Identity and address of the data controller

Xillion Capital, S.A.P.I. de C.V. (the "Controller"), domiciled in San Pedro Garza García, Nuevo León, Mexico, is responsible for the processing of the personal data you provide to us, pursuant to Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette on March 20, 2025, and other applicable regulations.

Data we collect

This site uses no forms that store information and no analytics tools that identify you. We collect personal data only when you contact us by email or telephone — name, contact details, and any information you voluntarily share — and, in the case of transaction counterparties, the identification documentation exchanged by both parties in KYC processes. Our infrastructure provider may log technical connection data (such as IP address) for security purposes.

Purposes

Necessary: responding to your contact request, building counterparty identification files, executing and administering transactions, and complying with legal obligations — including identification and, where applicable, reporting duties under anti-money-laundering rules. Optional: maintaining subsequent institutional communication. You may opt out of the latter by writing to [email protected].

Transfers

We do not transfer your data without your consent, except in the cases provided by law (including requirements from competent authorities) and to processors operating on the Controller's behalf within its technology and banking infrastructure.

ARCO rights and revocation

You may Access, Rectify, Cancel, or Object to the processing of your data (ARCO rights), as well as revoke your consent and limit its use, by sending a request to [email protected] including: full name, a means of reply, proof of identity, the right you are exercising, and a description of the data. We will respond within a maximum of twenty business days as required by law. KYC documentation linked to executed transactions is retained for the periods required by applicable law, even in the face of cancellation requests, which will be explained in the response.

Changes

Changes to this notice will be published on this page with their update date.