Privacy Notice & ARCO Rights

This privacy notice is published in compliance with the applicable provisions of Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and its corresponding regulations, in order to inform our users how the information they provide will be handled, as well as the ways in which they may limit the use of the data we collect.

Barret Blau makes this information available to guarantee the right to informational self-determination, privacy, respect, and the obligations we uphold regarding the proper use of information provided by individuals who share their personal data with us.

In connection with the above, we confirm that Barret Blau, through its legal representative, is the owner of the website www.barretblau.com and is responsible for the handling of personal data. Barret Blau recognizes and safeguards the privacy and confidentiality of any information in its possession — whether temporarily or permanently — including personal data.

Barret Blau acknowledges that all personal information in its possession has been collected and obtained freely and voluntarily by its data subjects, and/or has been obtained legitimately through appropriate legal means, under the principle of privacy and confidentiality of information, in order to guarantee the security and protection of that information and of the individuals to whom it belongs. In that regard, we inform you of the following:

Personal Data Subject to Processing

In providing its services, Barret Blau maintains a close, active relationship with its clients, employees, suppliers, service providers, contest participants, and any individual who must provide personal data in connection with a legal, employment, and/or commercial relationship.

In collecting and processing the personal data you provide, we comply with all principles set forth in the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations: lawfulness, quality, consent, notice, purpose limitation, loyalty, proportionality, and accountability, as well as the duties of security and confidentiality.

You may access our website without providing any personal data; however, certain sections allow you to voluntarily provide your information — for example, by filling out the contact form on our website.

Personal Data We Collect When You Visit Our Website or Use Our Online Services

Contact data: name, email address, phone number, and message content.

Your data may be collected in a variety of situations — for example, when you send us an email, sign up to receive information of interest or subscribe to our blog, or share information with a view toward establishing a business relationship, hiring our services, or offering us a service. The personal data we may collect falls into the following categories:

Identification data: name, home address, date of birth, landline and/or mobile phone number, fax, email address, photograph, CURP, and Social Security Number (NSS).
Billing data: the entity to be billed, tax address, and Federal Taxpayer Registry number (RFC).
Financial data: bank account information and payment method.

We guarantee that your data will be processed exclusively within the country, directly through Barret Blau, which may transfer your personal data to its clients, subsidiaries, affiliates, or related entities. Your personal data will be processed only for as long as necessary to fulfill the purposes described here and/or in accordance with applicable legal provisions.

Purposes of Processing and/or Safekeeping

Barret Blau informs you that personal data you provide voluntarily, data obtained through personal references (where applicable), and data we generate while you use our services may be used for various purposes, depending on the specific circumstances under which it is collected — always in line with our relationship with you and any specific privacy notice made available to you.

Necessary purposes, when you:

Visit our facilities: to control access and maintain security on our premises.
Contact us: to respond to your questions and comments.
Establish a legal relationship, and to stay in touch with you.
Submit your résumé: to reach out and consider you for a recruitment and selection process.

Secondary purposes (only with your consent): to send you offers related to our services, and to send you information of interest. Your personal data may also be used for purposes that are compatible with, and reasonably analogous to, those described above.

As the owner of the personal data collected and/or processed by Barret Blau, you may, at any time, express your objection to having your data processed for the secondary purposes described above by emailing us at contact@barretblau.com. You may also limit the use or disclosure of your personal data to stop receiving advertising or promotional messages by registering your phone number with the “Public Registry to Avoid Advertising” (Registro Público Para Evitar Publicidad) maintained by Mexico's Federal Consumer Protection Agency (PROFECO); for more information, visit www.gob.mx/profeco.

Data Transfers

Barret Blau will not sell, lease, or rent your personal data. We may share your personal data with the following third parties:

Companies that support our product promotion activities, provided you have consented to the processing of your personal data for those secondary purposes.
Companies that support our shipping and delivery operations.
Your information may be shared with financial, banking, or credit institutions for purposes of assessing transaction fraud risk.
Federal and local authorities, in compliance with obligations set out in applicable law and/or in response to requirements from those authorities.

Any third party receiving such a transfer is deemed to have prior knowledge of this Privacy Notice and to be bound by its terms. Your personal data will not be transferred to third parties without your consent, except as provided under Article 37 of the Law, which — on a non-exhaustive basis — permits the transfer of data among Barret Blau's subsidiary, affiliate, and parent companies.

Security Measures and Controls for the Protection of Personal Data

Barret Blau implements administrative, technical, and physical security measures to protect your personal data, and requires the same standards from any service providers we engage.

