Privacy Notice

Who we are

Staffing in Mexico is the Mexico workforce and expansion practice of Gracemark Global Group. Services are delivered through Gracemark group entities, including a Mexican operating entity that acts as the employer of record and as the responsible party, responsable, for personal data processed in Mexico under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares.

Data controller and privacy contact: Staffing in Mexico, A Gracemark Global Group company, privacy@staffinginmexico.com. Where you contract with a specific Gracemark entity, that entity is named in your service agreement and is the responsible party for the personal data processed under it.

Data we collect

Information you submit: name, work email, company, phone or messaging contact, role or project details, headcount, locations, timing, and anything you write into a free-text field or planning tool.

Candidate information: when you apply to a role or join the talent network, we collect the contact details, work history and role preferences you provide.

Technical and attribution information: pages viewed, referring website, landing page, conversion page and campaign parameters such as UTM source, medium, campaign, term and content, plus standard server log data.

Why we use it

To respond to enquiries, prepare recommendations, scope services and issue proposals. To match candidates to roles and manage recruitment processes. To administer employment, payroll and service delivery where you become a client, employee or assigned worker. To measure marketing performance and improve the website. To meet legal, tax, labor and social-security obligations that apply to our services.

We rely on your request for services, our legitimate interest in operating and improving a business-to-business service, your consent where required, and legal obligation as applicable.

Who we share it with

Gracemark group companies and the delivery team assigned to your enquiry. Service providers that operate our infrastructure, including hosting, database, email and analytics providers, under contract and only for the purposes described here. Clients, where you are a candidate and have agreed to be presented. Authorities, where disclosure is legally required.

We do not sell personal data and we do not share it for unrelated third-party advertising.

International transfers and retention

We operate between Mexico and the United States, so data may be processed in either country and by providers in other jurisdictions. We retain enquiry and candidate data for as long as needed for the relationship and for the period required by applicable legal, tax and labor rules, then delete or anonymize it.

Your choices

Under Mexican law you hold ARCO rights: Acceso, access to the data we hold about you and how it is used; Rectificación, correction of data that is inaccurate or incomplete; Cancelación, deletion of data when it is no longer needed for the purposes described here or where processing is unlawful; and Oposición, objection to processing for specific purposes. You may also limit the use or disclosure of your data and withdraw consent where processing is based on consent.

How to exercise ARCO rights: send a request to privacy@staffinginmexico.com from the email address you provided, or by post to the entity named in your service agreement. Include your name, a contact address for our reply, a description of the right you are exercising and the data concerned, and documentation that identifies you or your legal representative. We confirm receipt, may ask for information needed to locate your records, and respond within the period established by the applicable Mexican data-protection framework. If you consider your request was not properly handled, you may escalate it to the competent Mexican data-protection authority.

Where data protection rules of another jurisdiction apply to you, for example because you contact us from the United States, Canada or the European Union, we honor equivalent access, correction, deletion, portability and objection rights through the same contact address.

Marketing emails include an unsubscribe link. Withdrawing marketing consent does not affect service communications related to an active engagement.

Security

Access to submitted data is restricted to the personnel who need it. Data in transit is encrypted, infrastructure access is controlled, and providers are selected on the basis of their security posture. No system can be guaranteed absolutely secure; report a suspected issue to security@staffinginmexico.com.