary purposes, you may express this by contacting us at info@valestario.com.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under the LFPDPPP:
- Consent: You have given explicit consent by submitting our contact form and accepting this Privacy Policy.
- Contractual necessity: Processing is necessary to respond to your inquiry and provide the information or services you have requested.
- Legitimate interest: For website analytics and security purposes, provided your fundamental rights are not overridden.
5. Data Transfers and Third Parties
We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following circumstances:
- Service providers: Third-party providers who assist us in operating our website, such as hosting providers and email service platforms, who process data on our behalf under appropriate data processing agreements.
- Legal obligation: When required by applicable Mexican law, court order, or governmental authority.
- Protection of rights: When necessary to protect the rights, property, or safety of Valestario, our users, or others.
Any third-party service providers are required to handle your data in accordance with applicable data protection laws and our instructions.
6. International Data Transfers
Some of our service providers may be located outside of Mexico. When personal data is transferred internationally, we ensure that appropriate safeguards are in place, including contractual clauses that provide equivalent protection to that required under the LFPDPPP.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:
- Contact form data is retained for up to 24 months from the date of last contact.
- Newsletter subscriber data is retained until you unsubscribe.
- Technical and analytics data is retained for up to 26 months.
After the applicable retention period, data is securely deleted or anonymized.
8. Your Rights (ARCO Rights)
Under the LFPDPPP, you have the following ARCO rights with respect to your personal data:
Definition: ARCO Rights
ARCO stands for Acceso (Access), Rectificación (Rectification), Cancelación (Cancellation), and Oposición (Opposition). These are the fundamental rights granted to data subjects under the LFPDPPP to control how their personal data is used.
- Access: The right to know what personal data we hold about you and how it is being processed.
- Rectification: The right to correct inaccurate or incomplete personal data.
- Cancellation: The right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
- Opposition: The right to object to the processing of your personal data for specific purposes, particularly secondary purposes.
To exercise any of these rights, please send a written request to info@valestario.com, including your full name, a description of the right you wish to exercise, and a copy of a valid identification document. We will respond within the timeframe established by the LFPDPPP (20 business days for access requests, 15 business days for other requests).
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. For detailed information about the types of cookies we use and how to manage your preferences, please see our Cookie Policy.
10. Security Measures
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include secure server infrastructure, encrypted communications (HTTPS), and access controls. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our website and services are directed at adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
13. Contact and Complaints
If you have questions about this Privacy Policy or how we handle your personal data, please contact us at info@valestario.com or by phone at +52 55 1209 8310.
If you believe your data protection rights have been violated, you have the right to file a complaint with the INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) at www.inai.org.mx.