Privacy Notice

English · Last updated September 27, 2026

This English version is provided for convenience. The Spanish version controls to the extent permitted by law.

1. Responsible party

SDM Group is responsible for the processing of personal data described in this notice.

Privacy and ARCO requests: [email protected]

2. Data we collect

Through the public website and inquiry forms, we may collect:

• your name, email address and optional telephone number;
• project type, location, stage, desired timeline and the contents of your inquiry and related correspondence;
• language, the version of this notice associated with your submission, and information needed to route and manage the inquiry;
• campaign and attribution information such as the first landing page, referring site, conversion page, UTM parameters and advertising click identifiers; and
• technical and security information such as IP address, browser, device, approximate location and anti-spam signals.

Please do not submit sensitive personal data, official identification documents, passwords, banking information or detailed financial information through the public inquiry form.

3. Purposes

We use this information to validate, respond to and follow up on your inquiry; evaluate whether and how we may assist; discuss or arrange a project consultation; understand how inquiries reach the website; protect the website and prevent spam or abuse; maintain privacy and compliance records; and comply with law or establish, exercise or defend legal rights.

Submitting an inquiry does not create a construction, construction-management, design, advisory, fiduciary or other professional relationship. We will not enroll you in promotional email unless you separately opt in.

4. Website technologies, service providers and transfers

The website relies on third-party service providers for hosting, security, spam prevention, optional analytics, email delivery and business record management. It uses browser session storage to preserve first-touch campaign and referral information while you navigate. If you accept analytics, analytics and tag-management services may use first-party cookies and process page, interaction, browser, device and approximate-location information. These providers may process information outside Mexico under their applicable contractual and privacy obligations.

We do not sell personal data. We may disclose or transfer information when permitted or required by law, necessary to respond to your request or maintain a relationship with you, or necessary to establish, exercise or defend a legal right. If a transfer requires your consent, we will request it before making the transfer.

Optional analytics load only after your choice. We do not intentionally send names, email addresses, phone numbers or inquiry text to analytics providers. Details and choices: Cookies.

5. Retention and security

Website inquiries that do not become a client relationship are generally retained for up to 24 months after the last substantive interaction. We may retain limited privacy, opt-out, legal or security records for longer when reasonably necessary. Information that becomes part of a client relationship will be governed by the applicable agreement, notice and legal retention requirements.

We use reasonable administrative, technical and physical safeguards. No Internet system can be guaranteed completely secure. If a security incident significantly affects your rights, we will notify you as required by applicable law.

6. ARCO rights and privacy choices

You may request access, rectification, cancellation or opposition regarding your personal data, limit its use or disclosure, or revoke consent where applicable.

Email [email protected] with the subject “ARCO Request” and include:

• your name and a means to receive our response;
• information sufficient to verify your identity and, if applicable, your representative's authority;
• a description of the data concerned; and
• the right or action requested and any supporting information.

We will respond within the periods established by applicable Mexican privacy law. Exercise is free except for legally permitted reproduction or delivery costs. You may also email us to limit processing or revoke consent. Analytics consent can be changed immediately through Cookie settings in the footer.

If you believe your data have been processed contrary to law, you may seek protection from the Secretaría Anticorrupción y Buen Gobierno, subject to its current procedures and jurisdiction.

7. Third-party links and children

The website may link to social networks, email services or other third-party services. Those services apply their own privacy notices. The public website is intended for adults. We do not knowingly collect personal data directly from children through the inquiry form.

8. Changes and contact

The current version and date of this notice will be posted on this page. If a change requires new consent, we will request it before applying the change to the relevant data.

Questions or privacy requests: [email protected].