Privacy Policy
Last updated: April 2026
1. Identity of the Responsible Party
Flat Servicios Financieros S.A.P.I. de C.V., SOFOM E.N.R. ("Flat.mx"), with address in Mexico City, Mexico, is responsible for the collection, use, storage, and protection of your personal data in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations. For any inquiries regarding this privacy notice, please contact us at ra@flat.mx.
2. Personal Data Collected
We collect the following personal data that you provide directly: full name, email address, phone number, nationality, monthly income range, estimated property value, and property location of interest. We do not collect sensitive personal data such as religious beliefs, political affiliation, health information, or biometric data. Our website may also automatically collect technical information such as IP address, browser type, device data, and navigation behavior through cookies and similar technologies.
3. Purposes of Data Processing
Your personal data is used for the following primary purposes: (a) evaluating your mortgage loan eligibility and processing your inquiry; (b) providing personalized loan simulations and quotes; (c) contacting you regarding your mortgage application; (d) creating and managing your client profile; (e) complying with legal and regulatory obligations applicable to financial institutions in Mexico. Secondary purposes include: (f) sending communications about our products and services; (g) conducting internal analytics to improve our platform; (h) market studies and statistical analysis. You may opt out of secondary purposes at any time by writing to ra@flat.mx.
4. Transfer of Personal Data
Your personal data may be shared with the following third parties without requiring your prior consent, as permitted by the LFPDPPP: (a) Mexican financial authorities and regulatory bodies; (b) credit bureaus for creditworthiness assessment; (c) notaries public involved in your property transaction; (d) legal advisors and appraisers assisting with your mortgage process. Data may also be shared with technology service providers (cloud hosting, email delivery) that process data on our behalf under strict confidentiality agreements. International transfers may occur to providers outside Mexico, subject to appropriate safeguards.
5. ARCO Rights
You have the right to Access, Rectify, Cancel, or Oppose (ARCO) the processing of your personal data. To exercise these rights, send a written request to ra@flat.mx including: your full name, a clear description of the data and rights you wish to exercise, and a copy of an official identification document. We will respond within 20 business days. If approved, changes will take effect within 15 business days following our response.
6. Data Retention
We retain your personal data for the period necessary to fulfill the purposes described in this notice. Specifically: client and financial data is retained for 10 years after the conclusion of the contractual relationship, in compliance with Mexican financial regulations; loan simulation data is retained for 2 years; contact form submissions with no further engagement are retained for 1 year. After the applicable retention period, your data will be securely deleted or anonymized.
7. Security Measures
Flat.mx implements administrative, technical, and physical security measures to protect your personal data against unauthorized access, loss, alteration, or destruction. These include SSL/TLS encryption for data in transit, encrypted storage, restricted access controls, and periodic security reviews. Despite these measures, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience, remember your language preference, and collect anonymous usage statistics. You may configure your browser to reject cookies; however, some features may not function properly without them. We do not use cookies to collect personally identifiable information without your consent.
9. Changes to This Privacy Notice
Flat.mx reserves the right to modify this privacy notice at any time. Substantial changes will be communicated through our website at least 15 days before they take effect. Your continued use of our services after such changes constitutes acceptance of the updated notice.
10. Competent Authority
If you believe your data protection rights have been violated, you may file a complaint with the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI) at www.inai.org.mx.
Questions about this notice? Contact us at ra@flat.mx