Comprehensive privacy notice
Your data, handled with the same care as your case file.
This is an English translation provided for convenience. The Spanish version is the legally binding text and prevails in case of any discrepancy.
In short
- We use your data only to handle what you ask for: reviewing your case, preparing your legal summary or presenting investment options.
- We do not sell or share your data with developers, agencies or third parties for commercial purposes.
- We do not ask for sensitive data. Please leave it out of your messages and documents.
- You can access, correct, delete or object (ARCO rights) and withdraw consent by writing to contact@realaw.mx.
- Under anti-money-laundering law (LFPIORPI) some client data must be verified and kept for at least ten years.
- This site uses no tracking, advertising or analytics cookies.
1Identity and address of the data controller
Grupo Aleph de Inversiones, S.A. de C.V. (“ReaLaw”), with its address at Av. 125 Nte., Ejidal, C.P. 77712, Playa del Carmen, Quintana Roo, México, is responsible for the personal data you provide through this website, by email, by WhatsApp or at our offices.
Data Protection Department: contact@realaw.mx. Use this address for any question, request or complaint about your data.
LFPDPPP, art. 15-I.
2Personal data we process
| Source | Data |
|---|---|
| Consultation booking and payment | Name, email, mobile / WhatsApp number, the session, date and time you choose, and any notes you add. The payment is processed by Stripe, the card processor connected to our booking calendar: we receive confirmation of the payment and its amount, never your full card number. The consultation takes place on Google Meet; we do not record it. |
| Documents form (before your consultation) | Full name, email, mobile / WhatsApp number, development or property, contractual delivery date, your answers about the contract, payments and possession, the description of your case, and the documents you attach (purchase agreement, payment receipts and proofs of transfer). |
| Investment plan form | Name or preferred form of address, age range, email, mobile / WhatsApp number, occupation, prior real estate investment experience, property type, value range, intended form of payment, area of interest, timeline, comments and the listing you asked about. |
| Clients in a business relationship | In addition: official ID, CURP, RFC, address, nationality, occupation, beneficial-owner information and transaction documents, where the law requires it (see section 5). |
| Technical data | IP address, browser type, date and time of access, logged by our hosting provider to run and protect the site. |
Financial and patrimonial data
Amounts paid, bank accounts, transfer receipts, budget and form of payment are financial or patrimonial data. We therefore ask for your express consent through the acceptance box on each form.
Sensitive data
We do not request sensitive personal data (health, ethnic origin, religious, philosophical or moral beliefs, political opinions, union membership, sexual orientation, genetic or biometric data). Please do not include it in your messages or documents. If a document you send contains it, it will only be stored as part of the file.
Third-party data
If you give us data about other people (for example co-owners, or the developer's representative who signed the contract), you confirm you are entitled to do so, and we will use it only for the purposes in this notice.
The services on this site are intended for people aged 18 or over.
LFPDPPP, arts. 7, 8 and 15-II.
3Purposes of processing
Primary purposes (needed to handle your request)
- Scheduling, charging and holding the paid consultation you book, and sending you its confirmation, video link and reminders.
- Analysing the information and documents you send so the attorney can prepare your consultation.
- Understanding your investment plan, prioritising your request and presenting suitable properties or options.
- Contacting you by email, phone or WhatsApp to follow up and schedule a consultation.
- Checking for conflicts of interest before accepting a matter.
- If you engage us: providing legal or buyer-representation services, building your file, representing you before authorities, notaries and counterparties, and invoicing.
- Complying with legal obligations, in particular the identification, record-keeping and reporting duties of the LFPIORPI.
- Establishing, exercising or defending your rights or ReaLaw's in judicial or administrative proceedings.
- Running the site and protecting it against spam, fraud and unauthorised access.
Secondary purposes (optional, require your consent)
- Sending you information about new properties, investment opportunities, legal updates and ReaLaw events.
- Inviting you to service-quality surveys.
We use your data for secondary purposes only if you tick the optional box on the form. Leaving it unticked does not affect how we handle your request. If we ever want to use your data for a different purpose, we will ask for your consent again.
Prioritising requests
So we can attend first to those with the nearest deadline, the investment plan form assigns an indicative score based on the timeline, value range, form of payment and prior experience you indicate. This score has no legal effect, never means a request is rejected, and is always reviewed by a person on our team.
LFPDPPP, arts. 11, 15-III and 26-II.
4Consent
By ticking the acceptance box and sending a form, you give your express consent to the processing of your data, including financial and patrimonial data, for the primary purposes. The secondary-purposes box is separate and optional.
Your consent is not required where processing is needed to comply with a legal obligation (such as those under the LFPIORPI), or to exercise rights or fulfil obligations arising from our legal relationship with you.
LFPDPPP, arts. 7 and 9-I and IV.
5Prevention of transactions with illicit funds (LFPIORPI)
Some of our services may qualify as vulnerable activities under Mexico's Federal Law for the Prevention and Identification of Transactions with Illicit Funds, in particular intermediation in real estate sales (art. 17-V) and professional services where we prepare or carry out, on a client's behalf, the purchase of real estate or the management of their funds (art. 17-XI).
