Legal Documents

1. Privacy Notice

This Privacy Notice is issued in compliance with the provisions of the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

Personal Data and Documentation We Collect

To carry out the purposes described in this notice and start the technical and commercial audit process, we collect the following personal data and documents from the applicant:

• Contact name of the person in charge or legal representative of the business.
• Commercial name, corporate name, and line of business.
• Institutional or contact email address.
• Phone number (landline and/or mobile/WhatsApp).
• Physical address of the business establishment or offices.
• Website address (domain) to be evaluated.
• Documentary Accreditation File (required for local identity audit):
  • Copy of a valid official ID (INE, Passport) of the representative or owner.
  • Updated Tax Situation Certificate (RFC) of the business.
  • Recent proof of address of the commercial establishment.
  • Proof of ownership or administrative rights over the web domain.
• Technical navigation data collected anonymously via cookies for analytics.
• For the Authorized Agents / Affiliates Program:
  • Full name, email address, and phone number (WhatsApp).
  • Profile picture (required for issuing the official sales agent credential).
  • Signature or electronic acceptance of the Agent Agreement.
  • Tax and banking information (Bank, CLABE Account, Beneficiary Name, and RFC) for invoicing and payment of accumulated commissions.

Safe Keeping and Confidentiality of the File

All documentation submitted to compile the audit file (IDs, RFC, Proof of address, and Domain ownership proof) is treated as strictly confidential.

SGSD implements technical security policies to guarantee that:

• Documents are stored on secure servers with storage encryption and restricted access control limited only to qualified SGSD audit staff.
• No public disclosure is made of any of the sensitive documents in the file.
• Under no circumstances are these data or documents transferred or sold to any third party or external entity, except under an explicit judicial order.
• If an audit request does not meet the requirements or is rejected without being corrected within the established period, all documentation and associated data are **automatically deleted from our servers** within the next 15 business days.

Use of Cookies and Analytical Tools

Our website uses cookies and third-party tracking technologies (including Google Analytics and Google Tag Manager) to analyze traffic, understand user behavior, and improve the browsing experience. The information collected by these tools is anonymous and is not associated with your personal identity. If you wish, you can configure your browser to block or alert you about these cookies, though some parts of the website may not function properly.

Purposes of Data Treatment

Your personal data will be used exclusively for the following necessary purposes:

• To evaluate and perform the technical audit of the local digital presence of your website.
• To contact you to deliver the diagnosis and corresponding results.
• To issue, register, and validate the digital trust seal on our server.
• To manage and include the public information of your verified business in the directory of the portal.
• To respond to your support requests, assistance, or clarifications.
• For the Sales Agents Program:
  • To process, evaluate, and internally validate the registration and incorporation request of the Agent.
  • To digitally issue the official authorized agent credential and the corresponding agreement.
  • To manage, audit, and account for the commissions accumulated through successful referrals.
  • To carry out bank transfers for commission payments and coordinate the corresponding tax receipts.

ARCO Rights (Access, Rectification, Cancellation, and Opposition)

You have the right to know what personal data we have about you, what we use it for, and the conditions of its use (Access). Likewise, it is your right to request the correction of your information if it is outdated or incorrect (Rectification); to have it deleted from our records when you consider it is not being used properly (Cancellation); as well as to oppose the use of your data for specific purposes (Opposition).

To exercise any of your ARCO rights, you must submit the respective request by sending an email to: [email protected].

2. Terms & Conditions of Use

Nature of the Service

QRO. VERIFICADO is a digital initiative and infrastructure operated by SGSD. It focuses on performing evaluations and audits of local digital consistency for businesses located in the State of Querétaro, Mexico.

The awarded seal solely confirms that the web platform of the business complies with elementary security criteria (HTTPS), functional contact information, legitimate business identity, and observable local presence at the time the evaluation is performed.

Authorized Use of the Digital Seal

Approved businesses receive an integration code (digital seal) to place on their website. It is strictly prohibited to:

• Alter, manipulate, or modify the design, colors, or texts of the seal.
• Link the seal to web domains that have not been explicitly approved and audited by our staff.
• Use the seal once the audit has expired or if the business has been removed from our registry.

Cancellation and Revocation of Verification

SGSD reserves the right to revoke or deactivate the verification seal of any web domain without prior notice in the following cases:

• If the website goes offline or presents recurrent critical security failures.
• If the contact information or business identity provided is found to be false or misleading.
• If the business is involved in illegal practices, scams, or receives multiple consumer complaints validated by the appropriate authorities.
• If the seal is used on an unauthorized external domain (which will trigger automatic security alerts).

Refund and Cancellation Policy

Due to the nature of the service (technical audit and document validation), which requires time and resources from our audit team from the moment the review begins, there are no refunds once the audit process has started, regardless of whether the final report is approved or not.

If a request is temporarily rejected due to non-compliance with requirements, the applicant has a period of 15 business days to correct the errors at no additional cost.

Jurisdiction and Applicable Law

For the interpretation, compliance, and execution of these Terms & Conditions, the parties submit to the jurisdiction of the laws and competent courts of the city of Santiago de Querétaro, Querétaro, Mexico, expressly waiving any other jurisdiction that might correspond to them by reason of their present or future domiciles.