COMPREHENSIVE PRIVACY NOTICE

 1. Identity and Address of the Data Controller

Andrés Soria de la Peña, acting as the legal representative of the coffee shop commercially known as “Local Local” (hereinafter, the “Data Controller”), with address for notifications at Avenida Constituyentes 455, Colonia América, Alcaldía Miguel Hidalgo, Zip Code 11820, Mexico City, Mexico (located inside Universidad Centro premises), is responsible for the use and protection of your personal data, in accordance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

2. Personal Data Collected

To fulfill the purposes described in this document, the Data Controller will collect the following personal data directly from you:

  • Identification and Contact Data: Full name, phone number, and email address.
  • Tax/Billing Data: Federal Taxpayer Registry (RFC), tax address, tax regime, and CFDI usage.

3. Purposes of Data Processing

The personal data collected will be used exclusively for the following primary purposes, which are necessary for the legal relationship between you and the Data Controller:

  • Issuing, processing, and sending electronic invoices (CFDI) derived from your purchases.
  • Preparing, sending, and following up on quotes for private or corporate events.
  • Addressing, managing, and following up on your special requests, questions, comments, complaints, or suggestions.

The Data Controller does not use your personal data for secondary, marketing, advertising, or commercial prospecting purposes.

4. Video Surveillance and Recording Notice (Audio and Video)

Separately and independently from the administrative processes described in the previous sections, the Data Controller informs you that, for security, surveillance, and crime prevention purposes, the business premises are equipped with a closed-circuit television (CCTV) system with continuous audio and video recording 24 hours a day.

The images, voices, and sounds captured by the cameras will be used solely to protect the physical integrity and property of customers, employees, visitors, suppliers, and the premises. These recordings are stored in a secure and restricted environment and are automatically deleted on a regular basis, unless their preservation is required to be submitted to a competent authority in the event of a legal or criminal incident.

5. Transfer of Personal Data

Please be advised that your personal data will not be sold, transferred, or shared with domestic or foreign third parties, except for those transfers necessary to comply with applicable tax obligations (such as the Tax Administration Service – SAT) or those formally requested by a competent authority mandate in accordance with Article 37 of the LFPDPPP.

6. Means to Exercise ARCO Rights

You have the right to know what personal data we hold about you, what we use it for, and the conditions of its use (Access). It is also your right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it removed from our records or databases when you consider it is not being used properly (Cancellation); and to object to the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights.

To exercise any of your ARCO rights, you must submit a written request directly to our establishment or via email at admonlocal455@gmail.com. The request must include:

  • Full name of the data owner and an address or other means (such as the originating email address) to communicate the response.
  • A copy of an official ID proving the identity of the owner (or the legal representative with the corresponding power of attorney).
  • A clear and precise description of the personal data regarding which you seek to exercise any of the ARCO rights.

The Data Controller will respond to your request within a maximum period of 20 business days, extendable under the terms established by law.

7. Revocation of Consent

You may revoke the consent you have granted us for the processing of your personal data. However, please note that for certain purposes (such as an already processed invoice), revocation may not be immediate due to current legal obligations. To process your revocation, you must send your request to the email admonlocal455@gmail.com following the same procedure outlined in the ARCO rights section.

8. Changes to the Privacy Notice

This privacy notice may undergo modifications, changes, or updates derived from new legal requirements, our own operational needs, or changes in the security measures of the establishment. Any changes will be available for physical consultation inside the coffee shop or upon request sent to our customer service email address.

Last updated: September 2026.