We may collect the following personal data directly or indirectly:

​

• Identification and contact data: full name, address, email, phone number, RFC, CURP, date of birth.
• Financial and asset data: banking information, CLABE, card number, transaction history, invoicing.
• Labor and tax data (for B2B): business name, articles of incorporation, legal representative, tax documents, contracts.
• Technological data: IP address, geolocation, device identifiers, platform usage.

​

If necessary, we may also request sensitive data related to identity validations, biometrics, or information required by legal and regulatory provisions.

Your personal data will be used for the following primary purposes:

​

• To identify you as a User or Client on our platform.
• To provide, operate, and manage the fintech services offered by BECM Group.
• To process electronic transactions, payments, and reconciliations.
• To comply with contractual, tax, and regulatory obligations (including the Fintech Law and CNBV regulations).
• To prevent fraud, illegal operations, and money laundering (in compliance with the Anti-Money Laundering Law).
• To provide support, attention, and security to users.

​

And the following secondary purposes:

​

• To send commercial notifications, promotions, and updates about our services.
• To conduct market studies, internal analyses, and usage statistics.
• To improve the User experience on our digital platforms.

​

If you do not wish for your data to be used for secondary purposes, you can express this by sending an email to: contacto@grupobecm.com.

Your data may be shared with:

​

• Mexican regulatory authorities (CNBV, SAT, UIF, PROFECO, CONDUSEF), when required by law.
• Financial institutions and payment processors** to carry out authorized transactions.
• Subsidiaries, affiliates, or business partners** of Grupo BECM, always with the same security and confidentiality measures.

​

We will not transfer your data to unrelated third parties without your prior consent.

BECM Group implements the necessary administrative, technical, and physical measures to protect your personal data against damage, loss, alteration, destruction, or misuse, including:

​

• Encryption of information in transit and storage.
• Restricted access controls.
• Security audits and monitoring.
• Continuity and recovery protocols.

You have the right to:

​

• Access your personal data held by us.
• Rectify your data when they are inaccurate or incomplete.
• Cancel your data, unless there is a legal obligation to retain them.
• Oppose the use of your data for specific purposes.

​

To exercise your ARCO rights, you must send a request to the email: [contact email] indicating:

​

1. Full name and means to communicate the response.
2. Documents that prove your identity or that of your legal representative.
3. A clear description of the data regarding which you seek to exercise the right.

​

The response time will be 20 business days in accordance with the LFPDPPP.