Personal data protection

Privacy Notice.

CLRI Group operates in Mexico and processes personal data in accordance with applicable Mexican data protection law. This Privacy Notice explains how CLRI Group may collect, use, store, protect and, where applicable, transfer personal data provided through www.clrigroup.com

CLRI GROUP, S.C.


Last updated: July 29th, 2026.

 

CLRI GROUP, S.C., with address at Av. Pdte. Masaryk 101, 6th Floor, Polanco, Polanco V Secc., Miguel Hidalgo, Zip Code 11560, Mexico City, Mexico, is responsible for the processing of the personal data it collects through the website www.clrigroup.com, contact forms, emails, telephone calls, meetings, video calls, messaging services, physical or digital documentation, as well as through any other lawful means related to the provision of its professional services.


CLRI GROUP is a firm specialized in corporate criminal law, criminal compliance, internal investigations, crisis management, brand protection, white-collar crime, intellectual property, anti-counterfeiting of pharmaceuticals, asset recovery, criminal amparo proceedings, and representation of victims.

 

For any matter related to privacy, personal data protection, or the exercise of ARCO rights, you may contact us at:

Email: contacto@clrigroup.com
Website: www.clrigroup.com
Address: Av. Pdte. Masaryk 101, 6th Floor, Polanco, Polanco V Secc., Miguel Hidalgo, Zip Code 11560, Mexico City, Mexico.

 

  1. Personal Data We Collect

CLRI GROUP may process identification, contact, employment, professional, tax, patrimonial, financial, corporate, documentary, and legal personal data, provided that such data is necessary to respond to contact requests, evaluate matters, prepare service proposals, provide legal advice or specialized consulting, open and maintain files, comply with legal obligations, or protect legal rights and interests.

 

Such data may include, by way of example: name, position, company, telephone number, email address, address, Federal Taxpayer Registry number (RFC), tax status certificate, billing information, powers of attorney, representation documents, background information regarding the matter, information related to legal proceedings, investigations, criminal complaints, formal accusations, amparo proceedings, compliance strategies, internal investigations, asset recovery, brand protection, or crisis management.

 

  1. Sensitive Personal Data

Due to the nature of the legal services provided by CLRI GROUP, sensitive personal data or specially reserved information may eventually be processed, including information related to facts that may constitute criminal offenses, investigations, legal proceedings, status as victim, complainant, witness, investigated person, defendant, accused person, or related third party, as well as patrimonial, family, employment, medical, or other information when strictly necessary for the provision of the professional service.

 

CLRI GROUP will process such data only when it is essential for legitimate, specific purposes directly connected to the relevant matter. Where applicable law requires, the corresponding express consent will be obtained.

 

  1. Primary Purposes

CLRI GROUP will process your personal data for the following necessary purposes:

  1. To respond to contact, information, consultation, or meeting requests.

  2. To identify the data subject, legal representative, company, or related third party.

  3. To evaluate potential conflicts of interest before accepting a matter.

  4. To conduct a preliminary analysis of legal, corporate, criminal, regulatory, or compliance matters.

  5. To prepare service proposals, fee letters, quotations, or work plans.

  6. To provide legal services, strategic advice, defense, representation, support, or specialized consulting.

  7. To create, manage, and preserve physical or digital files.

  8. To follow up on criminal complaints, formal accusations, investigation files, criminal proceedings, amparo proceedings, internal investigations, compliance strategies, crisis management, asset recovery, brand protection, intellectual property crimes, and related matters.

  9. To coordinate activities with authorities, prosecutors’ offices, courts, expert witnesses, external consultants, legal correspondents, technology providers, and third parties necessary for the provision of the service.

  10. To prepare legal documents, legal opinions, reports, filings, strategies, interviews, risk analyses, matrices, protocols, policies, or professional deliverables.

  11. To carry out billing, collection, payment administration, accounting follow-up, and tax compliance.

  12. To comply with contractual, tax, administrative, regulatory, professional, confidentiality, and document retention obligations.

  13. To protect the legal rights and interests of CLRI GROUP, its clients, or related third parties.

  14. Secondary Purposes

 

At this time, CLRI GROUP will not use your personal data for newsletters, marketing campaigns, personalized advertising, or commercial measurement tools.

 

Should CLRI GROUP later decide to send newsletters, legal alerts, event invitations, publications, or recurring institutional communications, this Privacy Notice will be updated and, where applicable, the necessary mechanisms will be enabled so that you may accept or reject such purposes.

 

  1. Transfers of Personal Data

CLRI GROUP may share personal data with competent authorities, prosecutors’ offices, courts, expert witnesses, external consultants, legal correspondents, notaries public, auditors, technology providers, administrative, accounting, or tax service providers, and third parties that are indispensable for the provision of the contracted services or for compliance with legal obligations.

