Privacy notice

Last updated: October 30, 2026

1. Data controller

Grupo CYFAC Médica ("CYFAC") is responsible for the processing of your personal data in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and other applicable regulations.

For any matter related to this notice, write to us at info@grupocyfac.com.

2. Personal data we process

We process the data you send us through the contact form on this website or by email, and the data you provide during a business relationship with us:

Identification and contact data: name, company, position, email address and phone number.
Transaction data: the medical equipment you want to buy, sell or import, its characteristics, its location and the agreed commercial terms.
Tax and billing data, when a transaction takes place: company name, tax ID (RFC) and tax address.

We do not request or process sensitive personal data.

3. Purposes

We use your data for the following purposes, which are necessary for the relationship you request:

To respond to and follow up on your requests for information.
To prepare quotes and proposals for buying, selling or importing medical equipment.
To carry out the transaction: equipment review, logistics, import procedures and delivery.
To invoice, collect and make payments.
To comply with the legal, tax and contractual obligations arising from the transaction.

We do not use your data for secondary purposes such as advertising, marketing or sales prospecting. Should we wish to do so in the future, we will ask for your consent first.

4. Transfers

We do not sell or assign your personal data. We may only share it, without requiring your consent, in the cases permitted by law:

With customs brokers, shipping and logistics companies, when necessary to import or deliver the equipment you requested.
With competent authorities, when required by law or by a duly grounded order.

We may also rely on service providers (for example, email, website hosting or accounting), who process the data only on our behalf and under confidentiality obligations.

5. ARCO rights and withdrawal of consent

You have the right to access, rectify or cancel your personal data, or to object to its processing (ARCO rights), and to withdraw any consent you have given us. To do so, send your request to info@grupocyfac.com including:

Your name and a means to send you our response.
A document proving your identity or, where applicable, the legal representation of the person acting on your behalf.
A clear description of the data and the right you wish to exercise.
Any other information that helps us locate your data.

We will respond through the same means, within the time limits established by law.

6. How to limit the use or disclosure of your data

You may ask us to limit the use or disclosure of your data by writing to info@grupocyfac.com. You may also register with the Public Registry to Avoid Advertising (REPEP) of Mexico's Federal Consumer Protection Agency (PROFECO).

7. Cookies and browsing data

This website does not use its own or third-party cookies for tracking or advertising. The server hosting the website may log technical data about your visit, such as IP address, browser type and date and time of access, solely for the operation and security of the website.

8. Changes to this notice

Any changes to this privacy notice will be published on this page, together with the date of the last update.

9. Authority

If you believe your right to personal data protection has been violated, you may contact the competent authority, which is currently Mexico's Secretariat of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).