top of page
Flexlex is a venture capital law firm in Mexico advising founders, startups, funds and investors on term sheets, SAFEs, due diligence, governance and closings. Flexlex is a venture capital law firm in Mexico advising founders, startups, funds and investors on term sheets, SAFEs, due diligence, governance and closings. Boutique startup law firm. Mexico. Founders, startups e investors. Venture capital. Fintech. Softlanding. Cross-border. softlanding-mexico Fintech Law Firm in Mexico | Flexlex Flexlex is a fintech law firm in Mexico advising technology companies on licensing, regulatory strategy, AML, compliance, governance and scalable operations. Flexlex provides startup legal services in Mexico, from company formation and founder agreements to fundraising, governance, contracts and cross-border expansion.
Homepage

Privacy Policy

A legal disclaimer

In order to comply with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (the “LFPDPPP”) and other applicable guidelines, Flexlex Legal Partners, S.C. (hereinafter, “Flexlex”) through its website https://www.flexlex.mx/privacy-policy (the “Site”), and other present and future digital platforms and web and/or mobile applications that it owns, makes available to you the following:

​

Privacy Notice

 

For the purpose of providing legitimate, controlled, and informed processing of your Personal Data, which you currently provide or may provide to us in the future and which is held in our databases, or which has been collected through cookies or any other web tracking technology, with Flexlex being the Data Controller for the use and protection of your Personal Data.

 

Address and Contact Information of the Data Controller

 

Flexlex designates the following as its address to hear and receive notifications, address requests for the exercise of ARCO Rights, and limit the use or disclosure of Personal Data:

 

Flexlex

Avenida Insurgentes Sur #1567, Third Floor

San José Insurgentes, Benito Juárez

03900, Mexico City, Mexico

Email: contacto@flexlex.mx

 

The address indicated above constitutes the central point of contact for everything related to the protection of Personal Data collected by Flexlex. The Data Subject acknowledges that any communication related to their Personal Data must be sent through these official channels in order to ensure adequate and documented follow-up.

​

1.Personal Data

​

Flexlex may obtain the following Personal Data from the Data Subject:

 

  • Contact Data: includes identification and contact data such as full name, telephone, email, official identification, the company or entity you represent, or address.

  • Corporate and Legal Data: may include information related to the company that the Data Subject represents, or any legal service they may request.

  • Service Data: includes any information related to legal consultations, requests, or services required.

  • Billing and Compliance Data: includes tax and payment data such as RFC (Federal Taxpayer Registry), tax address, proof of tax status, and information necessary for the issuance of tax receipts and compliance with legal and contractual obligations.

 

2.Processing of Personal Data

 

Flexlex guarantees that all processing of Personal Data will be carried out in a legitimate, controlled, and informed manner. The processing will be carried out in accordance with the principles of lawfulness, purpose, loyalty, consent, quality, proportionality, information, and responsibility, as established by Article 5 of the LFPDPPP.

 

Regarding the retention, blocking, and deletion of data, Flexlex will retain the Personal Data only for the time necessary to fulfill the purposes for which it was collected, complying at all times with the guidelines of the Law. The applicable periods are:

 

- Processing and Retention Period: The Personal Data will be retained in our Databases as long as the purpose for which it was collected persists and for an additional period of five years.

- Blocking Period: Once the purpose that motivated their processing has been fulfilled and when they are no longer necessary as set out in the preceding paragraph, the Personal Data will be deleted following prior blocking.

- Deletion or Disposal: Once the blocking period has elapsed, the Personal Data will be deleted and canceled from the corresponding database through secure destruction to ensure that it cannot be associated with the Data Subject or allow their subsequent identification.

 

3.Purposes of the Processing

 

Flexlex will process the Data Subject’s Personal Data only for the purposes that are necessary, proportionate, and related to the relationship established between the parties.

 

The primary purposes for the processing of Personal Data include the following:

 

  • Identify the Data Subject and validate their identity.

  • Manage and maintain the contractual, commercial, or employment relationship that the Data Subject has or may have with Flexlex.

  • Provide information about the services provided by Flexlex.

  • Manage access to the website of Flexlex.