Tracking Technologies

When you browse our website, certain non-personal information is collected through “cookies” and “server logs” or “web beacons.” This information may include IP addresses, your operating system, browser type, location information (provided by mobile devices), and the path you follow while on our site.

This data is collected solely to generate statistics on visits to our website, time spent on the site, and referring sites that may have directed you to us. This information is also used to maintain and update user profiles and to tailor or personalize the information provided through this channel.

You can disable these tracking technologies in most browsers. For example, in Google Chrome: go to the “Tools” menu, select “Clear browsing data,” choose “Delete cookies and other site and plug-in data,” and click “Accept.” Disabling or blocking these mechanisms may cause our website to function incorrectly. To learn more, visit allaboutcookies.org.

Your Rights Regarding Your Personal Data

For your convenience, here is a brief overview of your ARCO rights:

Access – the right to be informed which of your personal data is held in Barret Blau's databases, how it is used, its origin, any disclosures made, and, generally, the conditions under which it is processed.
Rectification – the right to have your personal data corrected or updated if it is inaccurate or incomplete.
Cancellation – the right of the data subject to request, at any time, that Barret Blau delete their personal data.
Objection – the right to object, on legitimate grounds, to the processing of your personal data.

How to Exercise Your ARCO Rights and Revoke Your Consent

As the owner of your personal data, you may exercise your ARCO Rights (Access, Rectification, Cancellation, and Objection to the processing of your personal data) or revoke any consent previously granted to Barret Blau by contacting us via email at contact@barretblau.com, by phone at 55-10-98-52-92, or through our website at our contact page, describing your request in the message field. Your request must include, at a minimum:

Your name and address, or another means through which we can respond to your request.
Documents proving your identity or, where applicable, your legal representation.
A clear, precise description of the personal data for which you wish to exercise one of your ARCO Rights.
An express statement, where applicable, revoking your consent to the processing of your personal data.
Any other information that would help us locate the personal data in question.

Once your request has been submitted in the required format, Barret Blau will respond within a maximum of 20 business days from the date the request was received. If additional information or documentation is required, our Data Privacy team will contact you within 5 business days of receiving your request, and you will then have 10 additional business days to respond; otherwise, your request will be considered not submitted. These timeframes may be extended once, if necessary, and you will be notified of the reasons for the extension, in accordance with Article 32 of the Federal Law on the Protection of Personal Data Held by Private Parties. Exercising your ARCO Rights is free of charge, as is providing a simple copy or email delivery of the information.

Grounds for Denying Access, Rectification, Cancellation, or Objection

Barret Blau may deny a request to exercise the rights of Access, Rectification, Cancellation, or Objection under the following circumstances:

You are not the owner of the personal data you are requesting.
The personal data you are requesting is not held in our databases.
Granting the request could affect the rights of a third party.
There is a legal restriction or a ruling by an authority to that effect.
The rectification, cancellation, or objection has already been carried out.

In any of the above cases, Barret Blau will have a maximum of 20 days to inform you of the reason for the denial. Barret Blau upholds its duties of security and confidentiality under Articles 19 and 21 of the Law through its Quality and Security Management Systems, and maintains strict confidentiality of personal data even after the conclusion of its contractual relationships with clients.

About the Disclosure of This Privacy Notice

This notice may be distributed in physical, electronic, and audiovisual formats, as well as through any other available technology or medium that ensures the data subject remains properly informed. Barret Blau reserves the right to modify or update this Privacy Notice whenever necessary — for example, in response to data transfers, legal or regulatory updates, internal policy changes, or new requirements. We therefore ask that you check this section at www.barretblau.com regularly to stay up to date.

Definitions

Cookies: text files automatically downloaded and stored on a user's device while browsing a website, which allow the server to store certain data — such as preferred pages, and certain keys and passwords.
ARCO Rights: the Rights of Access, Rectification, Cancellation, and Objection, enshrined in the Law (whose Spanish initials form the acronym “ARCO”).
Web beacons: images embedded in web pages or emails that can store information such as a user's IP address and time spent interacting with a website, among other data.
LFPDPPP: the Federal Law on the Protection of Personal Data Held by Private Parties, published in Mexico's Official Gazette of the Federation on July 5, 2010.
Regulations: the Regulations to the Federal Law on the Protection of Personal Data Held by Private Parties, published on December 21, 2011.
Transfer: any communication of personal data, within or outside Mexican territory, made to a party other than the data subject, the data controller, or the data processor.
Exclusion list: a database that, free of charge, registers data subjects who do not wish to have their information processed by the data controller for certain purposes, in order to prevent such processing.

Barret Blau — Last updated: July 2025.