Legal

Privacy Notice

Last updated: May 20, 2026

This is an English translation provided for convenience. The Spanish-language version (Aviso de Privacidad) is the official, legally binding document under Mexican law (LFPDPPP). In case of any discrepancy, the Spanish version prevails.

1. Data Controller

Aceros Villarreal (hereinafter, “Aceros Villarreal” or “we”), located at Antiguo camino a San José de los Sauces #205, Col. Emiliano Zapata, Escobedo, Nuevo León, Mexico, is responsible for the processing and protection of your personal data in compliance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the Privacy Notice Guidelines issued by INAI.

2. Personal Data We Collect

For the purposes described in this notice, we may collect the following categories of personal data:

  • Identification data: full name.
  • Contact data: phone, email, city.
  • Employment / company data: name of the company you represent.
  • Commercial data: product or service of interest, estimated volume, technical specifications.
  • Browsing data (cookies and similar): IP address (hashed), browser type, pages visited, date and time of access.

We do not collect sensitive data (race, health status, religious beliefs, political opinions, etc.).

3. Purposes of Processing

Primary purposes (necessary for the business relationship):

  • To respond to quote requests, information requests, or contact.
  • To provide requested products and services.
  • To issue invoices and comply with tax and accounting obligations.
  • To follow up on your requests and maintain commercial history.
  • To comply with applicable legal and regulatory obligations.

Secondary purposes (not necessary; you may object):

  • To send commercial communications about new products, promotions, and events.
  • To conduct satisfaction surveys and market studies.
  • Website usage analytics to improve experience.

If you do not wish your data to be processed for secondary purposes, you may express this by emailing datos@acerosvillarreal.com with the subject “Objection to secondary purposes”.

4. ARCO Rights (Mexican equivalent of GDPR's data subject rights)

As the owner of the personal data, you have the right to:

  • Access your personal data in our possession.
  • Rectify your data when inaccurate or incomplete.
  • Cancel your data when you consider they are no longer required.
  • Object to the use of your personal data for specific purposes.
  • Revoke consent granted, or limit the use or disclosure of your data.

To exercise any of your ARCO rights, send a written request to datos@acerosvillarreal.com. We will respond within a maximum of 20 business days from receipt.

5. Cookies

Our website uses essential cookies (session, language, consent), analytics cookies (aggregated, anonymized), and third-party cookies only when you interact with embedded elements such as Google Maps.

6. Security Measures

We implement administrative, physical, and technical security measures including HTTPS/TLS encryption, access controls, IP address hashing, encrypted backups, and internal confidentiality policies.

7. Data Retention

We retain your data for the time necessary to fulfill the stated purposes and while the commercial relationship exists. Afterwards, data is blocked during the prescription period of derivative actions (5 years in commercial matters, 5 years in tax matters), after which it is securely deleted.

8. Authority

If you believe your data protection rights have been violated, you may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI): home.inai.org.mx.

9. Contact

WhatsApp