Last updated: November 11, 2026
COLOMA Group protects the information you share with us with the same discipline we apply to our clients' assets. This policy explains what we collect, why, who we share it with, and how you control it. It also serves as our Aviso de Privacidad Integral under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).
1. Who is responsible for your data
COLOMA Group ("COLOMA Group," "we," "us"), with domicile at Mérida, Yucatán, México, C.P. 97302, is the data controller (responsable) for personal data collected through colomagroup.com and in the course of our services. Privacy contact: support@colomagroup.com.
2. What we collect
- Contact and identity data: name, company, job title, email, phone, country.
- Engagement data: details you share about a project, supplier, dispute, transaction or property, including documents you send us.
- Financial data (only when a service needs it): billing details and, for real estate or acquisition work, information on funds or ownership that you choose to provide.
- Newsletter data: name, email, country and whether you open our emails.
- Technical data: IP address, browser, device, pages viewed and referral source, collected through cookies and similar tools.
We do not knowingly collect data from anyone under 18. We do not ask for sensitive personal data (such as health, religion or political views). If a matter requires it, we will ask for your express written consent first.
3. Why we use it
Primary purposes (needed to serve you):
- Answer inquiries and schedule consultations.
- Deliver and invoice our services: representation, arbitration support, supplier validations, compliance, relocation and real estate consulting.
- Run due diligence and know-your-counterparty checks that a mandate requires.
- Meet legal, tax and accounting obligations.
Secondary purposes (you can opt out at any time):
- Send the Cross-Border Brief newsletter and event invitations.
- Measure and improve our website and content.
To opt out of secondary purposes, use the unsubscribe link in any email or write to support@colomagroup.com. Opting out never affects the services you hired.
4. Who we share it with
We do not sell or rent personal data. We share it only as follows:
- Service providers that host or process data for us, such as website, email, CRM and payment platforms. They may be in the United States or other countries and must protect the data under contract.
- Associates and referral partners, such as local counsel, notaries, inspectors or property managers, but only when you ask us to refer you or a mandate needs them. We tell you who they are before sharing.
- Authorities, when the law or a court order requires it.
Under the LFPDPPP, transfers to service providers and those needed to perform a contract with you do not require separate consent. For any other transfer, we will ask first.
5. Cookies and analytics
Our site uses essential cookies so it works, and analytics cookies to understand which content is useful. Our email platform uses web beacons to show whether a newsletter was opened. You can block or delete cookies in your browser settings; some features may stop working. We do not use cookies to sell advertising profiles.
6. How long we keep it
We keep data only while it serves the purposes above. Client files are kept for the period required by tax, commercial and professional-liability law (generally 5 to 10 years). Newsletter data is deleted when you unsubscribe. After that, data is securely deleted or anonymized.
7. How we protect it
We use administrative, technical and physical safeguards: encrypted connections, access limited to people who need it, and confidentiality obligations for our team and partners. If a breach could seriously affect your rights, we will notify you without undue delay.
8. Your rights
- Mexico (ARCO rights): access, rectify, cancel or oppose the processing of your data, revoke consent, and limit its use or disclosure.
- Canada (PIPEDA): access your information, ask for corrections and withdraw consent, subject to legal limits.
- United States and elsewhere: request access, correction or deletion, and opt out of marketing. Where a state law gives you extra rights, we will honor them.
How to make a request: email support@colomagroup.com with your name, the right you want to use, a description of the data, and proof of identity (or of authority, if you act for someone else). We reply within 20 business days and, if your request is approved, apply it within 15 business days after that. You may also complain to the data protection authority where you live. In Mexico this is the Secretaría Anticorrupción y Buen Gobierno; in Canada, the Office of the Privacy Commissioner.
9. Changes to this policy
We will post any change on this page with a new "Last updated" date. For material changes, we will also email newsletter subscribers and active clients.
10. Contact
COLOMA Group · Mérida, Yucatán, México, C.P. 97302 · support@colomagroup.com · +52 (999) 568-3058