Bross Group Bross Group
ES — Español EN — English, idioma actual
Protection of personal data

Full privacy notice

This English text is a courtesy translation. The Spanish version of this aviso de privacidad is the one that governs for all legal purposes in Mexico; in the event of any discrepancy, the Spanish version prevails. You can read it at /aviso-de-privacidad/.

Last updated: September 18, 2026.

1. Data controller (Responsable)

Israel Bross, Contador Público (Certified Public Accountant) holding professional licence (cédula profesional) 14497571, who provides his services under the trade name Bross Group (hereinafter, «the Responsable»), with an address in La Paz, Baja California Sur, Mexico, is responsible for the processing of your personal data under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Mexico's federal law on the protection of personal data held by private parties) and other applicable regulations.

Contact for any privacy matter: [email protected] · WhatsApp +52 612 221 8028.

2. Personal data we process

  • Identification and contact: name, telephone, email address.
  • Tax data: RFC (the Mexican taxpayer registry number), CURP (the national population registry number), tax regime, tax domicile, constancia de situación fiscal (tax status certificate), opinión del cumplimiento (tax compliance opinion), tax returns and filing receipts, tax invoices (CFDI), income, withholdings and deductions.
  • Asset and financial data: details of mortgage loans and their interest, bank statements and the CLABE account number used for refund requests, and details of the payment of our fees.
  • Employment data (labor services for employers): the data of the workers that the employer provides to us in order to prepare contracts, files and calculations.
  • Data that may reveal health information: the invoices for medical expenses that you give us so that we can calculate personal deductions. They are used only for that calculation.

Asset data, financial data and data that may reveal health information are processed with your express consent, which you give by sending them to us for the provision of the service you request. If you provide us with data belonging to third parties (for example, your workers or dependants), you declare that you have their authorization.

3. Passwords and e.firma

As a general rule we do not ask for your SAT password (CIEC) or your e.firma (the SAT electronic signature): we tell you how to download the necessary documents yourself. If you prefer that we access your portal, we will only do so with your written authorization, exclusively for the authorized purpose, and we will delete the password once the service is completed.

4. Purposes

Primary (necessary for the service you request):

  • To attend to your request for information, review or assessment, and to quote.
  • To provide the accounting, tax and labor services you have contracted, including tax returns, refund requests and filings before the authorities.
  • To issue invoices (CFDI), collect fees and comply with our own tax obligations.
  • To follow up on requests from the authorities related to the service.

Secondary (not necessary for the service):

  • To send you reminders of tax deadlines and information about our services.
  • To know how you heard about us (advertisement, social media, website or referral) in order to measure our advertising.

If you do not want us to process your data for the secondary purposes, write to us at [email protected] or tell us on WhatsApp «I do not want informational messages». Your refusal does not affect the service you have contracted.

5. Transfers and remittances

Your data is communicated to the Servicio de Administración Tributaria (the SAT, Mexico’s tax authority), the IMSS, the Infonavit or other authorities only when it is necessary in order to carry out the service you contracted or to comply with a legal obligation; these transfers do not require your consent. In order to operate we use providers that process data on our behalf (site hosting, email, WhatsApp messaging and CFDI certification providers), who are bound to confidentiality. We do not sell or assign your data to third parties for commercial purposes.

6. Derechos ARCO and withdrawal of consent

You may access your data, rectify it, cancel it or object to its processing (these are the derechos ARCO: access, rectification, cancellation and opposition), as well as withdraw your consent, by sending a request to [email protected] with: your name, a means of replying to you, a copy of an identification document, a clear description of your request and, where applicable, the documents that support it. We will reply within the time limits established by law. Withdrawal or cancellation does not apply to data we are required to keep by legal obligation (for example, the tax documentation that the Código Fiscal de la Federación, the federal tax code, requires us to retain).

7. Tracking technologies

This site loads typefaces from Google Fonts, which means your browser communicates your IP address to Google. We may use advertising measurement tools from Meta (Facebook and Instagram) to know whether our advertisements generate contacts. You can disable cookies from your browser settings.

8. Changes to this notice

Any change will be published on this same page, with the date it was updated.