 

4.Transfer of Personal Data to Third Parties

 

A Transfer of Personal Data is any communication of Personal Data made to a natural or legal person, whether domestic or foreign, that is different from the Data Subject, the Data Controller, or the Person in Charge of the processing.

​

Notice to these third parties. The receiving third party will assume the same data protection obligations that correspond to the Data Controller transferring the data, in its capacity as Person in Charge.

 

Flexlex may only transfer the Data Subject’s Personal Data without their consent in the cases permitted by the LFPDPPP. For any transfer that does not fall within the exceptions stipulated in the LFDPPP, and those permitted by the Law, the express consent of the Data Subject will be required.

 

1.Limitation of the Use or Disclosure of Personal Data

 

Should they wish to do so, the Data Subject may request additional limitations on the use or disclosure of their Personal Data by sending a request to the email contacto@flexlex.mx which must include their contact information and a clear and precise description of the Personal Data and of the purposes whose use or disclosure they wish to limit. By submitting this request, the Data Subject accepts that, if the Personal Data whose limitation is requested is essential and necessary to maintain the existing relationship with Flexlex, this relationship could be terminated.

 

2.ARCO Rights

 

In accordance with the provisions of the LFPDPPP, the Data Subject has the right to Access, Rectify, Cancel, or Object to the processing of their Personal Data. Flexlex makes the following mechanisms available to the Data Subject so that these rights may be exercised in an adequate, transparent, and free-of-charge manner.

 

2.1.Means of Exercising ARCO Rights

 

The Data Subject may request Access to their Personal Data in order to know what information about the Data Subject Flexlex holds in its possession. Likewise, they may request the Rectification of their Personal Data in the event that it is inaccurate, incomplete, outdated, or incorrect. Likewise, the Data Subject may request the Cancellation of their Personal Data and the Objection to the use of their Personal Data in the event that it is not necessary for the purposes established in this Privacy Notice.

 

2.2.Procedure for Exercising ARCO Rights

 

Flexlex makes available to the Data Subject the mechanisms, means, and procedures necessary to exercise their ARCO Rights.

 

The Data Subject must submit the request in writing to Flexlex either by physical or electronic means, in accordance with the contact options provided in this Privacy Notice. The Request must mandatorily contain and be accompanied by the following elements.

 

  1. The name of the Data Subject and their address or any other means (email) to receive notifications of the response.

  2. The documents that prove the identity of the Data Subject (official identification).

  3. The clear and precise description of the Personal Data with respect to which one of the ARCO Rights is sought to be exercised.

​

  1. The description of the ARCO Right that is intended to be exercised, or the specific request.

  2. Any other element or document that facilitates the location of the Personal Data.

 

In the event of requesting the Rectification of Personal Data, the Data Subject must additionally indicate the modifications to be made and attach the documentation that supports and proves their request.

 

1.1.Contact Information for the Exercise of ARCO Rights

 

To exercise any of the ARCO Rights and make inquiries or clarifications regarding the processing of their Personal Data, the Data Subject must contact contacto@flexlex.mx or submit their request at the address indicated in this Privacy Notice.

 

2.Cookies and Tracking Technologies

 

Flexlex uses cookies to offer you the best possible experience when you use the Site. Cookies are text files that are saved in the internet browser or that the browser saves on the user’s terminal. Flexlex may use cookies to collect information about the use of the Site.

 

3.Security Measures

 

Flexlex has established and maintains administrative, technical, and physical security measures that make it possible to protect Personal Data against damage, loss, alteration, destruction, or unauthorized use, access, or processing. These security measures guarantee a level of protection of the Personal Data commensurate with the risk, ensuring the confidentiality, integrity, and availability of the processing systems, as well as the establishment of controls that require all persons involved in the processing of data to maintain confidentiality.

 

4.Changes to the Privacy Notice

 

Flexlex reserves the right to make modifications or updates to this Privacy Notice at any time.

 

The Owner of the Personal Data will be informed about the changes or modifications made to this Privacy Notice through the following means:

 

  1. Through visible publications on the website of Flexlex.

  2. Through an email sent to the contact address that you have provided to us.

 

This Privacy Notice was last updated on 27 July 2026

​

bottom of page