Privacy
notice.

Last updated: August 2026

Data controller

IEC Advisory, with address at Boulevard Osa Mayor No. 4929, Piso 4, Local 1, Reserva Territorial Atlixcáyotl, C.P. 72193, Heroica Puebla de Zaragoza, Puebla, México ("IEC"), is the controller of the personal data collected through this site, under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and applicable regulations. For visitors from other jurisdictions, IEC applies equivalent protection standards under applicable local law.

Data we collect

• Through the contact form and online scheduling: name, work email, company, country of operations, organization size, and the general description you choose to share.
• In the course of services: contact and professional identification data of the individuals designated by the client.
• Sensitive data: IEC does not request sensitive data through this site and expressly asks that none be included in first contact. In the course of engaged investigations, IEC may process personal data (including sensitive data) exclusively on the instructions of the client acting as controller, under contract and with the corresponding security and confidentiality measures.

Purposes of processing

Primary: handling your contact or diagnostic request; scheduling and conducting sessions; preparing proposals; delivering contracted services; billing and compliance with legal obligations.

Secondary: sending you communications about IEC services, publications and regulatory updates. You may object to these purposes at any time by writing to contact@iecadvisory.com, without affecting the handling of your request.

IEC as processor in investigations

When IEC conducts investigations on behalf of a client organization, it acts as data processor with respect to the personal data the client (as controller) refers to it. In those cases, processing is governed by the services agreement and the controller’s documented instructions, and individuals’ rights are exercised before the controlling organization, without prejudice to IEC’s duty to assist.

Transfers and sub-processors

IEC does not sell or assign your personal data. To operate this site and its services, IEC relies on providers acting as processors (web hosting, email, online scheduling (Calendly) and diagnostic forms (Typeform)) which process data under their own notices and the contracted safeguards. Beyond these cases, transfers will only occur where the law requires or permits them without consent.

ARCO rights and withdrawal of consent

You may exercise your rights of access, rectification, cancellation and objection (ARCO), as well as withdraw consent or limit the use or disclosure of your data, by sending a request to contact@iecadvisory.com including: full name, a means to receive the response, a clear description of the right you wish to exercise, and documentation proving your identity. IEC will respond within the timeframes established by law.

Retention and security

Data is retained for as long as necessary for the purposes described and the applicable legal periods, under reasonable administrative, technical and physical security measures, with access restricted to the minimum necessary.

Cookies

This site does not use its own tracking or advertising cookies. Integrated third-party services (Calendly, Typeform) may use their own cookies, under their own privacy notices, when you interact with them.

Changes to this notice

IEC may update this notice; the current version will always be published on this page with its update date.