Where those cases apply, and as required by law:
- We will identify you and keep a copy of your official ID and the documents required by the applicable rules (art. 18-I).
- We will ask about your activity or occupation (art. 18-II).
- We will obtain your statement on whether there is a beneficial owner and, if so, documents to identify them; if you act for a company or trust, those of its beneficial owner (art. 18-III).
- We will keep that information and the transaction documents for at least ten years from the date of the activity (art. 18-IV).
- We will file the required reports with the Ministry of Finance (SHCP) when a transaction reaches the legal thresholds, without needing to notify you first. That information is confidential and restricted, and may only be used to prevent and investigate illicit transactions (arts. 38 and 39).
This processing is a legal obligation, so it does not require your consent and cannot be cancelled or objected to during the legal retention period. If the information required by law is not provided, ReaLaw will not be able to provide the service or will have to end it.
In all cases, ReaLaw observes professional secrecy and the right of defence recognised by the LFPIORPI itself.
LFPIORPI (last amended DOF 16-07-2025), arts. 17, 18, 38 and 39; LFPDPPP, arts. 9-I, 25-II and 26.
6Transfers and processors
We do not sell, rent or give away your data. We do not share it with developers, real estate agencies or other third parties for commercial purposes. If sharing some data with a seller or their agent becomes necessary for a specific property, we will ask you first.
We transfer data without your consent only where the law allows it:
| Recipient | Purpose | Basis |
|---|---|---|
| Tax, financial and investigative authorities (SHCP, UIF, SAT, prosecutors) | Complying with the LFPIORPI and lawful requests | Art. 36-I and V |
| Courts, administrative authorities and opposing parties in litigation | Exercising or defending your rights in the matter you entrust to us | Art. 36-V and VI |
| Notaries public, public registries and trust institutions | Formalising the purchase or fideicomiso in your interest | Art. 36-IV and VII |
We also rely on processors who handle data only on our behalf and under confidentiality obligations: our website and form-collection host (Netlify, Inc., United States), our online booking calendar and video calls (Google Calendar and Google Meet, Google LLC, United States), the card processor that charges the consultation (Stripe), our email and cloud-storage provider, and messaging services (WhatsApp) when you choose that channel. These are not transfers and do not require your consent.
LFPDPPP, arts. 2, 35 and 36.
7Options to limit the use or disclosure of your data
- Leave the secondary-purposes box unticked, or withdraw it at any time by writing to contact@realaw.mx.
- Ask to be added to our internal exclusion list so you receive no promotional messages.
- Reply “STOP” to any promotional message we send.
We will confirm your addition to the exclusion list within five business days.
LFPDPPP, art. 15-IV.
8ARCO rights: access, rectification, cancellation and objection
You or your legal representative may at any time access your data, correct it if it is inaccurate or incomplete, cancel it if you consider it is not needed for the stated purposes, or object to its processing on legitimate grounds.
How to make a request
Email contact@realaw.mx with the subject “ARCO rights” and include:
- Your name and an address or email for our reply.
- A copy of your official ID or, if a representative acts for you, proof of their authority and both IDs.
- A clear description of the data and the right you wish to exercise (not needed for access).
- Any document that helps locate your data and, for corrections, one supporting the change.
Time limits and cost
We will reply within a maximum of 20 days of receiving your request and, if it is granted, carry it out within the following 15 days. These periods may be extended once, for the same length, where the circumstances justify it. Exercising ARCO rights is free; only reproduction or shipping costs may be charged.
Limits
We may refuse a request in whole or in part when identity or representation is not proven, a third party's rights would be harmed, there is a legal impediment or an authority's ruling, or the data must be kept by law, to perform a contract or for judicial or administrative proceedings. We will always tell you why.
LFPDPPP, arts. 21 to 34.
9Withdrawing consent
You may withdraw your consent at any time through the same channel and with the same requirements as an ARCO request. Withdrawal is not retroactive and does not apply to processing we must keep for a legal obligation or to fulfil our legal relationship with you. If withdrawal prevents us from continuing the service, we will tell you.
LFPDPPP, art. 7.
10Retention
- Requests that do not lead to an engagement: up to 24 months from the last contact; then blocked and deleted.
- Clients: for the duration of the relationship and then for the limitation period of any claims arising from it.
- Information subject to the LFPIORPI: at least ten years from the date of the activity, or longer if litigation is pending.
On cancellation, data goes through a blocking period before final deletion, as the law provides.
LFPDPPP, arts. 24 and 25; LFPIORPI, art. 18-IV.
11Security measures
We maintain administrative, technical and physical safeguards against damage, loss, alteration, destruction, or unauthorised use, access or processing: encrypted connections (HTTPS), access limited to staff who need the information, confidentiality and professional-secrecy obligations, and providers with recognised security standards.
If a breach significantly affecting your financial or moral rights occurs, we will inform you immediately so you can take action.
LFPDPPP, arts. 18 to 20.
13Changes to this notice
Any change will be published on this page with its update date. If a change involves new purposes that require your consent, we will notify you at the email you gave us and ask for your consent again.
LFPDPPP, art. 15-VI.