Privacy Notice

The controller is Searchlook, Mexico City, Mexico. Privacy contact: privacy@searchlook.mx.

This notice follows article 15 of the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), Diario Oficial de la Federación, 20 March 2025.

Two sets of data are covered.

Indexes. Searchlook keeps screening indexes (sanctions, sex-offender registries, court records, PEP and union lists, and tax-compliance lists, among others). A record can contain your name and identifiers that were on the source, such as CURP or RFC. Many of those sources are public sources under article 9, fraction II.

A rights request. If you file one, we process your name, the email you give us, any CURP or RFC you add, the description of your request, and the files you attach.

Sensitive data. Article 3, fraction VI, covers data that affect the most intimate sphere of a person, or whose misuse can cause discrimination or a serious risk. Party and PEP records can reveal political opinions. Sanctions and sex-offender registries can reveal data whose misuse can cause discrimination. An official ID you attach can also contain a photograph and other data from that document. We use the ID only to confirm that you are the person, or their representative (article 28).

Indexes, without asking you first. Article 9, fraction II, allows processing when the data appear in a public source. We use those records to answer a screening query from an API customer. Article 8 requires express written consent for sensitive data, except where article 9 applies. A public source is one of those exceptions.

Your rights request. We use the form and the files to identify you, find the record, and answer the right you chose: access, rectification, cancellation, or opposition. That processing is required to answer the request (article 9, fraction IV). We do not use the ID or the request for marketing. Checking the acceptance box on the form is how you accept this notice and the Terms of Use for data subjects.

We keep a rights-request file, including the ID and any rectification documents, for as long as the request is open and for the time needed to show how it was resolved.

Screening audit logs that contain a queried name are kept for 10 years under article 18 of the LFPIORPI, the anti-money-laundering record-keeping rule. That statute is not the personal-data law. Article 33, fraction IV, of the LFPDPPP allows us to refuse cancellation of a record that a legal obligation requires us to keep. Source records in an index can still be corrected or suppressed when the request is granted.

To limit use or disclosure, file an opposition at /data-rights or email privacy@searchlook.mx. We do not sell personal data.

Hosting and email providers process data as processors. We transfer data to an authority when a law or a founded order requires it (LFPDPPP article 36, fractions I and V). An API customer receives a screening result because they asked for that query. They are an independent controller of what they do with the result.

Only you, or your legal representative, can file (article 27). The form is public. No Searchlook account is required.

• Access: a copy of the personal data we hold about you.
• Rectification: correction of data that are inaccurate, incomplete, or out of date (article 23).
• Cancellation: suppression of data, subject to article 33.
• Opposition: an objection to a specific processing.

Every request must include your name, an email or other way to reach you, and an official ID, or the ID and proof of authority of your representative (article 28). A rectification must also describe the correction and include documents that support it (article 30).

We reply within 20 business days. If we grant the request, we carry it out within the following 15 business days (article 31). You can come back to the same request with the access key the form gives you.

You can also complain to the Secretaría Anticorrupción y Buen Gobierno, the authority that supervises the LFPDPPP.

We publish changes on this page with a new date. If we already have your email from a request, we send a material change there as well.

Grounds: LFPDPPP, Diario Oficial de la Federación, 20 March 2025, articles 3, 8, 9, 15, 21 to 25, 27, 28, 30, 31, 33, and 36, and LFPIORPI article 18 for the 10-year audit-log period only.