MILA

Privacy Notice

Mexican Federal Data Protection Law (LFPDPPP) · Last updated: May 2025

Identity and address of the data controller

Market Intelligence Latin America, S.C. (“MILA” or the “Controller”) is responsible for the use and processing of your personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the guidelines of the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

Legal entity
Market Intelligence Latin America, S.C.
Registered address
Durango #263, Floor 6, Col. Roma, Cuauhtémoc, C.P. 06700, Mexico City, Mexico
Website
www.mila.mx
Data protection contact
info@mila.mx
01

Personal data we collect

MILA may collect the following categories of personal data, depending on the nature of your relationship with us.

  • Identification data Full name, job title, and the company or institution you represent.
  • Contact data Email address, phone number, mailing or billing address.
  • Professional and commercial data Industry sector, company size, country or region of operation, consulting, market research or distributor search needs, and history of engagements with MILA.
  • Browsing and digital behavior data IP address, browser type, operating system, pages visited, session duration, content interactions, traffic source, and event data generated through cookies, conversion pixels, and tags.
  • Financial and billing data Tax ID (RFC), legal name, tax regime, and bank details for issuing invoices (CFDI) or processing payments. These are handled with particular care and are not shared with third parties except to complete the transaction.
  • Sensitive data MILA does not deliberately collect sensitive data (racial origin, health status, religious beliefs, sexual life, etc.). If you provide such data voluntarily, it will be deleted immediately.
02

Purposes of processing

A. Primary purposes

Necessary for the contractual or service relationship.

  • Providing the consulting, market research, distributor search, and commercial and economic intelligence services you have engaged or requested.
  • Handling quote requests, technical proposals, and service agreements.
  • Issuing digital tax receipts (CFDI) and managing billing and payments.
  • Responding to inquiries, complaints, and requests for support or post-engagement follow-up.
  • Complying with applicable legal, tax, and regulatory obligations in Mexico.

B. Secondary purposes

Optional; you may object at any time.

  • Sending you direct marketing communications, newsletters, market trend reports, and MILA service offerings.
  • Conducting statistical studies, audience analysis, and improvements to our digital services.
  • Personalizing your website experience and showing relevant content or ads through digital advertising platforms (Google Ads, Meta Ads, LinkedIn Ads).
  • Building custom and lookalike audiences on third-party platforms for advertising purposes.
  • Measuring marketing campaign performance and conversion attribution.

How to object to secondary purposes

Email info@mila.mx with the subject line “Objection to secondary purposes,” or use the cookie management panel available on our website. Declining will not affect the services you have engaged.

03

Cookies and tracking technologies

Our website uses cookies, conversion pixels, tags, and similar technologies to improve the user experience and to enable advertising measurement and personalization.

CategoryProviderPurposeLegal basis
Strictly necessary MILA / own server Site operation, session security, and privacy preferences. Legitimate interest / technical necessity
Analytics Google Analytics 4 Audience measurement, browsing behavior, traffic source, and conversion rates. User consent
Advertising — Google Google Ads / Tag Manager Conversion tracking, remarketing, and similar audiences on the Google Display Network. User consent
Advertising — Meta Meta Pixel / Conversions API Facebook and Instagram ad attribution, custom and lookalike audiences. User consent
Advertising — LinkedIn LinkedIn Insight Tag B2B campaign measurement, retargeting, and targeting by job title, industry, or company. User consent
Functional Various third parties Embedded forms, support chat, interactive maps, and media players. User consent

Cookie management

The first time you visit the website, a cookie management banner lets you accept, reject, or customize each category. You can change your preferences at any time via the “Cookie Management” link in the footer, or directly in your browser settings.

Google Consent Mode v2

Our site implements Google Consent Mode v2. When you reject Google analytics or advertising cookies, the site transmits denied-consent signals that limit data collection by Google Analytics and Google Ads, in compliance with the Google EU/global advertiser User Consent Policy.

04

Transfers of personal data

MILA may transfer your personal data to the following third parties, on the terms permitted by the LFPDPPP and its Regulations.