 

Such transfers will be made only when necessary for the provision of services, the performance of a legal relationship, compliance with legal obligations, response to authority requirements, law enforcement or administration of justice, or the defense of rights. CLRI GROUP will not sell, commercialize, or transfer personal data for purposes unrelated to those described in this Privacy Notice.

 

CLRI GROUP does not intend to carry out international transfers of personal data. If an international transfer becomes necessary in the future, this Privacy Notice will be updated and the applicable legal requirements will be observed. The Federal Law on Protection of Personal Data Held by Private Parties distinguishes a transfer as the communication of data to a person other than the data subject, the controller, or the processor, and provides certain cases in which transfers may be made without additional consent.

 

  1. Technology Providers and Contact Form

CLRI GROUP’s website includes a contact form integrated through Framer or other technology providers that allow the website to operate, be hosted, administered, or receive requests submitted through the site.

 

CLRI GROUP recommends that you do not include sensitive, confidential, or excessively detailed information in the initial contact form. For an initial communication, we suggest providing only your name, company, email address, telephone number, and a general description of the reason for contacting us.

 

Receipt of a request through the website does not imply acceptance of the matter, automatic creation of an attorney-client relationship, or any professional obligation until CLRI GROUP expressly confirms its ability to handle the matter and, where applicable, the corresponding engagement is formalized.

 

  1. ARCO Rights

You have the right to access your personal data, rectify it when it is inaccurate or incomplete, cancel it when you consider that it is no longer necessary for the purposes described herein, or object to its processing on legitimate grounds.

 

To exercise your ARCO rights, revoke your consent, or request the limitation of the use or disclosure of your personal data, you must send a request to: contacto@clrigroup.com

 

The request must contain:

  1. The full name of the data subject.

  2. The means by which the response should be communicated.

  3. Documents proving your identity or, where applicable, the authority of your legal representative.

  4. A clear description of the personal data with respect to which you wish to exercise any right.

  5. The right you wish to exercise: access, rectification, cancellation, or objection.

  6. Any document or information that facilitates the location of the data.

  7. In the case of rectification, documentation supporting the requested modification.

CLRI GROUP will respond within the time periods established by applicable law.

  1. Revocation of Consent and Limitation of Use

 

You may revoke your consent or request that the use or disclosure of your personal data be limited by sending a request to: contacto@clrigroup.com

 

Revocation of consent may limit or prevent the provision of certain services when the data is necessary to comply with legal, contractual, tax, professional, regulatory, legal defense, or document retention obligations.

 

  1. Cookies and Similar Technologies

CLRI GROUP’s website may use technical or functional cookies that are necessary for the operation of the site, security, content loading, operation of the contact form, and basic improvement of the user experience.

 

At this time, CLRI GROUP does not use analytics tools, commercial measurement tools, advertising pixels, email marketing, or tracking technologies for advertising purposes. You may configure your browser to block or delete cookies. However, certain website functions may be limited if strictly necessary cookies are disabled.

 

  1. Security Measures

CLRI GROUP will adopt reasonable administrative, technical, and physical measures to protect personal data against damage, loss, alteration, destruction, unauthorized use, access, disclosure, or processing.

 

Such measures may include access controls, professional confidentiality, restricted file management, use of technology platforms, passwords, backups, document safeguarding, permission controls, and confidentiality agreements with third parties involved in the provision of services.

 

No physical or technological system can guarantee absolute security; however, CLRI GROUP will act with professional diligence to preserve the confidentiality of information and reduce reasonably foreseeable risks.

 

  1. Retention of Personal Data

CLRI GROUP will retain personal data for the time necessary to fulfill the purposes that justified its processing, as well as to comply with legal, tax, contractual, professional, administrative, regulatory, accounting, and legal defense obligations. Once such purposes have been fulfilled, and provided that there is no legal obligation or legitimate reason to retain the data, the data may be blocked, cancelled, or deleted in accordance with applicable law.

 

  1. Changes to the Privacy Notice

CLRI GROUP may modify, update, or adjust this Privacy Notice when necessary, due to legal, regulatory, operational, technological, administrative changes, or new privacy practices. Any modification will be published on the website: www.clrigroup.com

 

  1. Consent

By providing your personal data through any means, using the website, submitting contact forms, sending emails, sharing documentation, requesting services, or maintaining communication with CLRI GROUP, you acknowledge that you have read and understood this Privacy Notice.

 

When the law requires express, written, or specific consent for the processing of sensitive, patrimonial, or financial data, or for certain transfers, CLRI GROUP will request such consent through the corresponding mechanisms.