  • Technology service providers (processors) CRM platforms, email marketing tools, hosting and cloud computing services. They act on MILA’s instructions and are bound by contractual confidentiality and data protection clauses.
  • Corporate clients outside Mexico In the course of consulting, market research, distributor search, and commercial and economic intelligence projects, MILA may share personal data with institutional clients located abroad. Such transfers are carried out under the safeguards set out in Chapter V of the LFPDPPP, on the basis of the existing contractual relationship or the data subject’s prior consent. The receiving client assumes the corresponding confidentiality and lawful-use obligations.
  • Digital advertising platforms Google LLC, Meta Platforms Ireland Ltd., and LinkedIn Ireland Unlimited Company receive digital behavior data through the measurement tools described in the previous section. By consenting to non-essential cookies, you consent to that international transfer.
  • Competent authorities Where required by law, court ruling, or administrative order (SAT, INAI, FGR, or other Mexican or foreign authorities with legal jurisdiction).

Transfers to recipients abroad are carried out under the safeguards set out in Chapter V of the LFPDPPP and in accordance with Article 37 of that law. MILA does not sell personal data to third parties.

05

Your ARCO rights and withdrawal of consent

You may exercise the following rights over your personal data held by MILA at any time.

A

Access

Find out what personal data we hold about you, what we use it for, and the conditions of processing.

R

Rectification

Request correction of your data where it is inaccurate, incomplete, or out of date.

C

Cancellation

Request deletion of your data from our records, following a blocking period and the applicable legal term.

O

Objection

Object to the processing of your data for specific purposes, particularly secondary ones.

How to exercise your ARCO rights

Send your request to info@mila.mx with the subject line “ARCO request,” attaching: (i) your full name, (ii) a copy of valid official identification, (iii) a clear and precise description of the right you wish to exercise, and (iv) any document that helps locate your data. MILA will respond within 20 business days of receiving a complete request, in accordance with Article 32 of the LFPDPPP. Where the request is granted, the changes will be made within the following 15 business days.

You may also withdraw your consent to the processing of your data at any time, without retroactive effect. Withdrawal does not affect the primary purposes necessary to comply with legal obligations or to perform current contracts.

06

Security measures

MILA implements administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, and unauthorized use, access, or processing, in compliance with Article 19 of the LFPDPPP.

These measures include

  • Encryption of data in transit (TLS/SSL).
  • Role-based access control.
  • Confidentiality agreements with staff and collaborators.
  • Periodic information security audits.
  • Documented incident response procedures, in accordance with Article 20 of the LFPDPPP.
07

Retention periods

Your personal data will be retained for as long as strictly necessary to fulfill the purposes described in this Notice and in accordance with the periods set by applicable Mexican tax and commercial law. As a general reference: commercial records, 5 years; accounting and tax records, 10 years (Federal Tax Code). Browsing and digital advertising data is retained according to each platform’s retention policy: Google Analytics, up to 14 months; Meta, up to 180 days; LinkedIn, 90 days by default. Once those periods elapse, the data is blocked and subsequently deleted.

08

Minors

MILA’s services are directed exclusively at individuals over 18 acting in a professional or business capacity. We do not deliberately collect personal data from minors. If you become aware that a minor has provided us with data without parental consent, please notify us at info@mila.mx so we can delete it immediately.

09

Changes to this Privacy Notice

MILA reserves the right to update or amend this Privacy Notice at any time to reflect legislative, operational, or internal policy changes. Any amendment will be communicated by publishing the new version on our website, with the date of the update. We recommend reviewing this page periodically. Continued use of the website or of MILA’s services after changes are published constitutes acceptance of them, except where express consent is required under the LFPDPPP.

10

Data protection authority and legal remedies

If you believe MILA has not adequately handled your ARCO request, or that your rights have been infringed, you may bring a rights protection proceeding before the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) through the ARCO System at www.inai.org.mx, within 15 business days of receiving MILA’s response or of the response deadline expiring.

Legal framework and platforms covered by this Notice

Legal framework

  • Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP)
  • Regulations to the LFPDPPP
  • INAI guidelines on privacy notices
  • Federal Tax Code (retention periods)

Advertising platforms covered

  • Google Ads, Analytics 4, and Tag Manager (Consent Mode v2)
  • Meta Pixel and Conversions API (Facebook / Instagram)
  • LinkedIn Insight Tag (B2B campaigns)
  • Google, Meta, and LinkedIn advertiser data policies

Last updated: May 2025 · Version 1.0

This privacy notice was prepared in compliance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations (Diario Oficial de la Federación). The Spanish version is the legally binding text; this English version is provided for convenience.